Internet Explorer CDispNode Use After Free (MS13-009; CVE-2013-0023)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

VLC get_chunk_header Function TiVo File Remote Code Execution

The version of VLC installed on the remote host is 0.x later than 0.9.0 or 1.x earlier than or equal to 1.1.12. It, therefore, contains a double-free error in the function 'getchunkheader' in the file 'modules/demux/ty.c'. This error can be exploited by a specially crafted TiVo TY file, which cou...

VLC Media Player TiVo Demuxer Double Free Vulnerability (Mac OS X)

This host is installed with VLC Media Player and is prone to double free vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerdemuxerdoublefreevulnmacosx.nasl 5988 2017-04-20 09:02:29Z teissa $ VLC Media Player TiVo Demuxer Double Free Vulnerability Mac OS X Authors: Antu Sanadi...

CVE-2012-0023

Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...

CVE-2012-0023

CVE-2012-0023 is a confirmed VLC vulnerability. Affected VLC versions range from 0.9.0 to 1.1.12 and contain a double-free bug in the get_chunk_header function of modules/demux/ty.c. An attacker can supply a specially crafted TiVo TY file to cause a crash or remote code execution. Several OpenVAS...

CVE-2012-0023

Double free vulnerability in the getchunkheader function in modules/demux/ty.c in VideoLAN VLC media player 0.9.0 through 1.1.12 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TiVo TY file...

CVE-2011-5231

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-0023. Reason: This candidate is a duplicate of CVE-2012-0023. Notes: All CVE users should reference CVE-2012-0023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2011-5231

CVE-2011-5231 is a duplicate of CVE-2012-0023. The connected data confirms VLC media player contains a double-free vulnerability in the TiVo demuxer get_chunk_header function (modules/demux/ty.c) affecting VLC 0.9.0–1.1.12, enabling potential remote code execution or crash via crafted TiVo files....

Slackware: Security Advisory (SSA:2009-214-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vordel Gateway <= 6.0.3 Directory Traversal Vulnerability - Active Check

Vordel Gateway is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows CSRSS本地权限提升漏洞（MS10-011）

BUGTRAQ ID: 38098 CVE ID: CVE-2010-0023 Microsoft Windows是微软发布的非常流行的操作系统。 当用户注销时Windows客户端/服务器运行时环境子系统（CSRSS）没有正确的终止用户进程，这可能允许本地用户以其他用户的权限执行任意代码。 如果要利用这个漏洞，攻击者首先要登录到系统，之后启动在注销后仍可继续运行的应用程序。当新的用户以自己的凭据登录后，攻击者的进程就可以监控新登录用户所执行的所有操作。如果该用户为管理员，攻击者就可以利用监控到的信息进一步入侵系统。 Microsoft Windows XP SP3 Microsoft...

CVE-2010-0023

CVE-2010-0023 affects the Client/Server Runtime Subsystem (CSRSS) on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The vulnerability stems from CSRSS not properly terminating processes after user logout, enabling a local attacker to gain privileges or access sensitive information via a craft...

Mandriva Security Advisory MDVSA-2009:314 (apr)

The remote host is missing an update to apr announced via advisory MDVSA-2009:314. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

SLES10: Security update for libapr-util1

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libapr-util1 libapr-util1-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES11: Security update for libapr-util1

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libapr-util1 More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finder/...

SLES11: Security update for libapr-util1

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libapr-util1 More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText:...

SuSE 11 Security Update : libapr-util1 (SAT Patch Number 969)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

SuSE 10 Security Update : libapr-util1 (ZYPP Patch Number 6289)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

Fedora Core 11 FEDORA-2009-8349 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-8349. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Security fix for the ALT Linux 9 package apache2 version 2.2.12-alt1

July 30, 2009 Aleksey Avdeev 2.2.12-alt1 - 2.2.12 - Security fixes CVE-2008-2939, CVE-2009-0023, CVE-2009-1191, CVE-2009-1195, CVE-2009-1890, CVE-2009-1891, CVE-2009-1955 and CVE-2009-1956 Closes: 20218, 20674 and 20760 - Add support new MIME types Closes: 11460...