127 matches found
Fedora 20 : libvirt-1.1.3.3-1.fc20 (2014-1042)
Rebased to version 1.1.3.3 - Fix crash in virDBusAddWatch bz 885445 - Cleanup migration ports when migration is cancelled bz 1018530 - Fix virt-login-shell bz 1054479 - CVE-2013-6458 libvirt: qemu: job usage issue in several APIs leading to libvirtd crash bz 1054206, bz 1048631 - CVE-2013-6436...
Fedora 19 : moodle-2.4.5-2.fc19 (2013-12964)
Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information...
Oracle Linux 5 : kernel (ELSA-2012-0107)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0107 advisory. - misc Move exitrobustlist to mmrelease, null lists on cleanup Laszlo Ersek 771774 750283 CVE-2012-0028 - scsi fix 32-on-64 block device ioctls Paolo...
CVE-2013-0028
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CObjectElement Use After Free Vulnerability."...
CVE-2013-0028
CVE-2013-0028 is a Use-After-Free in Microsoft Internet Explorer (IE6–IE9) that allows remote code execution when a user visits a crafted page. The flaw is in handling of CObjectElement objects and misuse of URL references in CSS cursor properties, producing a dangling pointer that can be exploit...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20120209)
The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - Using the SGIO ioctl to issue SCSI requests to partitions or LVM volumes resulted in the requests being passed to the underlying block device. If a privileged...
CentOS Update for kernel CESA-2012:0107 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-0028
CVE-2012-0028 affects the Linux kernel’s futex implementation prior to version 2.6.28. The root cause is that processes executing an exec can write to memory in a child process due to improper futex handling, potentially allowing local users to cause a denial of service or to gain privileges. The...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6113)
This Linux kernel update for SUSE Linux Enterprise 10 Service Pack 2 fixes various bugs and several security issues. The following security issues were fixed: CVE-2009-0675: The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel permits SKFPCLRSTATS requests only when the...
Linux kernel 2.6.x 'exec()'本地拒绝服务漏洞
Bugtraq ID: 51947 CVE ID：CVE-2012-0028 Linux是一款开源的操作系统 Linux Kernel 'exec'存在一个安全漏洞，允许本地非特权用户利用此缺陷进行拒绝服务攻击 0 Linux kernel 2.6.x 厂商解决方案 OpenVZ Project OpenVZ 028stab098.1已经修复此漏洞，建议用户下载使用： http://wiki.openvz.org/Download/kernel/rhel5/028stab098.1...
Microsoft Paint JPEG Image Parsing Integer Overflow (MS10-005; CVE-2010-0028)
A remote code execution vulnerability has been reported in Microsoft Paint...
Linux kernel 2.6.x “exec()”本地拒绝服务漏洞
BUGTRAQ ID: 51947 CVE ID: CVE-2012-0028 Linux是自由电脑操作系统内核。 Linux Kernel 在exec的实现上存在本地拒绝服务漏洞，攻击者可利用此漏洞造成内核崩溃，拒绝服务合法用户。 0 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...
RHEL 5 : kernel (RHSA-2012:0107)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0107 advisory. - kernel: ext4: ext4extinsertextent kernel oops CVE-2011-3638 - kernel: jbd2: unmapped buffer with Unwritten or Delay flags set can lead to...
CVE-2011-0028
CVE-2011-0028 concerns a vulnerability in Microsoft WordPad Text Converters used by WordPad on Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is an error in the WordPad converter that fails to correctly parse certain Word document fields (notably sprmTTextFlow and sprmTSplit), all...
WordPad Text Converters Remote Code Execution Vulnerability (2485663)
This host is missing a critical security update according to Microsoft Bulletin MS11-033. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS11-033: Vulnerability in WordPad Text Converters Could Allow Remote Code Execution (2485663)
The installed version of Microsoft WordPad includes text converters that do not correctly parse certain fields in a Word document. If an attacker can trick a user on the affected system into opening a specially crafted Word document using WordPad, this issue could be leveraged to execute arbitrar...
Microsoft WordPad Converter sprm Record Parsing Code Execution (MS11-033; CVE-2011-0028)
WordPad Text Converters allow users who do not have Microsoft Office Word installed to open documents in other Microsoft Windows applications. A remote code execution vulnerability has been reported in Microsoft WordPad. The vulnerability is due to an error in the WordPad converter that fails to...
Microsoft WordPad Text Converter (CVE-2011-0028) Remote Code Execution Vulnerability
Description Microsoft WordPad is prone to a remote code-execution vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may result in denial-of-service conditions. Technologies Affected Avaya...
Microsoft Excel Malformed File Format Parsing Code Execution (MS06-012; CVE-2006-0028)
Microsoft Excel is a spreadsheet application released by the Microsoft Corporation. Its native file format is the Binary Interchange File Format BIFF, which is available in several versions. An Excel file contains information about the various spreadsheets that form an Excel workbook, the data an...
