Fedora Core 10 FEDORA-2009-9671 (xmp)

The remote host is missing an update to xmp announced via advisory FEDORA-2009-9671. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-9901 (cyrus-imapd)

The remote host is missing an update to cyrus-imapd announced via advisory FEDORA-2009-9901. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

VLC Media Player < 1.0.2 Multiple Buffer Overflows (deprecated)

Binary data 5188.prm...

Fedora 11 : cyrus-imapd-2.3.15-1.fc11 (2009-9901)

Fixed multiple stack-based buffer overflows in libsieve, which allowed context- dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SIEVE script. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 11 : xmp-2.7.1-1.fc11 (2009-9675)

Update to latest stable release. Multiple bugfixes and memory leak fixes. Fixes for buffer overflows in DTT and OXM loaders. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean an...

apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management

Multiple integer overflows in the Apache Portable Runtime APR library and the Apache Portable Utility library aka APR-util 0.9.x and 1.3.x allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger crafted calls to the 1...

SuSE9 Security Update : enscript (YOU Patch Number 12275)

This update of enscript fixes buffer overflows in the setfilename CVE-2008-3863, processfile and readspecialescape function that can be exploited during file processing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : jasper (YOU Patch Number 12295)

Multiple potentially dangerous integer overflows, buffer overflows, and a problem with temporary files have been fixed. CVE-2008-3520, CVE-2008-3521, CVE-2008-3522 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE9 Security Update : Java2 (YOU Patch Number 12206)

Sun Java was updated to 1.4.2u18 to fix following security vulnerabilities : - Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to obtain sensitive informatio...

SuSE9 Security Update : gnome-vfs2,gnome-vfs2-doc (YOU Patch Number 10010)

This update fixes the following security problems : - The VFS scripts contained in GNOME are vulnerable to attacks on temporary files as well as command execution via shell meta-characters. These bugs can be exploited by accessing a malformated archive file. CVE-2004-0494 - Insufficient checks wh...

SuSE9 Security Update : enscript (YOU Patch Number 9867)

Unsanitised input can caues the execution of arbitrary commands via EPSF pipe support. This has been disabled, also upstream. CVE-2004-1184 - Due to missing sanitising of filenames it is possible that a specially crafted filename can cause arbitrary commands to be executed. CVE-2004-1185 -...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 5580)

This update fixes some overflows in the gd extension and the memnstr function that could crash php or even cause a buffer overflow. CVE-2008-3658 / CVE-2008-3659 / CVE-2008-3660 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2009-2140

Multiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org OOo, allow remote attackers to execute arbitrary code via a crafted EMF+ file, a similar issue to CVE-2008-2238...

CVE-2009-2140

Multiple heap-based buffer overflows in cppcanvas/source/mtfrenderer/emfplus.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org OOo, allow remote attackers to execute arbitrary code via a crafted EMF+ file, a similar issue to CVE-2008-2238...

Stack overflow

Multiple stack-based buffer overflows in Ultimate Player 1.56 beta allow remote attackers to execute arbitrary code via a long string in a 1 .m3u or 2 .upl playlist file...

CVE-2009-3235

Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by...

CVE-2009-3235

Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by...

CVE-2009-3235

Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by...

Stack overflow

Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project .psh file, related to the 1 celln.imagesm.image and 2 celln.sound.file fields...

CVE-2009-3214

Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project .psh file, related to the 1 celln.imagesm.image and 2 celln.sound.file fields...