1951 matches found
teTeX: Multiple buffer overflows
Background teTeX is a complete TeX distribution for editing documents. Description Mark Richters discovered a buffer overflow in the opensty function in file mkind.c. Other vulnerabilities have also been discovered in the same file but might not be exploitable CVE-2007-0650. Tetex also includes...
php security update
CentOS Errata and Security Advisory CESA-2007:0889 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting languag...
Moderate: Red Hat Security Advisory: php security update
Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server...
RHEL 3 : php (RHSA-2007:0889)
Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server...
CentOS 4 / 5 : php (CESA-2007:0890)
Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...
Fedora Core 6 : gd-2.0.35-1.fc6 (2007-692)
Wed Sep 5 2007 Ivana Varekova - 2.0.35-1 - update to 2.0.35 - fix several vulnerabilities 277421 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
php multiple integer overflows in gd
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a large 1 srcW or 2 srcH value to the a gdImageCopyResized function, or a large 3 sy height or 4 sx width value to the b...
Coppermine <= 1.4.12 Cross Site Scripting and Local File Inclusion
============================================================ Coppermine = 1.4.12 Cross Site Scripting and Local File Inclusion ============================================================ Author: L4teral l4teral 4t gmail com Impact: Cross Site Scripting/Local File Inclusion Status: patch availabl...
[SECURITY] Fedora Core 6 Update: gd-2.0.35-1.fc6
The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...
coppermine1412-xss.txt
============================================================ Coppermine Impact: Cross Site Scripting/Local File Inclusion Status: patch available ------------------------------ Affected software description: ------------------------------ Application: Coppermine Photo Gallery Version: = 1.4.12...
[SECURITY] Fedora 7 Update: gd-2.0.35-1.fc7
The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...
Mandrake Linux Security Advisory : tetex (MDKSA-2007:164)
Maurycy Prodeus found an integer overflow vulnerability in the way various PDF viewers processed PDF files. An attacker could create a malicious PDF file that could cause tetex to crash and possibly execute arbitrary code open a user opening the file. In addition, tetex contains an embedded copy ...
GLSA-200708-05 : GD: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200708-05 GD: Multiple vulnerabilities Xavier Roche discovered an infinite loop in the gdPngReadData function when processing a truncated PNG file CVE-2007-2756. An integer overflow has been discovered in the gdImageCreateTrueColo...
Mandrake Linux Security Advisory : gd (MDKSA-2007:153)
GD versions prior to 2.0.35 have a number of bugs which potentially lead to denial of service and possibly other issues. Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to have unspecified remote attack vecto...
GD: Multiple vulnerabilities
Background GD is a graphic library for fast image creation. Description Xavier Roche discovered an infinite loop in the gdPngReadData function when processing a truncated PNG file CVE-2007-2756. An integer overflow has been discovered in the gdImageCreateTrueColor function CVE-2007-3472. An error...
[ MDKSA-2007:153 ] - Updated gd packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:153 http://www.mandriva.com/security/ Package : gd Date : August 3, 2007 Affected: 2007.0, 2007.1, Corporate 3.0, Corporate 4.0 Problem Description: GD versions prior to 2.0.35 have a number of bugs which...
Slackware 11.0 / current : gd (SSA:2007-178-01)
GD is an open source code library for the dynamic creation of images. New gd packages are available for Slackware 11.0, and -current to fix possible security issues. Please see: http://www.libgd.org/ReleaseNote020035 for complete release notes. 'Upgrading is strongly recommended.' %NASLMINLEVEL...
T1lib - intT1_Env_GetCompletePath Buffer Overflow (PoC)
T1lib - intT1EnvGetCompletePath Buffer Overflow PoC source: https://www.securityfocus.com/bid/25079/info T1lib is prone to a buffer-overflow vulnerability because the library fails to perform boundary checks before copying user-supplied data to insufficiently sized memory buffers. An attacker can...
T1lib - 'intT1_Env_GetCompletePath' Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/25079/info T1lib is prone to a buffer-overflow vulnerability because the library fails to perform boundary checks before copying user-supplied data to insufficiently sized memory buffers. An attacker can exploit this issue to execute arbitrary machine cod...