Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities

Background Mozilla Firefox is a cross-platform web browser from Mozilla. SeaMonkey is a free, cross-platform Internet suite. Description Multiple vulnerabilities have been reported in Mozilla Firefox and SeaMonkey. Various errors in the browser engine and the Javascript engine can be exploited to...

3proxy: Denial of service

Background 3proxy is a really tiny cross-platform proxy servers set, including HTTP, HTTPS, FTP, SOCKS and POP3 support. Description 3proxy contains a double free vulnerability in the ftpprchild function, which frees param-hostname and calls the parsehostname function, which in turn attempts to...

Python: User-assisted execution of arbitrary code

Background Python is an interpreted, interactive, object-oriented programming language. Description Slythers Bro discovered multiple integer overflows in the imageop module, one of them in the tovideo method, in various locations in files imageop.c, rbgimgmodule.c, and also in other files. Impact...

[SECURITY] Fedora 8 Update: hugin-0.6.1-11.fc8

hugin can be used to stitch multiple images together. The resulting image c an span 360 degrees. Another common use is the creation of very high resolution pictures by combining multiple images. It uses the Panorama Tools as backe nd to create high quality images...

CVE-2007-4829

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

SKK Tools: Insecure temporary file creation

Background SKK is a Japanese input method for Emacs. Description skkdic-expr.c insecurely writes temporary files to a location in the form $TMPDIR/skkdic$PID.pag,dir,db, where $PID is the process ID. Impact A local attacker could create symbolic links in the directory where the temporary files ar...

CVE-2007-5273

Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound...

libvorbis: Multiple vulnerabilities

Background libvorbis is the reference implementation of the Xiph.org Ogg Vorbis audio file format. It is used by many applications for playback of Ogg Vorbis files. Description David Thiel of iSEC Partners discovered a heap-based buffer overflow in the 01inverse function in res0.c and a boundary...

RPCSEC_GSS library: Buffer overflow

Background librpcsecgss is an implementation of RPCSECGSS for secure RPC communications. Description A stack based buffer overflow has been discovered in the svcauthgssvalidate function in file lib/rpc/svcauthgss.c when processing an overly long string in a RPC message. Impact A remote attacker...

BEA JRockit: Multiple vulnerabilities

Background BEA JRockit provides tools, utilities, and a complete runtime environment for developing and running applications using the Java programming language. Description An integer overflow vulnerability exists in the embedded ICC profile image parser CVE-2007-2788, an unspecified vulnerabili...

Yahoo! Messenger (YVerInfo.dll <= 2007.8.27.1) ActiveX BoF Exploit

Exploit for unknown platform in category remote exploits ================================================================== Yahoo! Messenger YVerInfo.dll that functions are safely scriptable and exploitable by HeapSpray Technique Tested : Windows XP Professional SP2 all patched,Internet Explorer ...

BIND: Weak random number generation

Background ISC BIND is the Internet Systems Consortium implementation of the Domain Name System DNS protocol. Description Amit Klein from Trusteer reported that the random number generator of ISC BIND leads, half the time, to predictable 1 chance to 8 query IDs in the resolver routine or in zone...

Microsoft Vista侧栏RSS源小工具跨站脚本漏洞（MS07-048）

BUGTRAQ ID: 25287 CVECAN ID: CVE-2007-3033 Vista是微软发布的最新的操作系统。 Vista侧栏中的RSS源小工具中存在漏洞，远程攻击者可能利用此漏洞导致跨站脚本执行。 在解析RSS源中的某些单元时，可能会渲染单元中特制的HTML标签，导致注入JavaScript脚本。由于RSS源小工具是在本地区域中运行的，因此所注入的脚本可以获得对系统的完全访问。 Microsoft Windows Vista 临时解决方法： 卸载或禁用源标题小工具 在“组策略”或注册表中禁用侧栏 修改gadget.xml上的访问控制列表以增加限制： 1...

[security bulletin] HPSBMA02241 SSRT061260 rev.1 - HP OpenView Service Quality Manager &#40;OV SQM&#41; Running Shared Trace Service, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01111851 Version: 1 HPSBMA02241 SSRT061260 rev.1 - HP OpenView Service Quality Manager OV SQM Running Shared Trace Service, Remote Arbitrary Code Execution NOTICE: The information in this Securit...

CounterPath X-Lite 3.x - SIP phone Remote Denial of Service

/main.cpp/ include include using namespace std; ifdef WIN32 include pragma commentlib, "ws232.lib" define close closesocket define writea,b,c senda, b, c, 0 define writetoa,b,c,d,e sendtoa, b, c, 0, d, e define reada,b,c recva, b, c, 0 define readfroma,b,c,d,e recvfroma, b, c, 0, d, e else includ...

Cisco IOS Next Hop Resolution Protocol Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Security Advisory: Wireless ARP Storm Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Wireless ARP Storm Vulnerabilities Advisory ID: cisco-sa-20070724-arp http://www.cisco.com/warp/public/707/cisco-sa-20070724-arp.shtml Revision 1.0 For Public Release 2007 July 24 1600 UTC GMT -...

Moderate: tomcat security update

5.5.23-0jpp.1.0.4.el5 - Remove erroneous rebuild-gcj-db for javadoc subpackage - Add fixes for CVE-2007-2449 and CVE-2007-2450 - resolves: bug 244846, bug 244816...

libexif: Buffer overflow

Background libexif is a library for parsing, editing and saving EXIF metadata from images. Description iDefense Labs have discovered that the exifdataloaddataentry function in libexif/exif-data.c improperly handles integer data while working with an image with many EXIF components, allowing an...

RHEL 3 : gdb (RHSA-2007:0469)

An updated gdb package that fixes a security issue and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GDB, the GNU debugger, allows debugging of programs written in C, C++, and other languages by executing them in a...