65 matches found
CVE-2014-3421: Improper Link Resolution Before File Access
lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file...
PT-2014-5308
Name of the Vulnerable Software and Affected Versions GNU Emacs versions 24.3 and earlier Description The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file. This is related to the lisp/gnus/gnus-fun.el component. Recommendations Fo...
Debian Security Advisory DSA 957-1 (imagemagick)
The remote host is missing an update to imagemagick announced via advisory DSA 957-1. Florian Weimer discovered that delegate code in ImageMagick is vulnerable to shell command injection using specially crafted file names. This allows attackers to encode commands inside of graphic commands. With...
Ubuntu 4.10 / 5.04 / 5.10 : imagemagick vulnerabilities (USN-246-1)
Florian Weimer discovered that the delegate code did not correctly handle file names which embed shell commands CVE-2005-4601. Daniel Kobras found a format string vulnerability in the SetImageInfo function CVE-2006-0082. By tricking a user into processing an image file with a specially crafted fi...
