[SECURITY] [DSA 2055-1] New OpenOffice.org packages fix arbitrary code execution

--------------------------------------------------------------------------- Debian Security Advisory DSA-2055-1 [email protected] http://www.debian.org/security/ Nico Golde June 5th, 2010 http://www.debian.org/security/faq -...

[SECURITY] Fedora 11 Update: html2ps-1.0-0.3.b5.fc11

An HTML to PostScript converter written in Perl. Many possibilities to control the appearance. Support for processing multiple documents. A table of contents can be generated. Configurable page headers/footers. Automatic hyphenation and text justification can be selected...

HP MFP Digital Sending Software Detection

The remote Windows host contains HP MFP Digital Sending Software, an application that enables an HP Multifunction Peripheral MFP to send scanned documents directly to several types of destinations. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46675;...

Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability

CVE: CVE-2008-2364 The Apache 'modproxyhttp' module is prone to a denial-of-service vulnerability that affects the processing of interim responses. Attackers may exploit this issue to cause denial-of-service conditions. Reportedly, the issue affects Apache 2.2.8 and 2.0.63; other versions may als...

PDF JBIG2 multiple input validation flaws

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

PDF JBIG2 MMR decoder buffer overflows

Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

SuSE Update for acroread SUSE-SA:2010:022

Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2010:022 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SuSE Update for acroread SUSE-SA:2010:022

Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2010:022 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mozilla Foundation Security Advisory 2010-14

Mozilla Foundation Security Advisory 2010-14 Title: Browser chrome defacement via cached XUL stylesheets Impact: Low Announced: March 23, 2010 Reporter: Wladimir Palant Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.8 Firefox 3.0.18 Thunderbird 3.0.2 SeaMonkey 2.0.3...

Debian DSA-2028-1 : xpdf - multiple vulnerabilities

Several vulnerabilities have been identified in xpdf, a suite of tools for viewing and converting Portable Document Format PDF files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1188 and CVE-2009-3603 Integer overflow in SplashBitmap::SplashBitm...

Sql injection

Foxit Reader before 3.2.1.0401 allows remote attackers to 1 execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and 2 execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836...

Re-use of freed object due to scope confusion — Mozilla

A memory corruption flaw leading to code execution was reported by security researcher Nils of MWR InfoSecurity during the 2010 Pwn2Own contest sponsored by TippingPoint's Zero Day Initiative. By moving DOM nodes between documents Nils found a case where the moved node incorrectly retained its ol...

Mozilla Firefox < 3.5.9 Multiple Vulnerabilities

Binary data 801276.prm...

SeaMonkey < 2.0.4 Multiple Vulnerabilities

Binary data 5495.prm...

SeaMonkey < 2.0.4 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.4. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-16 - A select event handler for XUL tree items can be called after the item is deleted. MFSA...

Mozilla Firefox < 3.5.9 Multiple Vulnerabilities

Binary data 5494.prm...

Mozilla SeaMonkey < 2.0.4 Multiple Vulnerabilities

Binary data 801278.prm...

Mozilla Thunderbird < 3.0.4 Multiple Vulnerabilities

Binary data 5496.prm...

Mozilla Thunderbird < 3.0.4 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 3.0.4. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-16 - A select event handler for XUL tree items can be called after the item is deleted. MFSA...

Browser chrome defacement via cached XUL stylesheets — Mozilla

Mozilla developer Wladimir Palant reported that stylesheets used in remote XUL documents can wind up in the XUL cache where it can later be accessed by browser chrome for use in styling the user interface. A malicious website could use this issue to pollute a user's XUL cache and change style...