112 matches found
MS09-010: Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)
The remote host contains a version of the Microsoft WordPad and/or Microsoft Office text converters that could allow remote code execution if a specially crafted file is opened. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid36148; scriptversion"1.33";...
RedHat Update for libxml2 RHSA-2008:0032-01
Check for the Version of libxml2 OpenVAS Vulnerability Test RedHat Update for libxml2 RHSA-2008:0032-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CentOS Update for libxml2 CESA-2008:0032 centos3 x86_64
Check for the Version of libxml2 OpenVAS Vulnerability Test CentOS Update for libxml2 CESA-2008:0032 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandrake Security Advisory MDVSA-2009:027 (cups)
The remote host is missing an update to cups announced via advisory MDVSA-2009:027. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
[ MDVSA-2009:027 ] cups
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:027 http://www.mandriva.com/security/ Package : cups Date : January 24, 2009 Affected: 2009.0 Problem Description: A vulnerability has been discovered in CUPS shipped with Mandriva Linux which allows local...
CVE-2009-0032
CVE-2009-0032 affects CUPS shipped with Mandriva Linux (2008.0, 2008.1, 2009.0) and Mandriva CS/MNF; a local symlink attack on the /tmp/pdf.log file lets local users overwrite arbitrary files. Root cause: insecure handling of temporary file creation via symlinks in CUPS. Impact: local privilege/e...
FreeBSD Ports: libmcrypt
The remote host is missing an update to the system as announced in the referenced advisory. VID c4b7badf-24ca-11d8-82e5-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0032
Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption...
CVE-2008-0032
Apple QuickTime before 7.4 is affected by CVE-2008-0032 due to a heap corruption vulnerability in processing Macintosh Resources embedded in QuickTime movie files. The issue arises from a modified length value in the resource header of a Macintosh Resource record, enabling remote attackers to tri...
[Full-disclosure] iDefense Security Advisory 01.15.08: Apple QuickTime Macintosh Resource Processing Heap Corruption Vulnerability
iDefense Security Advisory 01.15.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 15, 2008 I. BACKGROUND Quicktime is Apple's media player product, and is used to render video and other media. For more information visit the vendor's web site at the following URL...
QuickTime < 7.4 Multiple Vulnerabilities (Mac OS X)
The version of QuickTime installed on the remote Mac OS X host is older than 7.4. Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted movie or PICT file file with QuickTime. C...
CVE-2006-5152
Cross-site scripting XSS vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset, a related issue to CVE-2006-0032...
CVE-2006-0032
Cross-site scripting XSS vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose...
CVE-2006-0032
Microsoft Windows Indexing Service vulnerability (CVE-2006-0032) is a cross-site scripting flaw in the Indexing Service component of Windows 2000/XP/Server 2003 when Encoding is set to Auto Select. An attacker can craft a UTF-7 URL that is injected into an error message, potentially executing scr...
Microsoft Security Bulletin MS06-053 Vulnerability in Indexing Service Could Allow Cross-Site Scripting (920685)
Microsoft Security Bulletin MS06-053 Vulnerability in Indexing Service Could Allow Cross-Site Scripting 920685 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Information Disclosure Maximum Severity...
CVE-2003-0032
Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service memory exhaustion via a large number of requests to the application, which causes libmcrypt to dynamically load algorithms via libtool...
CVE-2004-0032
CVE-2004-0032 describes a cross-site scripting (XSS) vulnerability in PHPGEDVIEW 2.61, exploitable via the firstname parameter in search.php. The issue allows remote attackers to inject arbitrary HTML/web script when processing user-supplied input. The provided connected documents confirm the aff...
CVE-2003-0032
Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service memory exhaustion via a large number of requests to the application, which causes libmcrypt to dynamically load algorithms via libtool...
CVE-2003-0032
CVE-2003-0032 affects libmcrypt prior to 2.5.5. Under load, libmcrypt can leak memory when loading algorithms via libtool, leading to memory exhaustion and potential DoS. The description and connected advisories indicate this is mitigated by upgrading to 2.5.5 or later; Debian DSA-228 and related...
CVE-2004-0032
Cross-site scripting XSS vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter...