CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

PT-2012-1066

Name of the Vulnerable Software and Affected Versions file versions prior to 5.11 libmagic versions prior to 5.11 Description The issue is related to multiple vulnerabilities in the file package, which can lead to a denial of service crash when a crafted Composite Document File CDF is processed...

Debian Security Advisory DSA 2422-2 (file)

The remote host is missing an update to file announced via advisory DSA 2422-2. OpenVAS Vulnerability Test $Id: deb24222.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2422-2 file Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2422-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2422-2] file regression fix

------------------------------------------------------------------------- Debian Security Advisory DSA-2422-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 09, 2012 http://www.debian.org/security/faq -...

Mandriva Linux Security Advisory : file (MDVSA-2012:035)

Multiple out-of heap-based buffer read flaws and invalid pointer dereference flaws were found in the way file, utility for determining of file types processed header section for certain Composite Document Format CDF files. A remote attacker could provide a specially crafted CDF file, which once...

Debian Security Advisory DSA 2422-1 (file)

The remote host is missing an update to file announced via advisory DSA 2422-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[SECURITY] [DSA 2422-1] file security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2422-1 [email protected] http://www.debian.org/security/ Florian Weimer February 29, 2012 http://www.debian.org/security/faq -...

Debian DSA-2422-2 : file - missing bounds checks

The file type identification tool, file, and its associated library, libmagic, do not properly process malformed files in the Composite Document File CDF format, leading to crashes. Note that after this update, file may return different detection results for CDF files well-formed or not. The new...

[SECURITY] [DSA 2422-1] file security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2422-1 [email protected] http://www.debian.org/security/ Florian Weimer February 29, 2012 http://www.debian.org/security/faq -...

DSA-2422-1 file - missing bounds check

Bulletin has no description...

[SECURITY] Fedora 14 Update: python-feedparser-5.0.1-1.fc14

Universal Feed Parser is a Python module for downloading and parsing syndicated feeds. It can handle RSS 0.90, Netscape RSS 0.91, Userland RSS 0.91, RSS 0.92, RSS 0.93, RSS 0.94, RSS 1.0, RSS 2.0, Atom 0.3, Atom 1.0, and CDF feeds. It also parses several popular extension modules, including Dubli...

[SECURITY] Fedora 13 Update: python-feedparser-5.0.1-1.fc13

Universal Feed Parser is a Python module for downloading and parsing syndicated feeds. It can handle RSS 0.90, Netscape RSS 0.91, Userland RSS 0.91, RSS 0.92, RSS 0.93, RSS 0.94, RSS 1.0, RSS 2.0, Atom 0.3, Atom 1.0, and CDF feeds. It also parses several popular extension modules, including Dubli...

Internet Explorer CDF Cross Domain Scripting (MS05-014; CVE-2005-0056)

Microsoft Internet Explorer employs the concept of security zones, which enables the browser to apply different security policies based on the origin of the content that is being rendered. For instance, separate restrictions may be set for remote content and for local content. As a rule, Internet...

DEBIAN-CVE-2009-2830

Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Common Document Format CDF file. NOTE: this might overlap CVE-2009-1515...

CVE-2009-3930

Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document aka cdf file that triggers a buffer overflow...

CVE-2009-2830

Multiple buffer overflows in Christos Zoulas file before 5.03 in Apple Mac OS X 10.6.x before 10.6.2 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Common Document Format CDF file. NOTE: this might overlap CVE-2009-1515...

Gentoo Security Advisory GLSA 200908-06 (cdf)

The remote host is missing updates announced in advisory GLSA 200908-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200908-06 (cdf)

The remote host is missing updates announced in advisory GLSA 200908-06. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...