EUVD-2008-1796

Malware in sbrugna...

EUVD-2008-1569

Malware in sbrugna...

Buddyman: Comix - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Buddyman: Comix published at the 'play' market has multiple vulnerabilities...

Fedora Update for comix FEDORA-2008-2981

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for comix FEDORA-2008-2981

Check for the Version of comix OpenVAS Vulnerability Test Fedora Update for comix FEDORA-2008-2981 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for comix FEDORA-2008-2993

Check for the Version of comix OpenVAS Vulnerability Test Fedora Update for comix FEDORA-2008-2993 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for comix FEDORA-2008-2993

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200804-29 (comix)

The remote host is missing updates announced in advisory GLSA 200804-29. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200804-29 (comix)

The remote host is missing updates announced in advisory GLSA 200804-29. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200804-29 : Comix: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200804-29 Comix: Multiple vulnerabilities Comix does not properly sanitize filenames containing shell metacharacters when they are passed to the rar, unrar, or jpegtran programs CVE-2008-1568. Comix also creates directories with...

[ GLSA 200804-29 ] Comix: Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200804-29 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

Comix multiple security vulnerabilities

Shell characters vulnerability, symbolic links problem...

Comix: Multiple vulnerabilities

Background Comix is a GTK comic book viewer. Description Comix does not properly sanitize filenames containing shell metacharacters when they are passed to the rar, unrar, or jpegtran programs CVE-2008-1568. Comix also creates directories with predictable names CVE-2008-1796. Impact A remote...

Denial of service

Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service...

CVE-2008-1796

Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service...

CVE-2008-1796

Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service...

CVE-2008-1796

Removed by vendor...

CVE-2008-1796

Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service...

CVE-2008-1796

CVE-2008-1796 affects Comix 3.6.4 and earlier, where temporary directories are created with predictable names, enabling a local user to cause a denial of service. The issue is described in multiple sources (e.g., GLSA 200804-29) as a local DoS due to predictable directory names. Affected package ...

Fedora 7 : comix-3.6.4-6.fc7 (2008-2993)

Several security flaws are reported against comix 3.6.4. One issue is that comix uses os.popen to execute external commands without handling filenames properly. This may allow malicios users to execute arbitrary commands by opening some files with crafted names. This issue is now identified as...