Multiple libtiff library vulnerabilities

Multiple buffer overflows on TIFF images parsing, endless loop, integer overflows, memory corruption...

[SECURITY] [DSA 1160-1] New Mozilla packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1160-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1159-1] New Mozilla Thunderbird packages fix several problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 1159-1 [email protected] http://www.debian.org/security/ Martin Schulze August 28th, 2006 http://www.debian.org/security/faq -...

CVE-2006-3744

Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile bitmap images that trigger heap-based buffer overflows...

DEBIAN-CVE-2006-3744

Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile bitmap images that trigger heap-based buffer overflows...

CVE-2006-3744

Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile bitmap images that trigger heap-based buffer overflows...

CVE-2006-3744

CVE-2006-3744 affects ImageMagick prior to 6.2.9, with heap-based/ buffer overflows in the Sun Rasterfile decoder leading to remote code execution. Connected advisories also associate CVE-2006-3743 (XCF decoder) and CVE-2006-4144 (ReadSGIImage) with similar overflow issues. The combined effect is...

CVE-2006-3744

Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via crafted Sun Rasterfile bitmap images that trigger heap-based buffer overflows...

CVE-2006-3123

Multiple integer overflows in the 1 dodecrypt and 2 doencrypt functions in cfsfh.c in cfsd in Matt Blaze Cryptographic File System CFS 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service daemon crash by appending data to a file that is larger than 2 Gb...

CVE-2006-3123

Multiple integer overflows in the 1 dodecrypt and 2 doencrypt functions in cfsfh.c in cfsd in Matt Blaze Cryptographic File System CFS 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service daemon crash by appending data to a file that is larger than 2 Gb...

CVE-2006-3123

Multiple integer overflows in the 1 dodecrypt and 2 doencrypt functions in cfsfh.c in cfsd in Matt Blaze Cryptographic File System CFS 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service daemon crash by appending data to a file that is larger than 2 Gb...

security flaw

Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...

security flaw

Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...

security flaw

Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...

CVE-2006-3806

Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...

CVE-2006-3806

Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...

CVE-2006-3806

Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving 1 long strings in the toSource method of the Object, Array, and String objects...

GLSA-200607-02 : FreeType: Multiple integer overflows

The remote host is affected by the vulnerability described in GLSA-200607-02 FreeType: Multiple integer overflows Multiple integer overflows exist in a variety of files bdf/bdflib.c, sfnt/ttcmap.c, cff/cffgload.c, base/ftmac.c. Impact : A remote attacker could exploit these buffer overflows by...

FreeType: Multiple integer overflows

Background FreeType is a portable font engine. Description Multiple integer overflows exist in a variety of files bdf/bdflib.c, sfnt/ttcmap.c, cff/cffgload.c, base/ftmac.c. Impact A remote attacker could exploit these buffer overflows by enticing a user to load a specially crafted font, which cou...

CentOS 3 / 4 : tetex (CESA-2006:0160)

Updated tetex packages that fix several integer overflows are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input and creates a...