Cross site scripting

Cross-site scripting XSS vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search...

Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit

No description provided by source. html !-- !!!NOT PRIVATE PLEASE DISTRIBUTE!!! Zer0Day Creative Software AutoUpdate Engine ActiveX Stack-Overflow CacheFolder Exploit by BitKrush BitKrush +A.T.+ G.M.A.I.L.D.0.T.C.0.M. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder...

creative-overflow.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...

Creative Software AutoUpdate Engine - ActiveX Stack Overflow

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...

[SECURITY] Fedora 8 Update: cups-1.3.7-2.fc8

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

Debian DSA-1548-1 : xpdf - several vulnerabilities

Kees Cook discovered a vulnerability in xpdf, a set of tools for display and conversion of Portable Document Format PDF files. The Common Vulnerabilities and Exposures project identifies the following problem : - CVE-2008-1693 Xpdf's handling of embedded fonts lacks sufficient validation and type...

DEBIAN-CVE-2008-1693

The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, relate...

DSA-1548-1 xpdf

Bulletin has no description...

[SECURITY] [DSA 1537-1] New xpdf packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1537-1 [email protected] http://www.debian.org/security/ Devin Carraway April 02, 2008 http://www.debian.org/security/faq -...

PT-2008-2963 · Red Hat · Cups +1

Name of the Vulnerable Software and Affected Versions: CUPS versions in Red Hat Enterprise Linux 3 and 4 Description: The issue is caused by an integer overflow in the pdftops filter in CUPS, which can be exploited by remote attackers to execute arbitrary code via a crafted PDF file. This issue i...

[SECURITY] Fedora 8 Update: boost-1.34.1-7.fc8

Boost provides free peer-reviewed portable C++ source libraries. The emphasis is on libraries which work well with the C++ Standard Library, in the hopes of establishing "existing practice" for extensions and providing reference implementations so that the Boost libraries are suitable for eventua...

[SECURITY] Fedora 8 Update: ghostscript-8.61-8.fc8

Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...

[SECURITY] Fedora 7 Update: boost-1.33.1-15.fc7

Boost provides free peer-reviewed portable C++ source libraries. The emphasis is on libraries which work well with the C++ Standard Library, in the hopes of establishing "existing practice" for extensions and providing reference implementations so that the Boost libraries are suitable for eventua...

Debian Security Advisory DSA 936-1 (libextractor)

The remote host is missing an update to libextractor announced via advisory DSA 936-1. infamous41md and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in libextractor, a library to extract arbitrary meta-data from...

Debian: Security Advisory (DSA-982-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-979-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1019-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 134-1 (ssh)

The remote host is missing an update to ssh announced via advisory DSA 134-1. OpenVAS Vulnerability Test $Id: deb1341.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 134-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 984-1 (xpdf)

The remote host is missing an update to xpdf announced via advisory DSA 984-1. Derek Noonburg has fixed several potential vulnerabilities in xpdf, the Portable Document Format PDF suite. The old stable distribution woody does not seem to be affected. OpenVAS Vulnerability Test $Id: deb9841.nasl...

Debian Security Advisory DSA 932-1 (xpdf)

The remote host is missing an update to xpdf announced via advisory DSA 932-1. infamous41md and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, that can lead to a denial of service by crashing the application or possibly to the execution...