CVE-2007-3700

CVE-2007-3700 affects Sun Java System Access Manager (formerly Java System Identity Server) prior to 20070710. When AMConfig.properties sets com.iplanet.services.debug.level to a debug value, the product logs cleartext login passwords to /var/opt/SUNWam/debug/amAuth, enabling a local user to read...

CVE-2007-3716

CVE-2007-3716 affects Sun JDK/JRE 6 before Update 2, where the XML Digital Signature implementation mishandles XSLT transforms in signatures. A crafted XSLT stylesheet could allow a remote attacker to execute arbitrary code on the affected system. The CVE is tied to a related issue (CVE-2007-3715...

CVE-2007-3700

Sun Java System Access Manager formerly Java System Identity Server before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properties, logs cleartext login passwords, which allows local users to gain privileges by reading...

CVE-2007-3715

CVE-2007-3715 affects Sun Java System Application Server and Web Server (7.0–9.0 prior to 20070710). The issue arises in XSLT transforms used in XML signatures, where an attacker could craft a stylesheet to trigger a context-dependent Java method execution, enabling remote code execution. The des...

CVE-2007-3698

The Java Secure Socket Extension JSSE in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.211 through 1.4.214, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service CPU consumption via certain SSL/TLS handshake...

CVE-2007-3698

The CVE-2007-3698 issue affects the Java Secure Socket Extension (JSSE) in Sun JDK/JRE, including Sun JDK/JRE 6 Update 1 and earlier, JDK/JRE 5.0 Updates 7–11, and SDK/JRE 1.4.2_11–1.4.2_14, where crafted SSL/TLS handshake requests could cause the Java Runtime Environment to stop responding (deni...

Sun Java Webstart buffer overflow

Buffer overflow on JNLP file parsing...

SUN Java JNLP Overflow

======================================================================== = SUN Java JNLP Overflow = = Vendor Advisory: = http://sunsolve.sun.com/search/document.do?assetkey=1-26-102996-1 = = Affected Software: = Java Web Start in JDK and JRE 6 Update 1 and earlier = Java Web Start in JDK and JRE...

Sun Java运行时环境WebStart JNLP文件处理栈溢出漏洞

BUGTRAQ ID: 24798 Java WebStart是用于简化在客户端部署Java应用程序的技术。 Java WebStart在处理畸形格式的JNLP文档时存在漏洞，攻击者可能利用此漏洞通过诱使用户打开处理恶意文件控制用户系统。 Java...

CVE-2007-3655

Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file...

CVE-2007-3655

Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code via a long codebase attribute in a JNLP file...

DEBIAN-CVE-2006-4519

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files...

CVE-2006-4519

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files...

CVE-2006-4519

Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in 1 DICOM, 2 PNM, 3 PSD, 4 PSP, 5 Sun RAS, 6 XBM, and 7 XWD files...

CVE-2006-4519

CVE-2006-4519 affects GIMP up to version 2.2.15 (pre-2.2.16); multiple integer overflows in the image loader plug-ins allow user-assisted remote attackers to execute arbitrary code via crafted length values in DICOM, PNM, PSD, PSP, Sun RAS, XBM, and XWD image files. Connected advisories reference...

Sun Java Web Start JNLP File Handling Overflow (102996)

There is reportedly a buffer overflow in the Java Web Start utility distributed with the version of Sun Java Runtime Environment JRE installed on the remote host. If an attacker can convince a user on the affected host to open a specially crafted JNLP file, arbitrary code could be executed subjec...

EEYE: Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability

Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability Release Date: July 5, 2007 Date Reported: Jan 19, 2007 Severity: High Remote Code Execution Vendor: Sun Microsystems Systems Affected: Java Runtime Environment 6 Update 1, and earlier Java Runtime Environment 5 Update 11, and earlier...

GIMP GNU image manipulation program multiple security vulnerabilities

Multiple integer overflows on DICOM, PNM, PSD, PSP, Sun RAS, XBM, XWD formats parsing...

Sun Java Runtime Environment 1.6 - Web Start .JNLP File Stack Buffer Overflow

Sun Java Runtime Environment 1.6 - Web Start .JNLP File Stack Buffer Overflow source: https://www.securityfocus.com/bid/24832/info Sun Java Runtime Environment is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it...

[SECURITY] [DSA 1329-1] New gfax packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1329-1 [email protected] http://www.debian.org/security/ Steve Kemp July 05, 2007 -...