openSUSE Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-329)

This update backports security fixes to the Mozilla XULRunner engine. It fixes following security issues : CVE-2008-0017 / MFSA 2008-54: The http-index-format MIME type parser nsDirIndexParser in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check...

Fedora 11 : webkitgtk-1.1.8-1.fc11 (2009-6166)

"WebKitGTK+ 1.1.8 contains many bug-fixes and updates including spell-checking support, enhanced error reporting, lots of ATK enhancements, support for copying images to the clipboard, and a new printing API since 1.1.5 that allows applications better control and monitoring of the printing proces...

[SECURITY] Fedora 11 Update: pam_krb5-2.3.5-1.fc11

This is pamkrb5, a pluggable authentication module that can be used with Linux-PAM and Kerberos 5. This module supports password checking, ticket creation, and optional TGT verification and conversion to Kerberos IV ticke ts. The included pamkrb5afs module also gets AFS tokens if so configured...

[SECURITY] Fedora 10 Update: pam_krb5-2.3.5-1.fc10

This is pamkrb5, a pluggable authentication module that can be used with Linux-PAM and Kerberos 5. This module supports password checking, ticket creation, and optional TGT verification and conversion to Kerberos IV ticke ts. The included pamkrb5afs module also gets AFS tokens if so configured...

Adobe Reader U3D RHAdobeMeta Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat and Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious web address or open a malicious file. The specific flaw exists...

Ubuntu USN-744-1 (lcms)

The remote host is missing an update to lcms announced via advisory USN-744-1. OpenVAS Vulnerability Test $Id: ubuntu7441.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7441.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-744-1 lcms Authors: Thomas Reinke...

[SECURITY] CVE-2009-0580 Apache Tomcat User enumeration vulnerability with FORM authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2009-0580: Tomcat information disclosure vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 4.1.0 to 4.1.39 Tomcat 5.5.0 to 5.5.27 Tomcat 6.0.0 to 6.0.18 The unsupported Tomcat 3.x, 4.0.x and 5.0.x version...

Sorinara Soritong MP3 Player Stack Overflow Vulnerability

This host is running Sorinara Soritong MP3 Player and is prone to Stack Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodsorinaramp3playerbofvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ Sorinara Soritong MP3 Player Stack Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

Mini Stream RM Downloader '.smi' File Buffer Overflow Vulnerability

Mini-stream RM Downloader is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mini Stream RM Downloader '.smi' File Buffer Overflow Vulnerability

The host is installed with Mini-stream RM Downloader and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodministreamrmdownloaderbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Mini Stream RM Downloader '.smi' File Buffer Overflow Vulnerability Authors: Madhuri D...

Easy RM to MP3 Converter Buffer Overflow Vulnerability

This host is installed with Easy RM to MP3 Converter and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodeasyrmtomp3convbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Easy RM to MP3 Converter Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright...

MDVA-2008:186-1 : evolution

Outgoing mails sent through the Evolution Exchange plugin were not always sent properly. Spell checking was not working properly when two different languages were enabled, causing all words to be detected as mistyped. Those bugs are fixed by this package updates, as well as massive performance...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : ghostscript, gs-gpl vulnerabilities (USN-743-1)

It was discovered that Ghostscript contained multiple integer overflows in its ICC color management library. If a user or automated system were tricked into opening a crafted Postscript file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invokin...

FreeBSD : multiple buffer overflows in xboing (e25566d5-6d3f-11d8-83a4-000a95bc6fae)

"Steve Kemp reports in a Debian bug submission : Due to improper bounds checking it is possible for a malicious user to gain a shell with membership group 'games'. The binary is installed setgid games. Environmental variables are used without being bounds-checked in any way, from the source code ...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : libpng vulnerabilities (USN-730-1)

It was discovered that libpng did not properly perform bounds checking in certain operations. An attacker could send a specially crafted PNG image and cause a denial of service in applications linked against libpng. This issue only affected Ubuntu 8.04 LTS. CVE-2007-5268, CVE-2007-5269 Tavis...

Ubuntu 8.10 : samba vulnerability (USN-680-1)

It was discovered that Samba did not properly perform bounds checking in certain operations. A remote attacker could possibly exploit this to read arbitrary memory contents of the smb process, which could contain sensitive information or possibly have other impacts, such as a denial of service...

Microsoft Windows Media Player MID File Integer Overflow Vulnerability

Windows Media Player is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Media Player MID File Integer Overflow Vulnerability

The host is installed with Windows Media Player and is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodmswmpintoverflowvuln.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft Windows Media Player MID File Integer Overflow Vulnerability Authors: Sharath S Copyright:...

FreeBSD : mnGoSearch buffer overflow in UdmDocToTextBuf() (87cc48fd-5fdd-11d8-80e3-0020ed76ef5a)

Jedi/Sector One reported the following on the full-disclosure list : Every document is stored in multiple parts according to its sections description, body, etc in databases. And when the content has to be sent to the client, UdmDocToTextBuf concatenates those parts together and skips metadata...

Mandriva Update for evolution MDVA-2008:186-1 (evolution)

Check for the Version of evolution OpenVAS Vulnerability Test Mandriva Update for evolution MDVA-2008:186-1 evolution Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...