[SECURITY] Fedora 8 Update: glib2-2.14.6-2.fc8

GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system. This package provides versi...

GNOME Rhythmbox畸形播放列表文件拒绝服务漏洞

BUGTRAQ ID: 29958 Rhythmbox是GNOME桌面环境中默认的音乐播放及管理软件。 Rhythmbox处理畸形格式的播放列表文件时存在漏洞，如果用户使用Rhythmbox加载了畸形的播放列表文件（pls）的话，就会导致播放器出现段访问错误而崩溃。 GNOME Rhythmbox 0.11.5 GNOME ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.gnome.org/ playlist X-GNOME-Title= Title= A 1475 NumberOfEntries=0...

Gnome Evolution html_engine_get_view_width()拒绝服务漏洞

BUGTRAQ ID: 29961 Evolution是个人和工作组信息管理解决方案，可使用在Linux和Unix操作系统下，集成Email、日历、会议安排、联系人管理等功能。 Evolution的htmlenginegetviewwidth函数没有正确地解析HTML编码的邮件消息，如果远程攻击者向Evolution发送了特制的邮件消息的话，就会导致客户端崩溃。 GNOME Evolution 2.22.2 GNOME ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

evolution security update

CentOS Errata and Security Advisory CESA-2008:0514 Updated evolution packages that fix two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the...

GNOME Rhythmbox 0.11.5 - .Playlist File Denial of Service

GNOME Rhythmbox 0.11.5 - .Playlist File Denial of Service source: https://www.securityfocus.com/bid/29958/info GNOME Rhythmbox is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Exploiting this issue allows remote attackers to crash the...

GNOME Evolution 2.22.2 - html_engine_get_view_width() Denial of Service

GNOME Evolution 2.22.2 - htmlenginegetviewwidth Denial of Service source: https://www.securityfocus.com/bid/29961/info GNOME Evolution is prone to a denial-of-service vulnerability when handling email messages that contain specially crafted HTML. Successful attacks will crash the application...

Gnome / Evolution HTML parsing memory corruption

Memory corruption on HTML parsing, including HTML messages in Evolution...

openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5172)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnome-screensaver-5172. The text description of this...

GNOME Evolution 2.22.2 - 'html_engine_get_view_width()' Denial of Service

source: https://www.securityfocus.com/bid/29961/info GNOME Evolution is prone to a denial-of-service vulnerability when handling email messages that contain specially crafted HTML. Successful attacks will crash the application. Evolution 2.22.2 is vulnerable; other versions may also be affected...

GNOME Rhythmbox 0.11.5 - '.Playlist' File Denial of Service

source: https://www.securityfocus.com/bid/29958/info GNOME Rhythmbox is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Exploiting this issue allows remote attackers to crash the application and trigger denial-of-service conditions, denying...

SuSE 10 Security Update : gnome-screensaver (ZYPP Patch Number 5179)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33251;...

Unfixed XSS vulnerability at www.gnome-look.org

Security researcher C1c4Tr1Z, has submitted on 20/06/2008 a cross-site-scripting XSS vulnerability affecting www.gnome-look.org, which at the time of submission ranked 41515 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...

openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5175)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnome-screensaver-5175. The text description of this...

Evolution: User-assisted execution of arbitrary code

Background Evolution is the mail client of the GNOME desktop environment. Description Alin Rad Pop Secunia Research reported two vulnerabilities in Evolution: A boundary error exists when parsing overly long timezone strings contained within iCalendar attachments and when the ITip formatter is...

openSUSE 10 Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-5317)

This update fixes multiple vulnerabilities reported by iDefense : - CVE-2008-2360 - RENDER Extension heap buffer overflow - CVE-2008-2361 - RENDER Extension crash - CVE-2008-2362 - RENDER Extension memory corruption - CVE-2008-1379 - MIT-SHM arbitrary memory read - CVE-2008-1377 - RECORD and...

CentOS 4 : evolution28 (CESA-2008:0515)

Updated evolution28 packages that address two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring,...

[SECURITY] Fedora 7 Update: evolution-2.10.3-10.fc7

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The tools which make up Evolution will be tightly integrated with one another and act as a seamless personal information-management tool...

[SECURITY] Fedora 8 Update: evolution-2.12.3-5.fc8

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The tools which make up Evolution will be tightly integrated with one another and act as a seamless personal information-management tool...

[SECURITY] Fedora 9 Update: evolution-2.22.2-2.fc9

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The components which make up Evolution are tightly integrated with one another and act as a seamless personal information-management tool...

RHEL 4 : evolution28 (RHSA-2008:0515)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0515 advisory. Evolution is the integrated collection of e-mail, calendaring, contact management, communications and personal information management PIM...