Advisory: Ubuntu Essential and Critical Security Patch Updates - Page 491

Ubuntu 8.04 LTS USN-478-1 Critical: PHP Buffer Overflow Issue

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Stefan Esser discovered two buffer overflows in the htmlentities() and htmlspecialchars() functions. By supplying specially crafted input to PHP applications which process that input with these functions, a remote attacker could potentially exploit this to execute arbitrary code with the privileges of the application. (CVE-2006-5465) This update also fixes bugs in the chdir() and tempnam() functions, which did not perform proper open_basedir checks. This could allow local scripts to bypass intended restrictions.

LinuxSecurity.com Team
Nov 02, 2006

Ubuntu 6.10: USN-374-1 Critical: wv Library Remote Code Execution

An integer overflow was discovered in the DOC file parser of the wv library. By tricking a user into opening a specially crafted MSWord (.DOC) file, remote attackers could execute arbitrary code with the user's privileges.

LinuxSecurity.com Team
Nov 01, 2006

Debian USN-374-2 Severe: Exim Denial of Service Vulnerability

Race conditions were discovered in mutt's handling of temporary files. Under certain conditions when using a shared temp directory (the default), other local users could overwrite arbitrary files owned by the user running mutt. This vulnerability is more likely when the temp directory is over NFS.

LinuxSecurity.com Team
Nov 01, 2006

Ubuntu 6.10 USN-370-1 Critical: Screen Denial Of Service Risk

cstone and Rich Felker discovered a programming error in the UTF8 string handling code of "screen" leading to a denial of service. If a crafted string was displayed within a screen session, screen would crash or possibly execute arbitrary code.

LinuxSecurity.com Team
Nov 01, 2006

Ubuntu USN-372-1 Critical: ImageMagick Code Execution Threat

M. Joonas Pihlaja discovered that ImageMagick did not sufficiently verify the validity of PALM and DCM images. When processing a specially crafted image with an application that uses imagemagick, this could be exploited to execute arbitrary code with the application's privileges.