CVE-2007-5159

The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions setuid root to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor...

CVE-2007-5159

CVE-2007-5159: The ntfs-3g package before 1.913-2.fc7 in Fedora 7 and ntfs-3g in Ubuntu 7.10/Gutsy assigns incorrect permissions (setuid root) to mount.ntfs-3g. This allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descript...

CVE-2007-5159: Undefined Security Weakness

The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions setuid root to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor...

CVE-2007-4968

Privatefirewall 5.0.14.2 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via kernel SSDT hooks for 1 NtOpenProcess and 2 NtOpenThread...

[48bits] Advisory : Multiple vulnerabilities in Norman NVC 5.82 driver

Abstract: There are multiple bugs in nvcoaft51 driver from Norman products. These bugs could be locally exploited by a malicious user in order to gain unlimited access to the system. Nvcoaft51 driver creates a device named NvcOa without a restrictive security descriptor, so any user can open it a...

[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...

[SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1281-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 21, 2007 - ------------------------------------------------------------------------ Package : clamav Vulnerability :...

Modifications introduced into the table to create penetration KIS6 download-vulnerability warning-the black bar safety net

Article author: gyzy E. S. T it www.gyzy.org） Information source: evil octal information security team www.eviloctal.com） This article has been published in the hacker line of Defense of the 2 0 0 7 year 2 monthly. The author and the hacker line of Defense on the retention of copyright, reproduce...

CVE-2007-0754

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor STSD atom size in a QuickTime movie...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sample Table Sample Descriptor STSD atom size in a QuickTime movie...

Mandrake Linux Security Advisory : clamav (MDKSA-2007:098)

iDefense discovered a stack-based overflow in ClamAV when processing negative values in .cab files. As well, multiple file descriptor leaks were also reported and fixed in chmunpack.c, pdf.c, and dblock.c. This update provides ClamAV 0.90.2 which corrects these problems and provides new...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

DEBIAN-CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

CVE-2007-2029: Undefined Security Weakness

File descriptor leak in the PDF handler in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service via a crafted PDF file...

Debian DSA-1281-1 : clamav - several vulnerabilities

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1745 It was discovered that a file descriptor leak in the CHM handler may lead to denial of service. - CVE-2007-1997 ...