Fedora 20 : tigervnc-1.3.0-14.fc20 (2014-4112)

This update fixes CVE-2014-0011, a ZRLE decoding heap-based buffer overflow in vncviewer. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

TigerVNC "ZRLE_DECODE()"缓冲区溢出漏洞

CVE ID：CVE-2014-0011 TigerVNC是一种先进的VNC的实现。 由于"ZRLEDECODE"功能common/rfb/zrleDecode.h存在边界错误，攻击者可以利用漏洞导致缓冲区溢出。 0 TigerVNC 1.x TigerVNC 1.3.1版本以修复此漏洞，建议用户下载使用： http://sourceforge.net/projects/tigervnc/...

Palo Alto Networks PAN-OS < 4.0.9 / 4.1.x < 4.1.2 Multiple Command Injections

The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.9 / 4.1.2. It is, therefore, affected by multiple command injection vulnerabilities : - A vulnerability exists that allows an authenticated user to inject arbitrary shell commands via the CLI. CVE-2012-6595 /...

VMware ESX and ESXi updates to third party libraries (VMSA-2013-0011) - Remote Version Check

VMware has updated VMware ESXi and ESX to address a vulnerability in an unhandled exception in the NFC protocol handler. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

VMware ESXi及ESX NFC协议处理远程拒绝服务漏洞

BUGTRAQ ID: 62077 CVECAN ID: CVE-2013-1661 VMware ESX Server是为适用于任何系统环境的企业级虚拟计算机软件 ESXi 4.0, 4.1, 5.0, 5.1、ESX 4.0, 4.1 在处理NFC协议时存在远程拒绝服务漏洞，要利用此漏洞，攻击者需要截获并修改ESXi/ESX和客户端之间的NFC流量，利用成功后可导致拒绝服务 0 VMWare ESX 4.1 VMWare ESX 4.0 VMWare ESXi 5.0 VMWare ESXi 4.1 VMWare ESXi 4.0 厂商补丁： VMWare ------...

VMware ESXi/ESX updates to third party libraries (VMSA-2013-0011)

VMware has updated VMware ESXi and ESX to address a vulnerability in an unhandled exception in the NFC protocol handler. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Oracle Linux 5 : lcms (ELSA-2009-0011)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0011 advisory. 1.15-1.2.2.el52.2 - Fix Requires to ensure subpackages match the parent package 1.15-1.2.2.el52.1 - Fix insufficient input validation in...

Oracle Linux 3 / 4 : libgsf (ELSA-2007-0011)

From Red Hat Security Advisory 2007:0011 : Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing...

Oracle Linux 6 : qemu-kvm (ELSA-2011-0345)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0345 advisory. - kvm-Fix-CVE-2011-0011-qemu-kvm-Setting-VNC-password-to-e.patch bz668598 - Resolves: bz668598 CVE-2011-0011 qemu-kvm: Setting VNC password to empty string...

RHEL 6 : qemu-kvm (RHSA-2011:0345)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0345 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space component for...

CVE-2013-0011

The CVE-2013-0011 issue affects the Windows Print Spooler service and allows remote code execution or memory corruption via a specially crafted print job. Documented targets include Windows 7 (Gold/SP1) and Windows Server 2008 R2 (RTM/SP1), where the Print Spooler components (notably Win32spl.dll...

Microsoft Windows Print Spooler打印作业处理漏洞（MS13-001)

CVECAN ID: CVE-2013-0011 Microsoft Windows是微软公司推出的一系列操作系统。 Microsoft Windows Print Spooler服务没有正确处理特制的打印作业，在实现上存在远程代码执行漏洞，可导致任意代码执行。 0 Microsoft Windows Server 2008 Microsoft Windows 7 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 禁用Print Spooler服务 厂商补丁： Microsoft ---------...

Microsoft Windows Print Spooler Remote Code Execution Vulnerability (2769369)

This host is missing a critical security update according to Microsoft Bulletin MS13-001. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-001: Vulnerabilities in Windows Print Spooler Components Could Allow Remote Code Execution (2769369)

The remote Windows host is potentially affected by a vulnerability that could allow remote code execution if a print server received a specially crafted print job. Firewall best practices and standard default firewall configurations can help protect networks from attacks that originate outside th...

Microsoft Windows Print Spooler Service CVE-2013-0011 Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Print Spooler Service. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems Microsoft Windows 7 for...

Scientific Linux Security Update : qemu-kvm on SL6.x x86_64

A flaw was found in the way the VNC 'password' option was handled. Clearingaa password disabled VNC authentication, allowing a remote user able to connect to the virtual machines' VNC ports to open a VNC session without authentication. CVE-2011-0011 After installing this update, shut down all...

VMware Fusion 4.x < 4.1.3 (VMSA-2012-0009, VMSA-2012-0011)

The version of VMware Fusion 4.x installed on the Mac OS X host is earlier than 4.1.3, and is therefore reportedly affected by the following vulnerabilities : - Due to a flaw in the virtual floppy configuration it is possible to perform an out-of-bounds memory write. This vulnerability may allow ...

VMware Player Multiple Vulnerabilities (VMSA-2012-0011)

The VMware Player install detected on the remote host is 3.x earlier than 3.1.6, or 4.0.x, earlier than 4.0.4 and is, therefore, potentially affected by the following vulnerabilities : - A memory corruption error exists related to the handling of 'Checkpoint' files that can allow arbitrary code...

CVE-2011-0011

CVE-2011-0011 affects qemu-kvm prior to 0.11.0, where clearing the VNC password disables authentication and allows a remote user to open VNC sessions without authentication. Red Hat, Oracle Linux, Scientific Linux and MiracleLinux advisories from 2011 document the fix as a backported patch; remed...

VMware ESXi/ESX patches address security issues (VMSA-2012-0011)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0011. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...