CVE-2008-7174

The CVE-2008-7174 entry concerns multiple buffer overflows in the Jura Internet Connection Kit used with the Jura Impressa F90 coffee maker. The flaw is triggered by improper use of gets and sprintf, enabling remote attackers to cause a denial of service and potentially execute arbitrary code via...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security updates: CVE-2009-0200 Dyon Balding of Secunia Research has discovered a vulnerability, which can be exploited by opening a specially crafted Microsoft Word document. When reading a Microsoft Word document,...

Fedora 10 : xemacs-21.5.28-10.fc10 (2009-8997)

This update fixes multiple buffer overflows when reading large image files, or maliciously created image files whose headers misrepresent the actual image size. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

DSA-1880-1 openoffice.org - arbitrary code execution

Bulletin has no description...

openSUSE Security Update : OpenEXR (OpenEXR-1157)

This update of OpenEXR fixes seceral integer overflows CVE-2009-1720 and a denial-of-service probably execution of arbitrary code bug CVE-2009-1721. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : OpenEXR (OpenEXR-1157)

This update of OpenEXR fixes seceral integer overflows CVE-2009-1720 and a denial-of-service probably execution of arbitrary code bug CVE-2009-1721. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

Gentoo Security Advisory GLSA 200908-05 (subversion)

The remote host is missing updates announced in advisory GLSA 200908-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200908-06 (cdf)

The remote host is missing updates announced in advisory GLSA 200908-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

VMSA-2009-0012:VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues.

VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0012 VMware Security Advisory Synopsis: VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE...

Fedora Core 11 FEDORA-2009-8611 (htmldoc)

The remote host is missing an update to htmldoc announced via advisory FEDORA-2009-8611. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Gentoo Security Advisory GLSA 200908-05 (subversion)

The remote host is missing updates announced in advisory GLSA 200908-05. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200908-06 (cdf)

The remote host is missing updates announced in advisory GLSA 200908-06. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Mandrake Security Advisory MDVSA-2009:202 (memcached)

The remote host is missing an update to memcached announced via advisory MDVSA-2009:202. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

OpenOffice < 3.1.1 Multiple Buffer Overflows

The version of OpenOffice installed on the remote host is earlier than 3.1.1. Such versions are affected by several issues : - Parsing certain records in a document table could lead to heap-based overflows and arbitrary code execution. CVE-2009-0200 - Parsing certain records in specially crafted...

Adobe Acrobat < 8.1.2 / 7.1.0 Multiple Vulnerabilities

The version of Adobe Acrobat installed on the remote host is earlier than 8.1.2 or 7.1.0. Such versions are reportedly affected by multiple vulnerabilities : - A design error vulnerability may allow an attacker to gain control of a user's printer. - Multiple stack-based buffer overflows may allow...

openSUSE Security Update : xemacs (xemacs-1182)

Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xemacs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

openSUSE Security Update : xemacs (xemacs-1182)

Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xemacs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

libvorbis multiple security vulnerabilities

Multiple integer overflows and denial of service...

CVE-2009-2934

Multiple stack-based buffer overflows in xaudio.dll in Programmed Integration PIPL 2.5.0 and 2.5.0D allow remote attackers to execute arbitrary code via a long string in a 1 .pls or 2 .pl playlist file...

GLSA-200908-05 : Subversion: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200908-05 Subversion: Remote execution of arbitrary code Matt Lewis of Google reported multiple integer overflows in the libsvndelta library, possibly leading to heap-based buffer overflows. Impact : A remote attacker with commit...