CVE-2007-5197
https://notcve.org/view.php?id=CVE-2007-5197
Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods. El desbordamiento de búfer en la clase Mono.Math.BigInteger en Mono versión 1.2.5.1 y anteriores permite que los atacantes dependiendo del contexto ejecutar código arbitrario por medio de vectores no específicos relacionados a Reduce en métodos Pow basados en Montgomery. • http://bugs.gentoo.org/attachment.cgi?id=134361&action=view http://bugs.gentoo.org/show_bug.cgi?id=197067 http://secunia.com/advisories/27439 http://secunia.com/advisories/27493 http://secunia.com/advisories/27511 http://secunia.com/advisories/27583 http://secunia.com/advisories/27612 http://secunia.com/advisories/27639 http://secunia.com/advisories/27937 http://www.debian.org/security/2007/dsa-1397 http://www.gentoo.org/security/en/glsa/glsa-200711-10.xml http:/ • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2007-5200
https://notcve.org/view.php?id=CVE-2007-5200
hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugin_debug_optim_results.txt temporary file. hugin, tal como se utiliza en varios sistemas operativos, incluyendo SUSE openSUSE versión 10.2 y versión 10.3, permite a los usuarios locales sobrescribir archivos arbitrarios mediante un ataque de symlink en el archivo temporal hugin_debug_optim_results.txt. • http://osvdb.org/42224 http://secunia.com/advisories/27229 http://secunia.com/advisories/27623 http://secunia.com/advisories/27653 http://secunia.com/advisories/27952 http://security.gentoo.org/glsa/glsa-200712-01.xml http://www.novell.com/linux/security/advisories/2007_20_sr.html http://www.securityfocus.com/bid/26730 https://bugzilla.redhat.com/show_bug.cgi?id=332401 https://bugzilla.redhat.com/show_bug.cgi?id=362851 https://www.redhat.com/archives/fedora-package- • CWE-59: Improper Link Resolution Before File Access ('Link Following') •