USN-2123-1: file vulnerabilities

It was discovered that file incorrectly handled Composite Document files. An attacker could use this issue to cause file to crash, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu 12.04 LTS. CVE-2012-1571 Bernd Melchers discovered that file incorrectly handle...

Kelihos P2P Botnet Leveraging Composite Blocking Lists

Kelihos, the peer-to-peer botnet with nine lives, keeps popping up with new capabilities that enable it to sustain itself and make money for its keepers by pushing spam, harvesting credentials and even stealing Bitcoins. According to a number of sources, Kelihos is now leveraging legitimate and...

Oracle Linux 4 : xorg-x11 (ELSA-2007-0898)

From Red Hat Security Advisory 2007:0898 : Updated X.org packages that correct a flaw in X.Org's composite extension are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. X.org is an open source...

pixman: stack-based buffer overflow

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fastcompositescaledbilinear function in pixman-inlines.h, which...

VulnCheck KEV: CVE-2010-2862

Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType font with a large maxCompositePoints value in a Maximum Profile maxp table...

GLSA-201209-14 : file: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201209-14 file: Denial of Service Multiple out-of-bounds read errors and invalid pointer dereference errors have been found in cdf.c. Impact : A remote attacker could entice a user to open a specially crafted Composite Document Fi...

file: Denial of service

Background file is a utility that guesses a file format by scanning binary data for patterns. Description Multiple out-of-bounds read errors and invalid pointer dereference errors have been found in cdf.c. Impact A remote attacker could entice a user to open a specially crafted Composite Document...

Researcher Finds Three New Exploits Targeting Latest IE Zero-Day

A researcher at AlienVault has discovered three new servers delivering exploits targeting the latest zero-day vulnerability in Internet Explorer. Jamie Blasco, AlienVault Labs manager, said the one of the servers is delivering a new malware payload, and all of them appear to be targeting defense...

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

DEBIAN-CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

Out-of-bounds

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

CVE-2012-1571

CVE-2012-1571 describes DoS via crafted CDF files that trigger out-of-bounds read or invalid pointer dereference in the File Information (fileinfo) component (libmagic) used by file and PHP. Public Advisories confirm the issue arises from an incomplete fix and that affected products include the f...

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

CVE-2012-1571

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference...

xorg-x11-server security and bug fix update

1.10.6-1 - xserver 1.10.6 - Use git-style patch names - compsize.h, glxcmds.h: Copy from upstream git since they fell out of the upstream tarball 1.10.4-15 - Undo regression introduced in Patch8007 732467 1.10.4-14 - xserver-1.10.4-sync-revert.patch: Revert an edge-case change in IDLETIME that...

Debian Security Advisory DSA 2422-1 (file)

The remote host is missing an update to file announced via advisory DSA 2422-1. OpenVAS Vulnerability Test $Id: deb24221.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2422-1 file Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Adobe Reader复合字型索引签名扩展远程代码执行漏洞

BUGTRAQ ID: 49581 CVE ID: CVE-2011-2441 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。Acrobat是1993年推出针对企业、技术人员和创意专业人士的系列产品，使智能文档的传送和协作更为灵活、可靠和安全。 Adobe Acrobat和Reader在实现上存在远程栈缓冲区溢出漏洞，远程攻击者可利用此漏洞以当前用户权限执行任意代码。 Adobe Reader处理复合字型时存在特定漏洞。当字型多于0x7FFF...

[SECURITY] Fedora 11 Update: ImageMagick-6.5.1.2-2.fc11

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

CVE-2009-3521

Multiple cross-site scripting XSS vulnerabilities in the Visualization Engine VE in IBM Tivoli Composite Application Manager for WebSphere ITCAM 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...