Red Hat Security Advisory 2012-0135-01 - These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that Java2D did not properly check graphics rendering objects before passing them to the native renderer. Malicious input, or an untrusted Java application or applet could use this flaw to crash the Java Virtual Machine, or bypass Java sandbox restrictions. It was discovered that the exception thrown on deserialization failure did not always contain a proper identification of the cause of the failure. An untrusted Java application or applet could use this flaw to bypass Java sandbox restrictions.
03a52258048d18b15e6ac5ca0a3669a39f7dda305c6e46f2a57b7e2a22041bd8Red Hat Security Advisory 2012-0116-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. The proc file system could allow a local, unprivileged user to obtain sensitive information or possibly cause integrity issues. Non-member VLAN packet handling for interfaces in promiscuous mode and also using the be2net driver could allow an attacker on the local network to cause a denial of service.
71cb08ef2d809cd41a86b8da8e6cf0581e7d7544405546ba07d973f409a56d8fDebian Linux Security Advisory 2410-1 - Jueri Aedla discovered an integer overflow in the libpng PNG library, which could lead to the execution of arbitrary code if a malformed image is processed.
8b675f5eee2d9f754d3134353417faeb1e97a65426cf2aec875a9a2292eec7eeUbuntu Security Notice 1366-1 - Paul Wise discovered that debdiff did not properly sanitize its input when processing .dsc and .changes files. If debdiff processed a crafted file, an attacker could execute arbitrary code with the privileges of the user invoking the program. Raphael Geissert discovered that debdiff did not properly sanitize its input when processing source packages. If debdiff processed an original source tarball, with crafted filenames in the top-level directory, an attacker could execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
40bfda9eabf67eda5f80bb688e78213248741ec5b1e9125cf6217c996c46b807Red Hat Security Advisory 2012-0137-01 - TeX Live is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. The texlive packages provide a number of utilities, including dvips. TeX Live embeds a copy of t1lib. The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by a TeX Live utility, it could cause the utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility.
b811af510a4450cdfa8f0478df6a3e2ec1303502c4a2f0b164a2de49291aa9d1Red Hat Security Advisory 2012-0109-01 - The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent. A heap overflow flaw was found in the way QEMU-KVM emulated the e1000 network interface card. A privileged guest user in a virtual machine whose network interface is configured to use the e1000 emulated driver could use this flaw to crash the host or, possibly, escalate their privileges on the host.
8da6bc236f0922d833448e86579690e72584546abfdf7d9e503f684883a37b08Debian Linux Security Advisory 2409-1 - Several vulnerabilities have been discovered in debdiff, a script used to compare two Debian packages, which is part of the devscripts package.
393e38747adacb3663fd8270685e5895f4cff4332f8a6bd2ef1b06fb628341d2Red Hat Security Advisory 2012-0136-01 - The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. A heap-based buffer overflow flaw was found in the way the libvorbis library parsed Ogg Vorbis media files. If a specially-crafted Ogg Vorbis media file was opened by an application using libvorbis, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. Users of libvorbis should upgrade to these updated packages, which contain a backported patch to correct this issue. The desktop must be restarted for this update to take effect.
a7c0d3490864f1b414b91819fc65ca0f07506a135da1b6cae025b0ee2e2d093cFreePBX suffers from a remote credential disclosure vulnerability via the web interface.
986a288fdcbc5a09424b1c75b72e3a792b623c2cfae4c5430ae2a3d6ac579056360-FAAR Firewall Analysis Audit and Repair is an offline command line perl policy manipulation tool to filter, compare to logs, merge, translate and output firewall commands for new policies, in checkpoint dbedit or screenos commands.
64bffff846447bb8306c598f559f3e17b61db919815528d529d814378b55e3c5Adobe Shockwave Player versions 11.6.x.x suffer from a memory corruption vulnerability when parsing the field of KEY_ATOM of Director File.
af4574067944693d217e9b7ad5562a6fcb4b45eb39479343f7c42d4faa4f340bAdobe Shockwave Player versions 11.6.x.x suffer from a parsing cupt atom heap overflow vulnerability.
89f2974076f1ab581944249d3d66ef695b2f6a4ebb34ac4f04d4a2b08cf2e461Fink Project suffers from a cross site scripting vulnerability.
f517cef126f228397794c9d105b79286d8a859815aca7ce410f912bf3ae80758Grady Levkov suffers from a cross site scripting vulnerability.
8e78a196e0d6149db1e8d50455a2cb0d84b46d60d6c83a4bbe4f70ae0cd7e267Besancon Groupe suffers from a cross site scripting vulnerability.
5f8f23f32d01106f603b86e783a9575b9d850a24fcc9d38853eba80fce0ab5cdFiraxis Game suffers from a remote SQL injection vulnerability.
af5b02b13c83698aa4da4c8dc6ee84fb7e9d5f768b615bc2e45c11a9f2d3278fThe Greenroof suffers from a remote SQL injection vulnerability.
4cea30abef20bfc9233eab36023dae50ed6d2e521e695f1e23173df23a9ce04cTube Ace, the adult PHP tube script, suffers from a cross site scripting vulnerability.
55bb50d24265cf559f05e85db818b999d36761dd5732d8739bf33553b3d3a544Xenon Web Services suffers from a remote SQL injection vulnerability.
3d33767f4a578d0396bd14474c0dabb2ff9c65c903526f927fb489e8564d0660Secunia Security Advisory - Debian has issued an update for php5. This fixes a security issue, which can be exploited by malicious, local users to perform certain actions with escalated privileges.
08d4bc2e6f04ad0d8a9f780b7105f099b6c6badeea975def913bb409f4aaa64eSecunia Security Advisory - Red Hat has issued an update for mysql. This fixes multiple vulnerabilities, which can be exploited by malicious, local users to gain knowledge of sensitive information or manipulate certain data or by malicious users to gain knowledge of sensitive information, manipulate certain data, or cause a DoS (Denial of Service).
e513a0c4c1be9f88345d00e8fd6d4f149fb0dabcd2e400c0cfd5ed646104a2adSecunia Security Advisory - OpenVZ has issued an update for the kernel. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions, cause a DoS (Denial of Service), and gain escalated privileges.
f36e05cbba2a87d69e21c19ee4360c957489322af62350754d2172ad79524fedSecunia Security Advisory - Multiple vulnerabilities have been reported in Oracle Java SE, which can be exploited by malicious people to disclose potentially sensitive information, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.
11af876c48785f92e290aa80fb1aae1fea120e21ee37f163d30124f252f16590Secunia Security Advisory - A vulnerability has been discovered in the cformsII plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.
6771201e9f6ad3021c289b6de76bd7b56516fc4965ae5d4819d9347b5390b63bSecunia Security Advisory - A security issue has been reported in Mumble, which can be exploited by malicious, local users to disclose sensitive information.
c2f0ab19a4657ad26c8543e9e4bcd0979af62592b47e9720425a757911b89efc
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed