GLSA-200803-08 : Win32 binary codecs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-08 Win32 binary codecs: Multiple vulnerabilities Multiple buffer overflow, heap overflow, and integer overflow vulnerabilities were discovered in the Quicktime plugin when processing MOV, FLC, SGI, H.264 and FPX files. Impa...

Debian DSA-1496-1 : mplayer - buffer overflows

Several buffer overflows have been discovered in the MPlayer movie player, which might lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0485 Felipe Manzano and Anibal Sacco discovered a buffer overflow in the...

SQLiteManager confirm.php spaw_root Parameter Remote File Inclusion

The remote host is running SQLiteManager, a web-based application for managing SQLite databases. The version of SQLiteManager installed on the remote host fails to sanitize user-supplied input to the 'spawroot' parameter of the 'spaw/dialogs/confirm.php' script before using it to include PHP code...

Debian Security Advisory DSA 778-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 778-1. Two security related problems have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2556 A remote attacker could...

Debian DSA-1451-1 : mysql-dfsg-5.0 - several vulnerabilities

Several local/remote vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3781 It was discovered that the privilege validation for the source table of CREATE TABLE LIKE statements was...

Debian DSA-1447-1 : tomcat5.5 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3382 It was discovered that single quotes ' in cookies were treated as a delimiter, which could lead to an...

Site@School slideshow_full.php album_name Parameter SQL Injection

The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of this software installed on the remote host fails to sanitize user-supplied input to the 'albumname' parameter of the 'starnet/addons/slideshowfull.php' script...

Ubuntu 6.10 / 7.04 / 7.10 : firefox regression (USN-546-2)

USN-546-1 fixed vulnerabilities in Firefox. The upstream update included a faulty patch which caused the drawImage method of the canvas element to fail. This update fixes the problem. We apologize for the inconvenience. It was discovered that Firefox incorrectly associated redirected sites as the...

Jetty < 6.1.6 Multiple Vulnerabilities

Binary data 4307.prm...

EEYE: BitDefender Online Scanner 8 Double Decode Heap Overflow

BitDefender Online Scanner 8 Double Decode Heap Overflow Release Date: November 20, 2007 Date Reported: October 24, 2007 Severity: High Remote Code Execution Vendor: BitDefender / SOFTWIN - http://www.bitdefender.com Systems Affected: BitDefender Online Scan Users Overview: eEye Digital Security...

GLSA-200711-12 : Tomboy: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200711-12 Tomboy: User-assisted execution of arbitrary code Jan Oravec reported that the '/usr/bin/tomboy' script sets the 'LDLIBRARYPATH' environment variable incorrectly, which might result in the current working directory . to ...

IBM Lotus Domino IMAP Service Mailbox Name Overflow

The IMAP server component of IBM Lotus Domino Server installed on the remote host fails to properly validate the mailbox name before copying it into a fixed-size stack buffer as part of handling certain unspecified commands. Using a specially crafted mailbox name to which he is subscribed, an...

Lotus Notes < 7.0.3 HTML Email RTF Conversion Overflow

Binary data 4262.prm...

IBM Tivoli Storage Manager Client Multiple Vulnerabilities (swg21268775)

The remote host is running an IBM Tivoli Storage Manager TSM client. The version of the TSM client installed on the remote host reportedly contains a buffer overflow vulnerability in its Client Acceptor Daemon CAD service. Using an HTTP request with a long Host header, a remote attacker may be ab...

Debian DSA-1362-2 : lighttpd - several vulnerabilities

Several vulnerabilities were discovered in lighttpd, a fast webserver with minimal memory footprint, which could allow the execution of arbitrary code via the overflow of CGI variables when modfcgi was enabled. The Common Vulnerabilities and Exposures project identifies the following problems : -...

EEYE: VGX.DLL Compressed Content Heap Overflow Vulnerability

VGX.DLL Compressed Content Heap Overflow Vulnerability Release Date: August 14, 2007 Date Reported: October 24, 2006 Severity: High Code Execution Systems Affected: Internet Explorer 6 SP1 - Windows 2000 SP4 Internet Explorer 6 SP1 - Windows XP SP1 Internet Explorer 6 SP2 - Windows XP SP2 Interne...

Apache Tomcat < 5.5.25 / 6.0.x < 6.0.14 Multiple Vulnerabilities

Binary data 4167.prm...

SeaMonkey < 1.1.4 Multiple Vulnerabilities

Binary data 4153.prm...

Debian DSA-1330-1 : php5 - several vulnerabilities

Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1399 Stefan Esser discovered that a buffe...

Trend Micro OfficeScan Server CGI Modules Multiple Vulnerabilities

The remote host appears to be running Trend Micro OfficeScan Server or Client Server Messaging Security for SMB. The version of OfficeScan Server or Client Server Messaging Security for SMB installed on the remote host reportedly contains a buffer overflow issue that could allow a remote attacker...