Sign-up

ID

VAR-200609-0315


CVE

CVE-2006-4389


TITLE

Apple QuickTime fails to properly handle SGI images

Trust: 0.8

sources: CERT/CC: VU#308204

DESCRIPTION

Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object. Apple QuickTime fails to properly handle SGI images. Apple From, as a countermeasure version Quicktime 7.1.3 Has been released.Arbitrary code or commands can be executed by a remote third party, DoS You can be attacked. Successful exploits may facilitate a remote compromise of affected computers. Apple QuickTime is a popular multimedia player that supports a wide variety of media formats. (CVE-2006-4380) There is a bug in the MySQL-Max (and MySQL) init script where the script was not waiting for the mysqld daemon to fully stop. This impacted the restart beahvior during updates, as well as scripted setups that temporarily stopped the server to backup the database files. (Bug #15724) The Corporate 3 and MNF2 products are not affected by these issues. Packages have been patched to correct these issues. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4389 http://qa.mandriva.com/show_bug.cgi?id=15724 _______________________________________________________________________ Updated Packages: Mandriva Linux 2006.0: 493567c0514a9823ff00ad729a8bd465 2006.0/RPMS/libmysql14-4.1.12-4.8.20060mdk.i586.rpm 49e04e83e5494e5e649e347bd1afe926 2006.0/RPMS/libmysql14-devel-4.1.12-4.8.20060mdk.i586.rpm 94d9cd0ba5b17473feeb23d56b90c61b 2006.0/RPMS/MySQL-4.1.12-4.8.20060mdk.i586.rpm 445d926ba55cc764d19aacfd8fffabad 2006.0/RPMS/MySQL-bench-4.1.12-4.8.20060mdk.i586.rpm 0bffe1233e429c393dee9e60cc3e3f84 2006.0/RPMS/MySQL-client-4.1.12-4.8.20060mdk.i586.rpm 064949a85982662857c5f063d20769df 2006.0/RPMS/MySQL-common-4.1.12-4.8.20060mdk.i586.rpm 6bff9b2d2d6c06220eca96b97e63df52 2006.0/RPMS/MySQL-Max-4.1.12-4.8.20060mdk.i586.rpm 7ebcd09dd60b04e988156a241e2d5f18 2006.0/RPMS/MySQL-NDB-4.1.12-4.8.20060mdk.i586.rpm d009b4c577873cc13f68dbc85bc792cd 2006.0/SRPMS/MySQL-4.1.12-4.8.20060mdk.src.rpm Mandriva Linux 2006.0/X86_64: d408fc51953b3aa78388ce09f47a8487 x86_64/2006.0/RPMS/lib64mysql14-4.1.12-4.8.20060mdk.x86_64.rpm 9145678262d216544c814ba7ceedac9d x86_64/2006.0/RPMS/lib64mysql14-devel-4.1.12-4.8.20060mdk.x86_64.rpm cb98cbb09991b13a1300c0446d8e3764 x86_64/2006.0/RPMS/MySQL-4.1.12-4.8.20060mdk.x86_64.rpm f5db648daa13716b9ba1d910010a52f4 x86_64/2006.0/RPMS/MySQL-bench-4.1.12-4.8.20060mdk.x86_64.rpm 9cc2996dc0bcf73e054819880d2d780e x86_64/2006.0/RPMS/MySQL-client-4.1.12-4.8.20060mdk.x86_64.rpm 3b79a86727bf12654c541a2c0b9b3d3c x86_64/2006.0/RPMS/MySQL-common-4.1.12-4.8.20060mdk.x86_64.rpm c8eefc94838cba03c03fd9493718b8bb x86_64/2006.0/RPMS/MySQL-Max-4.1.12-4.8.20060mdk.x86_64.rpm 4f9e728df755920855f2ac93a3d66bfd x86_64/2006.0/RPMS/MySQL-NDB-4.1.12-4.8.20060mdk.x86_64.rpm d009b4c577873cc13f68dbc85bc792cd x86_64/2006.0/SRPMS/MySQL-4.1.12-4.8.20060mdk.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFE9wsJmqjQ0CJFipgRAuHgAKCSOK9Vj5b0r1iB1x9afdEie0rTNQCgkgp/ 1ejA4Amd8JfkWa7DQPpj2Mg= =aSz3 -----END PGP SIGNATURE----- . McAfee, Inc. QuickTime is used by the Mac OS X operating system and by the QuickTime media player for Microsoft Windows. Seven code execution vulnerabilities are present in QuickTime support for various multimedia formats including: MOV, H.264, FLC, FPX and SGI. Exploitation could lead to execution of arbitrary code. User interaction is required for an attack to succeed. The risk rating for these issues is medium. _________________________________________________ * Vulnerable Systems QuickTime 7.1.2 and below for Mac OS X QuickTime for Windows 7.1.2 and below _________________________________________________ * Vulnerability Information CVE-2006-4382 Two buffer overflow vulnerabilities are present in QuickTime MOV format support. CVE-2006-4384 On heap overflow vulnerability is present in QuickTime FLC format support. CVE-2006-4385 One buffer overflow vulnerability is present in QuickTime SGI format support. CVE-2006-4386 One buffer overflow vulnerability is present in QuickTime MOV H.264 format support. CVE-2006-4388 One buffer overflow vulnerability is present in QuickTime FlashPix (FPX) format support. CVE-2006-4389 One uninitialized memory access vulnerability is present in QuickTime FlashPix (FPX) format support. _________________________________________________ * Resolution Apple has included fixes for the QuickTime issues in QuickTime version 7.1.3 for Mac OS X and for Microsoft Windows. Further information is available at: http://docs.info.apple.com/article.html?artnum=304357 _________________________________________________ * Credits These vulnerabilities were discovered by Mike Price of McAfee Avert Labs. _________________________________________________ * Legal Notice Copyright (C) 2006 McAfee, Inc. The information contained within this advisory is provided for the convenience of McAfee's customers, and may be redistributed provided that no fee is charged for distribution and that the advisory is not modified in any way. McAfee makes no representations or warranties regarding the accuracy of the information referenced in this document, or the suitability of that information for your purposes. McAfee, Inc. and McAfee Avert Labs are registered Trademarks of McAfee, Inc. and/or its affiliated companies in the United States and/or other Countries. All other registered and unregistered trademarks in this document are the sole property of their respective owners. Best regards, Dave Marcus, B.A., CCNA, MCSE Security Research and Communications Manager McAfee(r) Avert(r) Labs . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Win32 binary codecs: Multiple vulnerabilities Date: March 04, 2008 Bugs: #150288 ID: 200803-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities in the Win32 codecs for Linux may result in the remote execution of arbitrary code. Background ========== Win32 binary codecs provide support for video and audio playback. Workaround ========== There is no known workaround at this time. Resolution ========== All Win32 binary codecs users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/win32codecs-20071007-r2" Note: Since no updated binary versions have been released, the Quicktime libraries have been removed from the package. Please use the free alternative Quicktime implementations within VLC, MPlayer or Xine for playback. References ========== [ 1 ] CVE-2006-4382 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4382 [ 2 ] CVE-2006-4384 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4384 [ 3 ] CVE-2006-4385 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4385 [ 4 ] CVE-2006-4386 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4386 [ 5 ] CVE-2006-4388 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4388 [ 6 ] CVE-2006-4389 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4389 [ 7 ] CVE-2007-4674 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4674 [ 8 ] CVE-2007-6166 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6166 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200803-08.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2008 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.7 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHzc+AuhJ+ozIKI5gRAkBQAJ45BLSUrSDb21Ro/ZHEimwyzBpqqQCcD15e VpxOGmsa3V34PILWdYXqoXE= =70De -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Trust: 5.85

sources: NVD: CVE-2006-4389 // CERT/CC: VU#308204 // CERT/CC: VU#200316 // CERT/CC: VU#683700 // CERT/CC: VU#554252 // CERT/CC: VU#540348 // JVNDB: JVNDB-2006-000934 // BID: 19976 // VULHUB: VHN-20497 // PACKETSTORM: 49698 // PACKETSTORM: 50015 // PACKETSTORM: 64267

AFFECTED PRODUCTS

vendor:apple computermodel: - scope: - version: -

Trust: 4.0

vendor:applemodel:quicktimescope:eqversion:6.5.1

Trust: 1.6

vendor:applemodel:quicktimescope:eqversion:6.5

Trust: 1.6

vendor:applemodel:quicktimescope:eqversion:6.1

Trust: 1.6

vendor:applemodel:quicktimescope:eqversion:6.5.2

Trust: 1.6

vendor:applemodel:quicktimescope:eqversion:5.0.2

Trust: 1.6

vendor:applemodel:quicktimescope:eqversion:7.0.1

Trust: 1.6

vendor:applemodel:quicktimescope:eqversion:7.0.2

Trust: 1.6

vendor:applemodel:quicktimescope:eqversion:7.0.3

Trust: 1.6

vendor:applemodel:quicktimescope:eqversion:6.0

Trust: 1.6

vendor:applemodel:quicktimescope:eqversion:7.0

Trust: 1.6

vendor:applemodel:quicktimescope:eqversion:7.1.1

Trust: 1.0

vendor:applemodel:quicktimescope:eqversion:7.0.4

Trust: 1.0

vendor:applemodel:quicktimescope:eqversion:7.1.2

Trust: 1.0

vendor:applemodel:quicktimescope:eqversion:7.1

Trust: 1.0

vendor:applemodel:quicktimescope:eqversion:7.1.3

Trust: 0.8

vendor:gentoomodel:media-libs/win32codecs 20071007-r2scope: - version: -

Trust: 0.3

vendor:gentoomodel:linuxscope: - version: -

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:7.1.2

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:7.1.1

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:7.0.4

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:7.0.3

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:7.0.2

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:7.0.1

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:7.0

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:6.5.2

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:6.5.1

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:6.5

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:6.1

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:5.0.2

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:7.1

Trust: 0.3

vendor:applemodel:quicktime playerscope:eqversion:6

Trust: 0.3

vendor:applemodel:quicktime playerscope:neversion:7.1.3

Trust: 0.3

sources: CERT/CC: VU#308204 // CERT/CC: VU#200316 // CERT/CC: VU#683700 // CERT/CC: VU#554252 // CERT/CC: VU#540348 // BID: 19976 // JVNDB: JVNDB-2006-000934 // CNNVD: CNNVD-200609-159 // NVD: CVE-2006-4389

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2006-4389
value: MEDIUM

Trust: 1.0

CARNEGIE MELLON: VU#308204
value: 27.00

Trust: 0.8

CARNEGIE MELLON: VU#200316
value: 0.08

Trust: 0.8

CARNEGIE MELLON: VU#683700
value: 2.73

Trust: 0.8

CARNEGIE MELLON: VU#554252
value: 27.00

Trust: 0.8

CARNEGIE MELLON: VU#540348
value: 27.00

Trust: 0.8

CNNVD: CNNVD-200609-159
value: MEDIUM

Trust: 0.6

VULHUB: VHN-20497
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2006-4389
severity: MEDIUM
baseScore: 5.1
vectorString: AV:N/AC:H/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: HIGH
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 4.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-20497
severity: MEDIUM
baseScore: 5.1
vectorString: AV:N/AC:H/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: HIGH
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 4.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CERT/CC: VU#308204 // CERT/CC: VU#200316 // CERT/CC: VU#683700 // CERT/CC: VU#554252 // CERT/CC: VU#540348 // VULHUB: VHN-20497 // CNNVD: CNNVD-200609-159 // NVD: CVE-2006-4389

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2006-4389

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200609-159

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-200609-159

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2006-000934

PATCH
title:HT1338url:http://support.apple.com/kb/HT1338?viewlocale=ja_JP
Trust: 0.8
title:TA24355url:http://support.apple.com/kb/TA24355?viewlocale=ja_JP
Trust: 0.8
title:HT1222url:http://support.apple.com/kb/HT1222?viewlocale=ja_JP
Trust: 0.8
title:QuickTime 7.1.3 Update のセキュリティコンテンツについてurl:http://www.apple.com/jp/ftp-info/reference/quicktime713.html
Trust: 0.8
title:QuickTime - ダウンロード QuickTime Player スタンドアロン版のダウンロードurl:http://www.apple.com/jp/quicktime/download/
Trust: 0.8
title:TA06-256Aurl:http://software.fujitsu.com/jp/security/vulnerabilities/ta06-256a.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2006-000934

EXTERNAL IDS
db:SECUNIAid:21893
Trust: 4.9
db:CERT/CCid:VU#540348
Trust: 3.6
db:USCERTid:TA06-256A
Trust: 3.3
db:NVDid:CVE-2006-4389
Trust: 3.1
db:BIDid:19976
Trust: 2.0
db:CERT/CCid:VU#308204
Trust: 1.9
db:CERT/CCid:VU#683700
Trust: 1.9
db:CERT/CCid:VU#554252
Trust: 1.9
db:OSVDBid:28769
Trust: 1.7
db:SECTRACKid:1016830
Trust: 1.7
db:SECUNIAid:29182
Trust: 1.7
db:SREASONid:1554
Trust: 1.7
db:VUPENid:ADV-2006-3577
Trust: 1.7
db:CERT/CCid:VU#200316
Trust: 1.1
db:JVNDBid:JVNDB-2006-000934
Trust: 0.8
db:CNNVDid:CNNVD-200609-159
Trust: 0.7
db:CERT/CCid:TA06-256A
Trust: 0.6
db:BUGTRAQid:20060913 MULTIPLE VULNERABILITIES IN APPLE QUICKTIME
Trust: 0.6
db:XFid:28938
Trust: 0.6
db:APPLEid:APPLE-SA-2006-09-12
Trust: 0.6
db:GENTOOid:GLSA-200803-08
Trust: 0.6
db:PACKETSTORMid:49698
Trust: 0.2
db:VULHUBid:VHN-20497
Trust: 0.1
db:PACKETSTORMid:50015
Trust: 0.1
db:PACKETSTORMid:64267
Trust: 0.1
sources:
            
            
            CERT/CC: VU#308204 // 
            
            
            
            CERT/CC: VU#200316 // 
            
            
            
            CERT/CC: VU#683700 // 
            
            
            
            CERT/CC: VU#554252 // 
            
            
            
            CERT/CC: VU#540348 // 
            
            
            
            VULHUB: VHN-20497 // 
            
            
            
            BID: 19976 // 
            
            
            
            JVNDB: JVNDB-2006-000934 // 
            
            
            
            PACKETSTORM: 49698 // 
            
            
            
            PACKETSTORM: 50015 // 
            
            
            
            PACKETSTORM: 64267 // 
            
            
            
            CNNVD: CNNVD-200609-159 // 
            
            
            
            NVD: CVE-2006-4389

REFERENCES
url:http://docs.info.apple.com/article.html?artnum=304357
Trust: 5.0
url:http://www.us-cert.gov/cas/techalerts/ta06-256a.html
Trust: 3.3
url:http://secunia.com/advisories/21893/
Trust: 3.2
url:http://www.kb.cert.org/vuls/id/540348
Trust: 2.8
url:http://www.apple.com/support/downloads/quicktime713.html
Trust: 2.4
url:http://www.apple.com/quicktime/download/standalone.html
Trust: 2.4
url:http://www.us-cert.gov/reading_room/securing_browser/
Trust: 2.4
url:http://security.gentoo.org/glsa/glsa-200803-08.xml
Trust: 1.8
url:http://lists.apple.com/archives/security-announce/2006/sep/msg00000.html
Trust: 1.7
url:http://www.securityfocus.com/bid/19976
Trust: 1.7
url:http://www.osvdb.org/28769
Trust: 1.7
url:http://securitytracker.com/id?1016830
Trust: 1.7
url:http://secunia.com/advisories/21893
Trust: 1.7
url:http://secunia.com/advisories/29182
Trust: 1.7
url:http://securityreason.com/securityalert/1554
Trust: 1.7
url:http://piotrbania.com/all/adv/quicktime-integer-overflow-h264-adv-7.1.txt
Trust: 1.1
url:http://www.securityfocus.com/archive/1/445888/100/0/threaded
Trust: 1.1
url:http://www.vupen.com/english/advisories/2006/3577
Trust: 1.1
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/28938
Trust: 1.1
url:http://www.kb.cert.org/vuls/id/308204
Trust: 1.1
url:http://www.kb.cert.org/vuls/id/554252
Trust: 1.1
url:http://www.kb.cert.org/vuls/id/683700
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-4389
Trust: 1.0
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-4386
Trust: 0.9
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-4385
Trust: 0.9
url:http://www.cert.org/tech_tips/before_you_plug_in.html
Trust: 0.8
url:http://www.apple.com/quicktime/download/
Trust: 0.8
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=2006-4382
Trust: 0.8
url:http://jvn.jp/cert/jvnta06-256a/
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-4382
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-4385
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-4389
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-4386
Trust: 0.8
url:http://www.cyberpolice.go.jp/important/2006/20060913_173644.html
Trust: 0.8
url:http://www.securityfocus.com/archive/1/archive/1/445888/100/0/threaded
Trust: 0.6
url:http://www.frsirt.com/english/advisories/2006/3577
Trust: 0.6
url:http://xforce.iss.net/xforce/xfdb/28938
Trust: 0.6
url:http://www.apple.com/quicktime/
Trust: 0.3
url:http://www.kb.cert.org/vuls/id/200316
Trust: 0.3
url:/archive/1/445830
Trust: 0.3
url:/archive/1/445831
Trust: 0.3
url:/archive/1/445888
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2006-4389
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2006-4382
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2006-4385
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2006-4384
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2006-4388
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2006-4386
Trust: 0.2
url:http://qa.mandriva.com/show_bug.cgi?id=15724
Trust: 0.1
url:http://www.mandriva.com/security/
Trust: 0.1
url:http://www.mandriva.com/security/advisories
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2007-4674
Trust: 0.1
url:http://secunia.com/
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-4674
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-6166
Trust: 0.1
url:http://bugs.gentoo.org.
Trust: 0.1
url:http://enigmail.mozdev.org
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-4384
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2007-6166
Trust: 0.1
url:http://lists.grok.org.uk/full-disclosure-charter.html
Trust: 0.1
url:http://creativecommons.org/licenses/by-sa/2.5
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-4388
Trust: 0.1
url:http://security.gentoo.org/
Trust: 0.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-4382
Trust: 0.1
sources:
            
            
            CERT/CC: VU#308204 // 
            
            
            
            CERT/CC: VU#200316 // 
            
            
            
            CERT/CC: VU#683700 // 
            
            
            
            CERT/CC: VU#554252 // 
            
            
            
            CERT/CC: VU#540348 // 
            
            
            
            VULHUB: VHN-20497 // 
            
            
            
            BID: 19976 // 
            
            
            
            JVNDB: JVNDB-2006-000934 // 
            
            
            
            PACKETSTORM: 49698 // 
            
            
            
            PACKETSTORM: 50015 // 
            
            
            
            PACKETSTORM: 64267 // 
            
            
            
            CNNVD: CNNVD-200609-159 // 
            
            
            
            NVD: CVE-2006-4389

CREDITS
Sowhat smaillist@gmail.com Mike PricePiotr Bania bania.piotr@gmail.com※Ruben Santamarta ruben@reversemode.com
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-200609-159

SOURCES
db:CERT/CCid:VU#308204
db:CERT/CCid:VU#200316
db:CERT/CCid:VU#683700
db:CERT/CCid:VU#554252
db:CERT/CCid:VU#540348
db:VULHUBid:VHN-20497
db:BIDid:19976
db:JVNDBid:JVNDB-2006-000934
db:PACKETSTORMid:49698
db:PACKETSTORMid:50015
db:PACKETSTORMid:64267
db:CNNVDid:CNNVD-200609-159
db:NVDid:CVE-2006-4389

LAST UPDATE DATE
2024-11-23T20:42:01.715000+00:00

SOURCES UPDATE DATE
db:CERT/CCid:VU#308204date:2006-09-13T00:00:00
db:CERT/CCid:VU#200316date:2006-09-15T00:00:00
db:CERT/CCid:VU#683700date:2006-09-13T00:00:00
db:CERT/CCid:VU#554252date:2006-09-13T00:00:00
db:CERT/CCid:VU#540348date:2006-09-13T00:00:00
db:VULHUBid:VHN-20497date:2018-10-17T00:00:00
db:BIDid:19976date:2008-03-04T23:32:00
db:JVNDBid:JVNDB-2006-000934date:2009-04-03T00:00:00
db:CNNVDid:CNNVD-200609-159date:2006-09-15T00:00:00
db:NVDid:CVE-2006-4389date:2024-11-21T00:15:50.390

SOURCES RELEASE DATE
db:CERT/CCid:VU#308204date:2006-09-13T00:00:00
db:CERT/CCid:VU#200316date:2006-09-13T00:00:00
db:CERT/CCid:VU#683700date:2006-09-13T00:00:00
db:CERT/CCid:VU#554252date:2006-09-13T00:00:00
db:CERT/CCid:VU#540348date:2006-09-13T00:00:00
db:VULHUBid:VHN-20497date:2006-09-12T00:00:00
db:BIDid:19976date:2006-09-12T00:00:00
db:JVNDBid:JVNDB-2006-000934date:2009-04-03T00:00:00
db:PACKETSTORMid:49698date:2006-09-07T06:30:54
db:PACKETSTORMid:50015date:2006-09-14T07:22:52
db:PACKETSTORMid:64267date:2008-03-04T22:49:07
db:CNNVDid:CNNVD-200609-159date:2006-09-12T00:00:00
db:NVDid:CVE-2006-4389date:2006-09-12T23:07:00