CVE-2017-0032

CVE-2017-0032 describes a remote code execution vulnerability in how Microsoft scripting engines render in-memory objects in Microsoft browsers. The issue allows an attacker to corrupt memory and execute arbitrary code with the current user’s privileges; if the user has administrative rights, the...

Microsoft Edge CVE-2017-0032 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. This could allow the attacker to execute arbitrary code in the context of the currently logged-in user. Failed...

Microsoft Scripting Engine Memory Corruption (MS17-007: CVE-2017-0032)

An integer overflow vulnerability exists in Microsoft Edge. The vulnerability is due to an error in Microsoft Edge while handling a specially crafted HTML file. Successful exploitation of this issue can lead to arbitrary memory write...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0032

Upstream security update. Follow RHBA-2017-0032 for details...

CVE-2016-0032

CVE-2016-0032 is a cross-site scripting (XSS) vulnerability affecting Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, 2013 CU10, 2013 CU11, and 2016. The issue arises in OWA where a crafted URL enables remote attackers to inject arbitrary web script or HTML, described as an Exchan...

MS16-010: Security Update in Microsoft Exchange Server to Address Spoofing (3124557)

The remote Microsoft Exchange server is missing a security update. It is, therefore, affected by multiple spoofing vulnerabilities in Outlook Web Access OWA due to a failure to properly handle web requests. An attacker can exploit these vulnerabilities, via a crafted email containing a malicious...

KLA10736 Spoofing vulnerability in Microsoft Exchange Server

Improper web requests handling was found in Microsoft Exchange Server at Outlook Web Access. By exploiting this vulnerability malicious users can spoof user interface. This vulnerability can be exploited remotely via a specially designed email with malicious link. Original advisories CVE-2016-003...

Oracle: Security Advisory (ELSA-2014-0255)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : moodle -- multiple vulnerabilities (c2fcbec2-5daa-11e5-9909-002590263bf5)

Moodle Release Notes report : MSA-15-0030: Students can re-attempt answering questions in the lesson CVE-2015-5264 MSA-15-0031: Teacher in forum can still post to 'all participants' and groups they are not members of CVE-2015-5272 - 2.7.10 only MSA-15-0032: Users can delete files uploaded by othe...

[SECURITY] [DLA 207-1] subversion security update

Package : subversion Version : 1.6.12dfsg-7+deb6u2 CVE ID : CVE-2013-1845 CVE-2013-1846 CVE-2013-1847 CVE-2013-1849 CVE-2014-0032 CVE-2015-0248 CVE-2015-0251 Debian Bug : 704940 737815 Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and...

CVE-2015-0032

CVE-2015-0032 affects the Microsoft VBScript engine (versions 5.6–5.8) used with Internet Explorer 8–11. The memory-corruption vulnerability allows remote code execution or a DoS when a user visits a crafted website, due to how VBScript handles objects in memory. Affected products include Windows...

Microsoft Windows VBScript Remote Code Execution Vulnerability (3040297)

This host is missing a critical security update according to Microsoft Bulletin MS15-019. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Internet Explorer Memory Corruption (MS15-018: CVE-2015-0032)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way that the VBScript engine handles objects in memory when rendered in Internet Explorer. A remote attacker can exploit this issue by enticing a user to open a specially crafte...

Microsoft VBScript CVE-2015-0032 Remote Code Execution Vulnerability

Description Microsoft VBScript is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies...

Apple Xcode < 6.0.1 (Mac OS X)

The remote Mac OS X host has a version of Apple Xcode prior to 6.0.1 installed. It is, therefore, affected by a denial of service vulnerability in the bundled Subversion component. The 'getresource' function in 'repos.c' in the 'moddavsvn' module allows remote attackers to cause a denial of servi...

KLA10071 DoS vulnerability in Apache Subversion

An unspecified vulnerability was found in Apache Subversion. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to moddavsvn via a specially designed OPTIONS request. Original advisories Apache...

openSUSE Security Update : subversion (openSUSE-SU-2014:0307-1)

Apache Subversion was updated to version 1.8.8 : It fix a remotely triggerable segfault in moddavsvn when svn is handling the server root and SVNListParentPath is on bnc862459 CVE-2014-0032 - Client-side bugfixes : - fix automatic relocate for wcs not at repository root - wc: improve performance...

CVE-2012-0032

CVE-2012-0032 affects Red Hat JBoss Operations Network (JON) prior to 3.0.1. The root directory is created with 0777 permissions when installing the remote client, enabling local users to read or modify subdirectories/files and potentially obtain JON credentials. This is a local-privilege-concern...

Fedora Update for subversion FEDORA-2014-3365

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : subversion-1.8.8-1.fc20 (2014-3365)

This update includes the latest stable release of Subversion, fixing a security issue CVE-2014-0032 : Subversion's moddavsvn Apache HTTPD server module will crash when it receives an OPTIONS request against the server root and Subversion is configured to handle the server root and SVNListParentPa...