Microsoft GDI+ EMF Image Processing Integer Overflow (MS11-029; CVE-2011-0041)

GDI+ is a graphics device interface that provides two-dimensional vector graphics, imaging, and typography to applications and programmers. An integer overflow vulnerability has been discovered in the way that GDI+ handles integer calculations. The vulnerability is caused by a memory corruption...

Mac OS X 10.5.2 Update / Mac OS X Security Update 2008-001

The remote host is missing Mac OS X 10.5.2 Update / Security Update 2008-001. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

iTunes < 9.1 Multiple Vulnerabilities

Binary data 5491.prm...

CVE-2010-0041

CVE-2010-0041 affects ImageIO’s handling of BMP images in Apple Safari (Windows) before 4.0.5 and iTunes before 9.1. The underlying issue is an uninitialized memory access in BMP processing, which could cause sensitive memory data to be exposed to a remote website via a crafted BMP image. The vul...

Debian Security Advisory DSA 1952-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 1952-1. OpenVAS Vulnerability Test $Id: deb19521.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1952-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1952-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 10 FEDORA-2009-12461 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-12461. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora Core 10 FEDORA-2009-9374 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-9374. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Gentoo Security Advisory GLSA 200905-01 (asterisk)

The remote host is missing updates announced in advisory GLSA 200905-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora 10 : asterisk-1.6.0.5-2.fc10 (2009-0984)

Add a patch to fix a problem with the manager interface. Update to 1.6.0.5 to fix AST-2009-001 / CVE-2009-0041: http://downloads.digium.com/pub/security/AST-2009-001.html Original patch in 1.6.0.3 introduced a regression. Note that Tenable Network Security has extracted the preceding description...

Microsoft Security Bulletin MS07-040

Microsoft .NET is affected by multiples criticals vulnerabilities. Two of these vulnerabilities could allow remote code execution on client systems with .NET Framework installed, and one could allow information disclosure on Web servers running ASP.NET. SPDX-FileCopyrightText: 2009 Christian Eric...

Fedora Core 10 FEDORA-2009-0984 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-0984. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 9 FEDORA-2009-0973 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-0973. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

CVE-2009-0041

IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on...

CVE-2009-0041

CVE-2009-0041 affects Asterisk Open Source (IAX2) across multiple branches (1.2.x, 1.4.x, 1.6.x and related Business Edition lines) and allows remote attackers to enumerate valid usernames by differing responses to login attempts. The Debian advisory (DSA-1952-1) lists CVE-2009-0041 among several...

CVE-2008-0041

CVE-2008-0041 concerns Apple Mac OS X 10.5.x where Parental Controls, when a website is unblocked, contacts www.apple.com, allowing remote observers to determine whether Parental Controls is active. The issue is an information-disclosure vulnerability; no exploit details are provided in the sourc...

Debian Security Advisory DSA 421-1 (mod-auth-shadow)

The remote host is missing an update to mod-auth-shadow announced via advisory DSA 421-1. OpenVAS Vulnerability Test $Id: deb4211.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 421-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0041

CVE-2007-0041 is the PE Loader vulnerability in Microsoft .NET Framework (versions 1.0, 1.1 and 2.0) on Windows 2000/XP/Server 2003/Vista. The root cause is an unchecked buffer/unvalidated message lengths in the PE Loader service, leading to a potential remote code execution (buffer overflow) whe...

MS07-040: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212)

The remote host is running a version of the ASP.NET framework that contains multiple vulnerabilities : - A PE Loader vulnerability could allow an attacker to execute arbitrary code with the privileges of the logged-on user. - An ASP.NET NULL byte termination vulnerability could allow an attacker ...

CVE-2003-0041

CVE-2003-0041 affects the Kerberos FTP client. When retrieving a file whose name begins with a pipe character, the client passes the filename to the system() shell call, allowing a remote FTP server to write files outside the current directory or execute commands as the FTP client user. Connected...