1341 matches found
Fedora 7 : star-1.5a84-2.fc7 (2007-1852)
Mon Aug 27 2007 Peter Vrabec 1.5a84-2 - fix segfault of data-change-warn option 255261, patch from dkopecek at redhat.com - Fri Aug 24 2007 Peter Vrabec 1.5a84-1 - new upstream release with CVE-2007-4134 fix - Sun Jun 24 2007 Peter Vrabec 1.5a76-3 - build star on ARM platforms 245465 Note that...
Buffer overflow
Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-5807
Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-5807
Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-5807
CVE-2007-5807 involves a buffer overflow in the register function of the Ultra Star Reader ActiveX control used by SSReader. Remote code execution is possible via unspecified vectors, and the issue is described as being exploited in the wild. The affected component is the Ultra Star Reader Active...
VulnCheck KEV: CVE-2007-5807
Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
SSReader Ultra Star Reader ActiveX Control Register Method Buffer Overflow Vulnerability
Description SSReader Ultra Star Reader is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary code within the context of t...
Star: Directory traversal vulnerability
Background The Star program provides the ability to create and extract tar archives. Description Robert Buchholz of the Gentoo Security team discovered a directory traversal vulnerability in the hasdotdot function which does not identify //.. slash slash dot dot sequences in file names inside tar...
openSUSE 10 Security Update : star (star-4173)
This update fixes a directory traversal bug in star. CVE-2007-4131 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update star-4173. The text description of this plugin is C SUSE LLC...
Unfixed XSS vulnerability at www.star-tv.com
Security researcher shadowls, has submitted on 30/09/2007 a cross-site-scripting XSS vulnerability affecting www.star-tv.com, which at the time of submission ranked 758862 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...
CentOS 3 / 4 / 5 : star (CESA-2007:0873)
An updated star package that fixes a path traversal flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Star is a tar-like archiver. It saves multiple files into a single tape or disk archive, and can restore individual files...
RHEL 3 / 4 / 5 : star (RHSA-2007:0873)
An updated star package that fixes a path traversal flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Star is a tar-like archiver. It saves multiple files into a single tape or disk archive, and can restore individual files...
star security update
CentOS Errata and Security Advisory CESA-2007:0873 An updated star package that fixes a path traversal flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Star is a tar-like archiver. It saves multiple files into a single tap...
Moderate: Red Hat Security Advisory: star security update
An updated star package that fixes a path traversal flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Star is a tar-like archiver. It saves multiple files into a single tape or disk archive, and can restore individual files...
star directory traversal vulnerability
Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directory symlinks in a TAR archive...
Directory traversal
Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directory symlinks in a TAR archive...
CVE-2007-4134
Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directory symlinks in a TAR archive...
CVE-2007-4134
CVE-2007-4134 affects the Star archiver. A directory traversal defect in extract.c (Star) before version 1.5a84 lets remote users craft tar archives containing //.. sequences in directory symlinks, enabling overwriting of arbitrary files on the host with the permissions of the user running Star. ...
[SECURITY] Fedora 7 Update: star-1.5a84-2.fc7
Star saves many files together into a single tape or disk archive, and can restore individual files from the archive. Star supports ACL...
CVE-2007-3684
Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL commands via the 1 q and 2 t parameters in a db.php and b rpc.php...