OracleVM 2.2 : xen (OVMSA-2015-0035)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86emul: fully ignore segment override for register-only operations Jan Beulich CVE-2015-2151 This is XSA-123 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin wer...

Memory corruption

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0035, CVE-2015-0039, CVE-2015-0052, and...

CVE-2015-0035

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0027, CVE-2015-0039, CVE-2015-0052, and...

CVE-2015-0035

CVE-2015-0035 is an Internet Explorer memory corruption vulnerability affecting IE10/IE11, allowing remote code execution via a crafted web page. The associated Nessus plugin (MS15-009) notes that systems missing cumulative security update 3034682 are affected and require the update for mitigatio...

Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0035)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Updated moodle package fixes security vulnerabilities

In Moodle before 2.6.5, without forcing encoding, it was possible that UTF7 characters could be used to force cross-site scripts to AJAX scripts although this is unlikely on modern browsers and on most Moodle pages MSA-14-0035. In Moodle before 2.6.5, an XSS issue through $searchcourse in...

CVE-2014-0035

The CVE-2014-0035 issue affects Apache CXF, specifically SymmetricBinding when EncryptBeforeSigning is enabled and UsernameToken policy is EncryptedSupportingToken. The vulnerability causes the UsernameToken to be transmitted in cleartext, enabling an attacker to sniff sensitive information over ...

Adobe Reader Information Disclosure & Denial of Service Vulnerabilities - Windows

Adobe Reader is prone to information disclosure and denial of service vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

GNU Emacs: Multiple vulnerabilities

Background GNU Emacs is a highly extensible and customizable text editor. Description Multiple vulnerabilities have been discovered in GNU Emacs: When ‘global-ede-mode’ is enabled, EDE in Emacs automatically loads a Project.ede file from the project directory CVE-2012-0035. When...

Ubuntu: Security Advisory (USN-1586-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.10 / 12.04 LTS : emacs23 vulnerabilities (USN-1586-1)

Hiroshi Oota discovered that Emacs incorrectly handled search paths. If a user were tricked into opening a file with Emacs, a local attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. CVE-2012-0035 Paul Ling discovered that Emacs incorrectly handled...

Fedora Update for emacs FEDORA-2012-0494

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for emacs FEDORA-2012-0462

Check for the Version of emacs OpenVAS Vulnerability Test Fedora Update for emacs FEDORA-2012-0462 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for emacs FEDORA-2012-0462

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : emacs-23.3-9.fc16 (2012-0494)

CVE-2012-0035 emacs: CEDET global-ede-mode file loading vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 15 : emacs-23.3-8.fc15 (2012-0462)

CVE-2012-0035 emacs: CEDET global-ede-mode file loading vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2012-0035

CVE-2012-0035 is an untrusted search path vulnerability in EDE (CEDET) that allows a local user to escalate privileges by crafting a Project.ede file loaded from a project directory. The issue affects CEDET’s EDE in Emacs contexts (notably Emacs 23.x with CEDET before 1.0.1); analysis from Gentoo...

KLA10170 LPE vulnerability in Emacs

An untrusted path vulnerability was found in GNU Emacs. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed Lisp expression. Original advisories - Exploitation Related products GNU-Emacs CVE list CVE-2012-0035...

CVE-2011-0035

The CVE-2011-0035 entry concerns Microsoft Internet Explorer 6–8 and a memory corruption vulnerability triggered by handling objects that are not properly initialized or have been deleted. The NVD description notes remote code execution via accessing such objects, i.e., an uninitialized memory co...

Internet Explorer onCellChange Event Memory Corruption (MS11-003; CVE-2011-0035)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted when parsing specially crafted Web content. To trigger this issue, an attacker ma...