Oracle: Security Advisory (ELSA-2010-0019)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : socat (openSUSE-2015-324)

socat was updated 1.7.2.4 to fix one security issue and bugs. The following vulnerabilities were fixed : - socats PROXY-CONNECT address was vulnerable to a buffer overflow with data from command line CVE-2014-0019, boo860991 The following bugs were fixed : - socat would frequently crash on ppc an...

CVE-2015-0019

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2015-0019

CVE-2015-0019 affects Internet Explorer 9–11. The vulnerability lets a remote attacker execute arbitrary code or cause memory corruption by visiting a crafted webpage. Public exploits exist. Microsoft released MS15-009, addressing IE memory corruption with updates (KB 3021952 and KB 3034196) and ...

Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0019)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Amazon Linux AMI : socat (ALAS-2014-300)

Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service segmentation fault via a long server name in the PROXY-CONNECT address in the command line. C Tenable Network Security, Inc. The descriptive text and package...

Low: socat

Issue Overview: Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service segmentation fault via a long server name in the PROXY-CONNECT address in the command line. Affected Packages: socat Issue Correction: Run yum...

Mandriva Linux Security Advisory : socat (MDVSA-2014:033)

A vulnerability has been discovered and corrected in socat : Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service segmentation fault via a long server name in the PROXY-CONNECT address in the command line...

Fedora 19 : socat-1.7.2.3-1.fc19 (2014-1795)

Security update for CVE-2014-0019, which fixes a denial of service flaw in socat when using PROXY-CONNECT Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

Fedora 20 : socat-1.7.2.3-1.fc20 (2014-1811)

Security update for CVE-2014-0019, which fixes a denial of service flaw in socat when using PROXY-CONNECT Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

socat PROXY-CONNECT地址栈缓冲区溢出漏洞

BUGTRAQ ID: 65201 CVECAN ID: CVE-2014-0019 Socat是一个基于命令行的工具，可以创建两个双向字节流并在其间传输数据。 socat 1.3.0.0-1.7.2.2、2.0.0-b1-2.0.0-b6存在栈缓冲区溢出漏洞，本地用户通过命令行内PROXY-CONNECT地址中的超长服务器名称，即可利用此漏洞在受影响应用中执行任意代码。 0 socat socat 2.0.0-b1 - 2.0.0-b6 socat socat 1.3.0.0 - 1.7.2.2 厂商补丁： socat -----...

CVE-2014-0019

Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service segmentation fault via a long server name in the PROXY-CONNECT address in the command line...

DEBIAN-CVE-2014-0019

Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service segmentation fault via a long server name in the PROXY-CONNECT address in the command line...

CVE-2014-0019

Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service segmentation fault via a long server name in the PROXY-CONNECT address in the command line...

FreeBSD : socat -- buffer overflow with data from command line (a4c9e12d-88b7-11e3-8ada-10bf48e1088e)

Florian Weimer of the Red Hat Product Security Team reports : Due to a missing check during assembly of the HTTP request line a long target server name in the PROXY-CONNECT address can cause a stack buffer overrun. Exploitation requires that the attacker is able to provide the target server name ...

IBM DB2 Content Manager eClient < 8.4.1.1 Unspecified Security Vulnerability

According to its version number, the IBM DB2 Content Manager eClient install hosted on the remote web server is a version prior to 8.4.1.1, and is, therefore, potentially affected by an unspecified security vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle Linux 4 : gtk2 (ELSA-2007-0019)

From Red Hat Security Advisory 2007:0019 : Updated gtk2 packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gtk2 package contains the GIMP ToolKit GTK+, a library for creating graphical user...

Oracle Linux 5 / 6 : php53 / and / php (ELSA-2012-0019)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0019 advisory. 5.3.3-3.5 - remove extra php.ini-prod/devel files caused by %patch -b 5.3.3-3.4 - add security fixes for CVE-2011-4885, CVE-2011-4566 769754 Tenabl...

CVE-2013-0019

Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer COmWindowProxy Use After Free Vulnerability."...

CVE-2013-0019

CVE-2013-0019 is a Use-After-Free vulnerability in Microsoft Internet Explorer 7–10 (Internet Explorer ComWindowProxy UAF) that enables remote code execution when a crafted page accesses a deleted object. The vuln affects IE7–IE10 across Windows client/server lines referenced in the sources, with...