Ubuntu Update for libxml2 vulnerabilities USN-673-1

Ubuntu Update for Linux kernel vulnerabilities USN-673-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6731.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxml2 vulnerabilities USN-673-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

openSUSE 10 Security Update : amarok (amarok-5932)

This update of amarok fixes several integer overflows and unchecked memory allocations that can be exploited by malformed Audible digital audio files. These bugs could be used in a user-assisted attack scenario to execute arbitrary code remotely. CVE-2009-0135, CVE-2009-0136 %NASLMINLEVEL 70300 C...

USN-673-1: libxml2 vulnerabilities

Drew Yao discovered that libxml2 did not correctly handle certain corrupt XML documents. If a user or automated system were tricked into processing a malicious XML document, a remote attacker could cause applications linked against libxml2 to enter an infinite loop, leading to a denial of service...

Mandrake Linux Security Advisory : e2fsprogs (MDKSA-2007:242)

Rafal Wojtczuk of McAfee AVERT Research found that e2fsprogs contained multiple integer overflows in memory allocations, based on sizes taken directly from filesystem information. These flaws could result in heap-based overflows potentially allowing for the execution of arbitrary code. The update...

DSA-1422-1 e2fsprogs - arbitrary code execution

Bulletin has no description...

GLSA-200711-15 : FLAC: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200711-15 FLAC: Buffer overflow Sean de Regge reported multiple integer overflows when processing FLAC media files that could lead to improper memory allocations resulting in heap-based buffer overflows. Impact : A remote attacker...

Ubuntu 5.10 / 6.06 LTS / 6.10 : enigmail vulnerability (USN-427-1)

Mikhail Markin reported that enigmail incorrectly handled memory allocations for certain large encrypted attachments. This caused Thunderbird to crash and thus caused the entire message to be inaccessible. Note that Tenable Network Security has extracted the preceding description block directly...