239 matches found
CVE-2007-6532
Double free vulnerability in the Widget Library libxfcegui4 in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."...
CVE-2007-6532
Double free vulnerability in the Widget Library libxfcegui4 in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."...
CVE-2007-6531
Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...
DEBIAN-CVE-2007-6531
Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...
CVE-2007-6531
Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...
CVE-2007-6532
Double free vulnerability in the Widget Library libxfcegui4 in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."...
CVE-2007-6531
Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...
CVE-2007-6532
Removed by vendor...
CVE-2007-6531
Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...
CVE-2007-6531
CVE-2007-6531: Stack-based buffer overflow in the Panel (xfce4-panel) component of Xfce before 4.4.2 may allow remote code execution via Launcher tooltips. A second over-read exists in xfce_mkdirhier but is not necessarily exploitable. Affected: xfce4-panel; libxfcegui4 linked via the Xfce suite....
CVE-2007-6532
CVE-2007-6532 is a double-free vulnerability in libxfcegui4 (Xfce) prior to 4.4.2. The issue arises in session management where freed memory could be accessed, potentially enabling a remote attacker to execute arbitrary code. Gentoo GLSA 200801-06 and related advisories note that affected package...
Xfce: Multiple vulnerabilities
Background Xfce is a GTK+ 2 based desktop environment that allows to run a modern desktop environment on modest hardware. Description Gregory Andersen reported that the Xfce4 panel does not correctly calculate memory boundaries, leading to a stack-based buffer overflow in the...
xfce -- multiple vulnerabilities
Gentoo reports: A remote attacker could entice a user to install a specially crafted "rc" file to execute arbitrary code via long strings in the "Name" and "Comment" fields or via unspecified vectors involving the second vulnerability...
CVE-2007-6532: Improper Restriction of Operations within the Bounds of a Memory Buffer
Double free vulnerability in the Widget Library libxfcegui4 in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via unknown vectors related to the "cliend id, program name and working directory in session management."...
CVE-2007-6531: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the Panel xfce4-panel component in Xfce before 4.4.2 might allow remote attackers to execute arbitrary code via Launcher tooltips. NOTE: a second buffer overflow over-read in the xfcemkdirhier function was also reported, but it might not be exploitable for a crash o...
Fedora 7 : Terminal-0.2.8-2.fc7 / Thunar-0.9.0-2.fc7 / exo-0.3.4-1.fc7 / gtk-xfce-engine-2.4.2-1.fc7 / etc (2007-4385)
Xfce update to 4.4.2. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora 8 : Terminal-0.2.8-2.fc8 / Thunar-0.9.0-2.fc8 / exo-0.3.4-1.fc8 / gtk-xfce-engine-2.4.2-1.fc8 / etc (2007-4368)
Xfce 4.4.2 update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Netwo...
[SECURITY] Fedora 8 Update: xfce4-cpugraph-plugin-0.4.0-2.fc8
A CPU monitor plugin for the Xfce panel. It offers multiple display modes LED, gradient, fire, etc... to show the current CPU load of the system. T he colors and the size of the plugin are customizable...