194 matches found
Mozilla Foundation Security Advisory 2011-09
Mozilla Foundation Security Advisory 2011-09 Title: Crash caused by corrupted JPEG image Impact: Critical Announced: March 1, 2011 Reporter: Jordi Chancel Products: Firefox, Thunderbird Fixed in: Firefox 3.6.14 Thunderbird 3.1.8 Description Security researcher Jordi Chancel reported that a JPEG...
Ubuntu 10.04 LTS / 10.10 : thunderbird vulnerabilities (USN-1050-1)
Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff Walden, Henry Sivonen, Martijn Wargers, David Baron and Marcia Knous discovered several memory issues in the browser engine. An attacker could exploit these to crash the browser or possibly run arbitrary code as the user invoking the...
CVE-2011-0061
CVE-2011-0061 affects Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12. The vulnerability is a buffer overflow triggered by a crafted JPEG image, enabling remote attackers to execute arbitrary code or cause a denial of service (application crash). MITRE/O...
Critical: Red Hat Security Advisory: thunderbird security update
An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...
rPSA-2009-0061-1 cups
rPath Security Advisory: 2009-0061-1 Published: 2009-04-17 Products: rPath Linux 1 rPath Linux 2 Rating: Severe Exposure Level Classification: Remote System User Deterministic Privilege Escalation Updated Versions: cups=conary.rpath.com@rpl:1/1.1.23-14.10-1 cups=conary.rpath.com@rpl:2/1.3.9-1.1-1...
Ubuntu: Security Advisory (USN-543-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for linux-restricted-modules-2.6.17/20, vmware-player-kernel-2.6.15 vulnerabilities USN-543-1
Ubuntu Update for Linux kernel vulnerabilities USN-543-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5431.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-restricted-modules-2.6.17/20, vmware-player-kernel-2.6.15 vulnerabilities USN-543-1 Authors: System Generated Check Copyright:...
CVE-2009-0061
CVE-2009-0061 affects Cisco Wireless LAN Controllers (WLCs), including the Cisco 4400 WLC, WiSM, and 3750 Integrated WLC. The vulnerability lies in the WLC’s TSEC driver and can allow remote attackers to cause a denial of service (device crash/hang) by sending certain IP packets. Affected softwar...
FreeBSD Ports: maradns
The remote host is missing an update to the system as announced in the referenced advisory. VID f358de71-bf64-11dc-928b-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1445-1 : maradns - programming error
Michael Krieger and Sam Trenholme discovered a programming error in MaraDNS, a simple security-aware Domain Name Service server, which might lead to denial of service through malformed DNS packets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...
CVE-2008-0061
MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name CNAME record from resolving, aka "improper rotation of resource records."...
CVE-2008-0061
MaraDNS is affected: versions 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 are vulnerable to a remote DoS due to an issue described as improper rotation of resource records, leading to a crafted DNS packet that prevents an authoritative CNAME from resolving. The impact is den...
[SECURITY] [DSA 1445-1] New maradns packages fix denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1445-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2008 http://www.debian.org/security/faq -...
VMware Workstation < 5.5.5 and Server < 1.0.4 Multiple Vulnerabilities
The version of VMware Workstation/Server installed on the remote host is affected by multiple vulnerabilities, including a privelege elevation vulnerability that allows a guest to take over a host and a buffer overflow vulnerability in the DHCP daemon. The buffer overlflow in the DHCP server may...
CVE-2007-0061
The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers ...
Apache HTTP Server Remote Command Execution via .bat files
The Apache HTTP Server 2.0.x Win32 installation is shipped with a default script, /cgi-bin/test-cgi.bat, that allows an attacker to execute commands on the Apache server although it is reported that any .bat file could open this vulnerability. SPDX-FileCopyrightText: 2002 Matt Moore Some text...
CVE-2003-0061
CVE-2003-0061: Buffer overflow in passwd for HP-UX B.10.20 allows local users to gain root privileges via a long LANG environment variable. This is supported by multiple sources in the provided documents (NVD, CVE list, RH advisory). The descriptions do not specify root cause details beyond overf...
CVE-2005-0061
CVE-2005-0061 (Windows kernel elevation of privilege) is a local privilege-elevation vulnerability in the Windows kernel (Windows 2000, XP SP1/SP2, Windows Server 2003) caused by the way the kernel processes certain access requests. An attacker with valid logon credentials and local access could ...
Microsoft Windows Kernel Vulnerability
Overview A privilege elevation vulnerability exists in the way that the Windows' kernel processes certain access requests. This vulnerability could allow a logged on user to take complete control of the system. Description A locally authenticated user could potentially exploit a vulnerability in...