about phpMyAdmin setup.php XSS vulnerability

Hi, phpMyAdmin version 2.11.1.1 was released to fix this, along with a security announcement: http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2007-5 which contains a mitigating factor: "We could only trigger it when using Internet Explorer with the 'send URLs as UTF8' setting disabled...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-1698)

Following security problems were found in OpenOfficeorg : - CVE-2006-2198: A security vulnerability in OpenOffice.org may make it possible to inject basic code into documents which is executed upon loading of the document. The user will not be asked or notified and the macro will have full access...

openSUSE 10 Security Update : qt3 (qt3-4421)

This update fixes a buffer overflow in qt3 while handling UTF8 characters. CVE-2007-4137 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update qt3-4421. The text description of this plugin is C SUSE...

Fedora Core 6 : qt-3.3.8-2.fc6 (2007-703)

Mon Sep 17 2007 Than Ngo - 1:3.3.8-2.fc6 - bz292951, CVE-2007-4137 - Wed Aug 29 2007 Than Ngo - 1:3.3.8-1.fc6.1 - CVE-2007-3388 qt format string flaw - bz234635, CVE-2007-0242 qt UTF8 improper character expansion Note that Tenable Network Security has extracted the preceding description block...

Security fix for the ALT Linux 6 package eggdrop version 1.6.18-alt2

Sept. 20, 2007 Vladimir V Kamarzin 1.6.18-alt2 - Security fix: CVE-2007-2807: Stack-based buffer overflow in mod/server.mod/servrmsg.c - Recode README.ALT to utf8 and update it - Create pseudouser on %pre stage - Install config to /var/lib/eggdrop - Load module blowfish by default - Change defaul...

USN-513-1: Qt vulnerability

Dirk Mueller discovered that UTF8 strings could be made to cause a small buffer overflow. A remote attacker could exploit this by sending specially crafted strings to applications that use the Qt3 library for UTF8 processing, potentially leading to arbitrary code execution with user privileges, o...

qt security update

CentOS Errata and Security Advisory CESA-2007:0883-01 Updated qt packages that correct two security flaws are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and...

CentOS 3 / 4 / 5 : qt (CESA-2007:0883)

Updated qt packages that correct two security flaws are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications for t...

RHEL 2.1 / 3 / 4 / 5 : qt (RHSA-2007:0883)

Updated qt packages that correct two security flaws are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications for t...

qt security update

CentOS Errata and Security Advisory CESA-2007:0883 Updated qt packages that correct two security flaws are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and...

Important: Red Hat Security Advisory: qt security update

Updated qt packages that correct two security flaws are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications for t...

Important: qt security update

3.3.6-23 - Resolves: 277011, Qt UTF8 improper character expansion, CVE-2007-0242 - Resolves: 269141, Qt off by one buffer overflow, CVE-2007-413...

MDKA-2007:077 : console-tools

vt-is-UTF8 utility included in console-tools package, and used by Mandriva initscripts, can hang, causing random problems like preventing a local/remote system reboot, unless user take interactive action 27948. Also, when executed on a terminal different from a linux vt, it can cause errors and...

[SECURITY] [DSA 1292-1] New qt4-x11 packages fix cross-site scripting vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1292-1 [email protected] http://www.debian.org/security/ Noah Meyerhans May 15, 2007 - ------------------------------------------------------------------------ Package : qt4-x11 Vulnerability :...

DSA-1292-1 qt4-x11

Bulletin has no description...

USN-452-1: KDE library vulnerability

The Qt library did not correctly handle truncated UTF8 strings, which could cause some applications to incorrectly filter malicious strings. If a Konqueror user were tricked into visiting a web site containing specially crafted strings, normal XSS prevention could be bypassed allowing a remote...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:076)

A bug was discovered in KJS where UTF8 decoding did not reject overlong sequences. This vulnerability is similar to that discovered by Andreas Nolden in QT3 and QT4, but at this current time there is no known exploit for this issue. Updated packages have been patched to address this issue...

Mandrake Linux Security Advisory : screen (MDKSA-2006:191)

Multiple unspecified vulnerabilities in the 'utf8 combining characters handling' utf8handlecomb function in encoding.c in screen before 4.0.3 allows user-assisted attackers to cause a denial of service crash or hang via certain UTF8 sequences. Updated packages have been patched to correct this...

MDKA-2006:005 : kat

A number of fixes are available with this new kat update including a fix in the support of utf8 files, a number of crash situation were corrected, a double deletion that caused a crash when kat was closed was corrected, and finally the mail indexer is disabled due to problems it caused...

MDKA-2006:015 : gthumb

A bug was discovered in gthumb were the UI User Interface can get corrupted when importing photos in some non-UTF8 locales such as French. Some text strings returned from libgphoto where not converted into UTF-8 before being used by GTK+. Updated packages have been patched to correct the issue...