[SECURITY] Fedora 8 Update: synce-gnomevfs-0.11-1.fc8

This is a gnome-vfs module that enables access to the Windows CE or Pocket PC file system through the gnome-vfs functions...

CVE-2008-0701

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content...

Code injection

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content...

CVE-2008-0701

CVE-2008-0701 affects Magnolia CE 3.5.x prior to 3.5.4. The ActivationHandler during import does not check permissions, allowing remote attackers to potentially activate a new item and add arbitrary content. This describes a permission-bypass in the import path with unknown exact impact. Remediat...

CVE-2008-0701

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content...

CORE-2007-1106: SynCE Remote Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs SynCE Remote Command Injection Advisory Information Title: SynCE Remote Command Injection Advisory ID: CORE-2007-1106 Advisory URL:...

SYMSA-2007-012: Microsoft Windows CE IGMP Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-012 Advisory Title: Microsoft Windows CE IGMP Denial of Service Author: Ollie Whitehouse / [email protected] Release Date: 22-10-2007...

Microsoft Windows CE Internet Explorer SSL未明远程拒绝服务漏洞

Microsoft Windows CE是为各种嵌入式系统和产品设计的一种压缩的、高效的、可升级的操作系统OS）。 Microsoft Windows CE包含的Internet Explorer处理SSL通信存在错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 在通过SSL访问部分站点时由于WININET.DLL存在问题可导致Internet Explorer出现访问错误而造成拒绝服务攻击。 Microsoft Windows CE 5.0 可采用如下升级补丁： http://support.microsoft.com/kb/837392/...

Microsoft Windows CE Internet Explorer Content-Type远程拒绝服务漏洞

Microsoft Windows CE是为各种嵌入式系统和产品设计的一种压缩的、高效的、可升级的操作系统OS）。 Microsoft Windows CE包含的Internet Explorer存在边界错误，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 当处理包含大型字符串值的Content-Type字段时存在异常错误，可导致InternetExplorer崩溃。 Microsoft Windows CE 6.0 可采用如下升级补丁： http://support.microsoft.com/kb/933679...

Windows CE < 5.0 / 6.0 Buffer Overflow

Binary data 4096.prm...

Windows CE < 5.1 Detection

Binary data 4095.prm...

Microsoft Windows CE畸形RNDIS报文远程拒绝服务漏洞

Microsoft Windows CE是为各种嵌入式系统和产品设计的一种压缩的、高效的、可升级的操作系统OS）。 Microsoft Windows CE不正确处理畸形RNDIS报文，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 如果Windows CE上的应用程序使用RNDIS设备驱动，在处理畸形的RNDIS报文和文件数据，可导致应用程序崩溃。 Microsoft Windows CE 5.0 可采用如下升级补丁： Microsoft Windows CE 5.0 Microsoft Windows CE 5.0 Platform Builder Monthly Update...

Microsoft Windows CE .NET Compact Framework Components Multiple Vulnerabilities

Description Components of the .NET Compact Framework for Microsoft Windows CE are prone to multiple vulnerabilities. Exploiting these issues may allow remote attackers to cause denial-of-service conditions, corrupt memory, or execute arbitrary machine code in the context of the affected...

Windows CE < 5.1 Detection

Binary data 4080.prm...

CVE-2007-3095

The vulnerability CVE-2007-3095 affects Symantec Reporting Server versions prior to 1.0.224.0 (including 1.0.197.0) as used with Symantec Client Security 3.1+ and SAV CE 10.1+. The issue is an authentication bypass that allows an attacker to disable authentication and access restricted functional...

Symantec Reporting Server Password Disclosure

SUMMARY The administrator password for Symantec Reporting Server could be disclosed after a failed login attempt. Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Affected Products Product | Affected...

CVE-2007-2322

NMMediaServer.exe in Nero MediaHome 2.5.5.0 and CE 1.3.0.4 allows remote attackers to cause a denial of service NULL dereference and application crash via a crafted packet that contains two CRLF sequences. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Ce-Admin news publishing system vulnerability analysis-vulnerability warning-the black bar safety net

The news publishing system is currently mainly used for a picture news release, due to the generated html, the browsing speed is very fast, resulting in a more modified version, currently found in at least 4 modified version, the user group of the majority, although modified, but still there are...

CVE-2006-6908

Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and the Bluetooth implementation in Windo...

CVE-2006-6908

CVE-2006-6908 describes a buffer overflow in the Widcomm Bluetooth Stack COM Server. Affected components include Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and the Bluetooth impleme...