CVE-2016-0036

CVE-2016-0036 (RDP Elevation of Privilege) affects the Remote Desktop Protocol in Microsoft Windows products including Windows 7 SP1, Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The flaw stems from the RDP implementation; remote authenticated users can execute arbitrary code by se...

KLA10751 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or gain privileges. Below is a complete list of vulnerabilities 1. An unknown vulnerability at...

MS16-017: Security Update for Remote Desktop Display Driver to Address Elevation of Privilege (3134700)

The remote Windows host is affected by an elevation of privilege vulnerability in the Remote Desktop Protocol RDP due to improper handling of objects in memory. An authenticated, remote attacker can exploit this by logging on via RDP and sending specially crafted data over the authenticated...

openSUSE Security Update : libebml / libmatroska (openSUSE-2016-37)

This update for libebml, libmatroska fixes the following security issues : Vulnerabilities fixed in libebml : - Cisco TALOS-CAN-0036: Invalid memory access when reading from a UTF-8 string resulted in a heap information leak bsc961031. - Cisco TALOS-CAN-0037: Deeply nested elements with infinite...

Updated libebml packages fix security vulnerability

In EbmlMaster::Read in libebml before 1.3.3, when the parser encountered a deeply nested element with an infinite size then a following element of an upper level was not propagated correctly. Instead the element with the infinite size was added into the EBML element tree a second time resulting i...

Oracle: Security Advisory (ELSA-2009-0382)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : moodle -- multiple vulnerabilities (c2fcbec2-5daa-11e5-9909-002590263bf5)

Moodle Release Notes report : MSA-15-0030: Students can re-attempt answering questions in the lesson CVE-2015-5264 MSA-15-0031: Teacher in forum can still post to 'all participants' and groups they are not members of CVE-2015-5272 - 2.7.10 only MSA-15-0032: Users can delete files uploaded by othe...

CVE-2015-0036

CVE-2015-0031 affects Microsoft Internet Explorer 6–11 and is a memory corruption remote code execution/DoS vulnerability. Root cause: an object is not properly initialized or has been deleted, leading to unsafe memory access when loading crafted pages. Affected versions are IE 6–11; remediation ...

Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0036)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

libvirt_proxy <= 0.5.1 - Local Privilege Escalation Exploit

No description provided by source. / cve-2009-0036.c libvirtproxy = 0.5.1 Local Privilege Escalation Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0036 Buffer overflow in the proxyReadClientSocket function in...

openSUSE Security Update : curl (openSUSE-SU-2012:0229-1) (BEAST)

The following vulnerabilities have been fixed in curl : - IMAP, POP3 and SMTP URL sanitization vulnerability CVE-2012-0036 - disable SSLOPDONTINSERTEMPTYFRAGMENTS CVE-2011-3389 - disable SSLOPNETSCAPEREUSECIPHERCHANGEBUG option for older openssl versions CVE-2010-4180 %NASLMINLEVEL 70300 C Tenabl...

openSUSE Security Update : curl (openSUSE-2012-76) (BEAST)

Fix IMAP, POP3 and SMTP URL sanitization bnc740452, CVE-2012-0036 - Disable SSLOPNETSCAPEREUSECIPHERCHANGEBUG option when built against an older OpenSSL version CVE-2010-4180. - Don't enable SSLOPDONTINSERTEMPTYFRAGMENTS bnc742306, CVE-2011-3389. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2014-0036

CVE-2014-0036 affects the rbovirt gem for Ruby, where versions before 0.0.24 use the rest-client library with SSL verification disabled, enabling remote attackers to perform MITM attacks via unspecified vectors. The vulnerability has a CVSS v2 base score of 6.8 (Network, Medium risk). Reported ac...

Fedora Update for rubygem-rbovirt FEDORA-2014-3526

Check for the Version of rubygem-rbovirt OpenVAS Vulnerability Test Fedora Update for rubygem-rbovirt FEDORA-2014-3526 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Fedora 20 : rubygem-rbovirt-0.0.18-4.fc20 (2014-3526)

Fix unsafe use of rest-client CVE-2014-0036. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 19 : rubygem-rbovirt-0.0.18-4.fc19 (2014-3573)

Fix unsafe use of rest-client CVE-2014-0036. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for rubygem-rbovirt FEDORA-2014-3573

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for rubygem-rbovirt FEDORA-2014-3526

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-0036 rubygem-rbovirt: unsafe use of rest-client

The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors...

Oracle Linux 5 : libvirt (ELSA-2009-0382)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0382 advisory. - Add missing readonly checks for APIs CVE-2008-5086 Tenable has extracted the preceding description block directly from the Oracle Linux security...