CVE-2009-0201

OpenOffice.org Word document buffer overflow

Heap-based buffer overflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via unspecified records in a crafted Word document, related to "table parsing."

CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed

Vendors

Openoffice Redhat

Products

Openoffice.org Enterprise Linux

CVE-2009-0217

xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass

The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.

CVSS 2.0 · 5.0 Medium EPSS 6.4% KEV · Not listed

Vendors

Ibm Mono Project Oracle and 1 more

Products

Websphere Application Server Mono Application Server and 6 more

CVE-2009-0269

kernel: ecryptfs readlink flaw

fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux kernel before 2.6.28.1 allows local users to cause a denial of service (fault or memory corruption), or possibly have unspecified other impact, via a readlink call that results in an error, leading to use of a -1 return value as an array index.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 2 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 3 more

CVE-2009-0322

kernel: dell_rbu local oops

drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service (system crash) via a read system call that specifies zero bytes from the (1) image_type or (2) packet_size file in /sys/devices/platform/dell_rbu/.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 1 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 2 more

CVE-2009-0352

Firefox layout crashes with evidence of memory corruption

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.

CVSS 2.0 · 10.0 Critical EPSS 4.3% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Seamonkey Thunderbird and 1 more

CVE-2009-0353

Firefox javascript crashes with evidence of memory corruption

Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine.

CVSS 2.0 · 10.0 Critical EPSS 4.3% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Seamonkey Thunderbird and 1 more

CVE-2009-0354

Firefox XSS using a chrome XBL method and window.eval

Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote attackers to bypass the Same Origin Policy, and access the properties of an arbitrary window and conduct cross-site scripting (XSS) attacks, via vectors involving a chrome XBL method and the window.eval function.

CVSS 2.0 · 2.6 Low EPSS 2.3% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Enterprise Linux

CVE-2009-0355

Firefox local file stealing with SessionStore

components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element.

CVSS 2.0 · 5.4 Medium EPSS 1.6% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Enterprise Linux

CVE-2009-0356

Firefox Chrome privilege escalation via local .desktop files

Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2) about:config URIs from .desktop files, which allows user-assisted remote attackers to bypass the Same Origin Policy and execute arbitrary code with chrome privileges via vectors involving the URL field in a Desktop Entry section of a .desktop file, related to representation of about: URIs as jar:file:// URIs. NOTE: this issue exists because of an incomplete fix for CVE-2008-4582.

CVSS 2.0 · 5.1 Medium EPSS 3.2% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Seamonkey Enterprise Linux

CVE-2009-0357

Firefox XMLHttpRequest allows reading HTTPOnly cookies

Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly protection mechanism.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Seamonkey Enterprise Linux

CVE-2009-0358

Firefox directives to not cache pages ignored

Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Enterprise Linux

CVE-2009-0365

NetworkManager: GetSecrets disclosure

nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.

CVSS 2.0 · 4.6 Medium EPSS 1.1% KEV · Not listed

Vendors

Redhat Ubuntu

Products

Enterprise Linux Ubuntu Linux

CVE-2009-0386

gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Composition Time To Sample (aka ctts) atom data

Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime media .mov file.

CVSS 2.0 · 9.3 Critical EPSS 7.1% KEV · Not listed

Vendors

Gstreamer Redhat

Products

Good Plug-ins Enterprise Linux

CVE-2009-0387

gstreamer-plugins-good: Array index error while parsing malformed QuickTime media files via crafted Sync Sample (aka stss) atom data

Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) atom data in a malformed QuickTime media .mov file, related to "mark keyframes."

CVSS 2.0 · 9.3 Critical EPSS 6.5% KEV · Not listed

Vendors

Gstreamer Redhat

Products

Good Plug-ins Plug-ins Enterprise Linux

CVE-2009-0397

gstreamer-plugins-good: heap-based buffer overflow while parsing malformed QuickTime media files via crafted Time-to-sample (stss) atom data

Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample (aka stts) atom data in a malformed QuickTime media .mov file.

CVSS 2.0 · 9.3 Critical EPSS 7.1% KEV · Not listed

Vendors

Gstreamer Redhat

Products

Good Plug-ins Plug-ins Enterprise Linux

CVE-2009-0398

gstreamer-plugins: Array index error while parsing malformed QuickTime media files

Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file.

CVSS 2.0 · 9.3 Critical EPSS 3.2% KEV · Not listed

Vendors

Gstreamer Redhat

Products

Plug-ins Enterprise Linux

CVE-2009-0547

evolution-data-server: S/MIME signatures are considered to be valid even for modified messages (MITM)

Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077.

CVSS 2.0 · 5.0 Medium EPSS 2.2% KEV · Not listed

Vendors

Evolution Redhat

Products

Evolution Enterprise Linux

CVE-2009-0599

wireshark: buffer overflows in NetScreen snoop file reader

Buffer overflow in wiretap/netscreen.c in Wireshark 0.99.7 through 1.0.5 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed NetScreen snoop file.

CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2009-0577

cups-CVE-2008-3640.patch has been corrupted.

Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2008-3640.

CVSS 2.0 · 6.8 Medium EPSS 3.6% KEV · Not listed

Vendors

Apple Redhat

Products

Cups Enterprise Linux

CVE-2009-0578

NetworkManager: local users can modify the connection settings

GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat Ubuntu

Products

Enterprise Linux Ubuntu Linux