Hackers break into database, demand ransom

From WaPo Security Fix Brian Krebs Hackers last week broke into a Virginia state Web site used by pharmacists to track prescription drug abuse. They deleted records on more than 8 million patients and replaced the site’s homepage with a ransom note demanding $10 million for the return of the...

DEBIAN-CVE-2009-1515

Heap-based buffer overflow in the cdfreadsat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file. NOTE: some of these details are obtained from third...

MDVA-2008:091-1 : gnome-applets

The clock applet in GNOME could crash when using some specific locations or when using updated timezone data. The Recent Documents menu was not always able to start the right application for a specific document. Update: The previous gnome-applets package on x8664 was improperly built and included...

MDVA-2008:091 : gnome-panel

The clock applet in GNOME could crash when using some specific locations or when using updated timezone data. The Recent Documents menu was not always able to start the right application for a specific document. Updated packages for gnome-panel, libgweather, and gnome-applets fix these issues and...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:137)

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow. CVE-2008-2152 Also, according to bug 38874 decimal numbers on...

Mandriva Linux Security Advisory : openoffice.org (MDVSA-2008:095)

A vulnerability in HSQLDB before 1.8.0.9 in OpenOffice.org could allow user-assisted remote attackers to execute arbitrary Java code via crafted database documents CVE-2007-4575. A heap overflow was discovered in OpenOffice.org's EMF parser. An attacker could create a carefully crafted EMF file...

MDKA-2007:097 : shared-mime-info

The freedesktop.org MIME type database contains a wrong MIME type for HTML documents. This information is used by GNOME and other desktop environments to identify files and could cause trouble with the beagle desktop search and other applications. This update corrects this issue. %NASLMINLEVEL...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : mozilla-thunderbird, thunderbird vulnerabilities (USN-668-1)

Georgi Guninski, Michal Zalewsk and Chris Evans discovered that the same-origin check in Thunderbird could be bypassed. If a user were tricked into opening a malicious website, an attacker could obtain private information from data stored in the images, or discover information about software on t...

PDF JBIG2 MMR decoder buffer overflows

Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)

Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service crash via a crafted PDF file, related to 1 JBIG2SymbolDict::setBitmap and 2 JBIG2Stream::readSymbolDictSeg...

Mandriva Update for openoffice.org MDVSA-2008:137 (openoffice.org)

Check for the Version of openoffice.org OpenVAS Vulnerability Test Mandriva Update for openoffice.org MDVSA-2008:137 openoffice.org Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Update for shared-mime-info MDKA-2007:097 (shared-mime-info)

Check for the Version of shared-mime-info OpenVAS Vulnerability Test Mandriva Update for shared-mime-info MDKA-2007:097 shared-mime-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

PowerCHM 5.7 (hhp) Local Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl Title: PowerCHM 5.7 hhp Local Buffer Overflow Exploit Summary: With PowerCHM you can create your CHM files automatically from Html Files including .htm, .html and .mht, Text Files .txt, Microsoft Word Documents .doc and Adobe Acrobat Document .pdf...

PowerCHM 5.7 - hhp Local Buffer Overflow

PowerCHM 5.7 - hhp Local Buffer Overflow !/usr/bin/perl Title: PowerCHM 5.7 hhp Local Buffer Overflow Exploit Summary: With PowerCHM you can create your CHM files automatically from Html Files including .htm, .html and .mht, Text Files .txt, Microsoft Word Documents .doc and Adobe Acrobat Documen...

PowerCHM 5.7 - 'hhp' Local Buffer Overflow

!/usr/bin/perl Title: PowerCHM 5.7 hhp Local Buffer Overflow Exploit Summary: With PowerCHM you can create your CHM files automatically from Html Files including .htm, .html and .mht, Text Files .txt, Microsoft Word Documents .doc and Adobe Acrobat Document .pdf. Product web page:...

Pluck CMS 4.6.1 - module_pages_site.php Local File Inclusion

Pluck CMS 4.6.1 - modulepagessite.php Local File Inclusion ", "../apache/logs/access.log", "../../apache/logs/access.log", "../../../apache/logs/access.log", "../../../../apache/logs/access.log",...

Ubuntu Update for openoffice.org(2)/-amd64 vulnerability USN-482-1

Ubuntu Update for Linux kernel vulnerabilities USN-482-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4821.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openoffice.org2/-amd64 vulnerability USN-482-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for libxml2 vulnerabilities USN-673-1

Ubuntu Update for Linux kernel vulnerabilities USN-673-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6731.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxml2 vulnerabilities USN-673-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-482-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-619-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...