DEBIAN-CVE-2007-6531

Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...

CVE-2007-6531

Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...

CVE-2007-6532

Double free vulnerability in the Widget Library libxfcegui4 in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."...

CVE-2007-6531

Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...

CVE-2007-6532

Removed by vendor...

CVE-2007-6531

Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...

CVE-2007-6532

CVE-2007-6532 is a double-free vulnerability in libxfcegui4 (Xfce) prior to 4.4.2. The issue arises in session management where freed memory could be accessed, potentially enabling a remote attacker to execute arbitrary code. Gentoo GLSA 200801-06 and related advisories note that affected package...

CVE-2007-6531

CVE-2007-6531: Stack-based buffer overflow in the Panel (xfce4-panel) component of Xfce before 4.4.2 may allow remote code execution via Launcher tooltips. A second over-read exists in xfce_mkdirhier but is not necessarily exploitable. Affected: xfce4-panel; libxfcegui4 linked via the Xfce suite....

Xfce: Multiple vulnerabilities

Background Xfce is a GTK+ 2 based desktop environment that allows to run a modern desktop environment on modest hardware. Description Gregory Andersen reported that the Xfce4 panel does not correctly calculate memory boundaries, leading to a stack-based buffer overflow in the...

xfce -- multiple vulnerabilities

Gentoo reports: A remote attacker could entice a user to install a specially crafted "rc" file to execute arbitrary code via long strings in the "Name" and "Comment" fields or via unspecified vectors involving the second vulnerability...

Fedora 8 : Terminal-0.2.8-2.fc8 / Thunar-0.9.0-2.fc8 / exo-0.3.4-1.fc8 / gtk-xfce-engine-2.4.2-1.fc8 / etc (2007-4368)

Xfce 4.4.2 update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Netwo...

Fedora 7 : Terminal-0.2.8-2.fc7 / Thunar-0.9.0-2.fc7 / exo-0.3.4-1.fc7 / gtk-xfce-engine-2.4.2-1.fc7 / etc (2007-4385)

Xfce update to 4.4.2. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] Fedora 8 Update: Thunar-0.9.0-2.fc8

Thunar is a new modern file manager for the Xfce Desktop Environment. It has been designed from the ground up to be fast and easy-to-use. Its user interface is clean and intuitive, and does not include any confusing or useless options. Thunar is fast and responsive with a good start up time and...

[SECURITY] Fedora 8 Update: xfce4-sensors-plugin-0.10.99.2-3.fc8

This plugin displays various hardware sensor values in the Xfce panel...

[SECURITY] Fedora 8 Update: xfce4-weather-plugin-0.6.2-2.fc8

A weather plugin for the Xfce panel. It shows the current temperature and weather condition, using weather data provided by xoap.weather.com...

[SECURITY] Fedora 8 Update: xfce4-icon-theme-4.4.2-1.fc8

Icon theme for Xfce 4 Desktop Environment...

[SECURITY] Fedora 8 Update: xfce-mcs-plugins-4.4.2-1.fc8

This package inlcudes a set of plugins for the multi channel settings manager...

[SECURITY] Fedora 8 Update: mousepad-0.2.13-1.fc8

Mousepad is a text editor for Xfce based on Leafpad. The initial reason for Mousepad was to provide printing support, which would have been difficult for Leafpad for various reasons. Although some features are under development, currently Mousepad has follow ing features: Complete support for UTF...

[SECURITY] Fedora 8 Update: xfdesktop-4.4.2-1.fc8

This package includes a desktop manager for the XFce Desktop Environment...

[SECURITY] Fedora 8 Update: xfce4-cpugraph-plugin-0.4.0-2.fc8

A CPU monitor plugin for the Xfce panel. It offers multiple display modes LED, gradient, fire, etc... to show the current CPU load of the system. T he colors and the size of the plugin are customizable...