BlackBerry Enterprise Server / Attachment Service PDF Distiller Buffer Overflow (KB25382)

The version of BlackBerry Enterprise Server installed on the remote host is reportedly affected by a buffer overflow vulnerability in the PDF distiller component of the BlackBerry Attachment Service. By sending a specially crafted PDF file and having it opened on a BlackBerry smartphone, an...

CVE-2010-2604

Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, allow remote attackers to execute arbitrary code via a crafted PDF file...

Buffer overflow

Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, allow remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2010-2604

CVE-2010-2604 describes multiple buffer overflows in the PDF Distiller of the BlackBerry Attachment Service component. Affected products: Research In Motion/BlackBerry Enterprise Server 4.1.3–5.0.2 and Enterprise Server Express 5.0.1–5.0.2. The vulnerability lets remote attackers execute arbitrar...

CVE-2010-2604

Multiple buffer overflows in the PDF Distiller in the BlackBerry Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server 4.1.3 through 5.0.2, and Enterprise Server Express 5.0.1 and 5.0.2, allow remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2010-0215

ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access restrictions, and 1 delete an attachment or 2 subscribe to an object, via a crafted URL...

PT-2011-1360 · A51 · Activecollab

Name of the Vulnerable Software and Affected Versions: ActiveCollab versions prior to 2.3.2 Description: The issue allows remote authenticated users to bypass intended access restrictions. This can lead to unauthorized actions such as deleting an attachment or subscribing to an object, which can ...

[SECURITY] Fedora 13 Update: clamav-0.96.5-1300.fc13

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

CVE-2010-2602

Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF document...

CVE-2010-2602

Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF document...

Cross site request forgery (csrf)

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote authenticated users to bypass intended access restrictions via this request...

CVE-2010-4546

CVE-2010-4546 affects IBM Lotus Notes Traveler prior to 8.5.1.2. The issue arises when handling an attachment download request for an e-mail message with a Prevent Copy attribute, where the system does not reject the request. This allows remote authenticated users to bypass intended access restri...

CVE-2010-4546

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote authenticated users to bypass intended access restrictions via this request...

[SECURITY] Fedora 14 Update: clamav-0.96.5-1400.fc14

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

Basic auth authentication does not allow files to be attached in 4.2

From the customer support case quote When using osauthType=basic to login to JIRA 4.2 a user is able to upload an attachment as a temporary file, but is unable to attach the temporary file to the issue. We noticed the exact same behavior ... had worked with JIRA 4.1.2. quote The Atlassian support...

Fedora Update for clamav FEDORA-2010-15443

Check for the Version of clamav OpenVAS Vulnerability Test Fedora Update for clamav FEDORA-2010-15443 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Be Alert : "Postcard" computer virus is Out ~~ !!

WARNINGS have been issued this weekend about a highly destructive computer virus which has been released under the guise of a postcard greeting. It is strongly advised that computer users should not open any message with an attachment entitled "Postcard" or "Postcard from Hallmark", regardless of...

BlackBerry Enterprise Server / Attachment Service PDF Distiller Buffer Overflow (KB24547)

The version of BlackBerry Enterprise Server on the remote host is reportedly affected by a buffer overflow vulnerability in the PDF distiller component of the BlackBerry Attachment Service. By sending a specially crafted PDF file and having it opened on a BlackBerry smartphone, an attacker may be...

Microsoft Outlook - 'ATTACH_BY_REF_RESOLVE' File Execution (MS10-045) (Metasploit)

$Id: ms10045outlookrefresolve.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Outlook - 'ATTACH_BY_REF_ONLY' File Execution (MS10-045) (Metasploit)

$Id: ms10045outlookrefonly.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...