125 matches found
CentOS 5 : openssl097a (CESA-2010:0164)
Updated openssl097a packages that fix a security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2010-0164
Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service heap memory corruption and application crash or possibly execute arbitrary code via a...
CVE-2010-0164
CVE-2010-0164 is a use-after-free in Mozilla Firefox 3.6 (imgContainer::InternalAddFrameHelper in src/imgContainer.cpp) that can crash or potentially execute code via a multipart/x-mixed-replace animation where frames have different bits-per-pixel. Affected versions are Firefox 3.6.x prior to 3.6...
Mozilla Firefox 3.6 libpr0n库远程代码执行漏洞
CVE ID: CVE-2010-0164 Firefox是一款流行的开源WEB浏览器。 Firefox中负责处理图形缓存和动画的libpr0n库处理通过multipart/x-mixed-replace mime从服务器所接收的动画的方式存在远程代码执行漏洞。在bits-per-pixel发生了更改的情况下，应用会释放指针然后重新使用已释放的指针，这可能导致可利用的情况。 Mozilla Firefox 3.6 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/...
Fedora Update for cups FEDORA-2010-2743
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Update for blogtk MDVA-2010:070-1 (blogtk)
Check for the Version of blogtk OpenVAS Vulnerability Test Mandriva Update for blogtk MDVA-2010:070-1 blogtk Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Fedora Core 11 FEDORA-2009-10891 (cups)
The remote host is missing an update to cups announced via advisory FEDORA-2009-10891. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
FreeBSD Ports: cups-base
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Gentoo Security Advisory GLSA 200904-20 (cups)
The remote host is missing updates announced in advisory GLSA 200904-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Fedora Core 9 FEDORA-2009-3753 (cups)
The remote host is missing an update to cups announced via advisory FEDORA-2009-3753. OpenVAS Vulnerability Test $Id: fcore20093753.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3753 cups Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Fedora Core 10 FEDORA-2009-3769 (cups)
The remote host is missing an update to cups announced via advisory FEDORA-2009-3769. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
GLSA-200904-20 : CUPS: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200904-20 CUPS: Multiple vulnerabilities The following issues were reported in CUPS: iDefense reported an integer overflow in the cupsImageReadTIFF function in the 'imagetops' filter, leading to a heap-based buffer overflow...
CVE-2009-0164
CVE-2009-0164 affects the CUPS web interface prior to 1.3.10, where the HTTP Host header is not validated. This enables DNS rebinding-style attacks from a remote attacker over the network (impact: partial confidentiality/integrity and partial availability as per NVD metrics; base score 6.4, MEDIU...
rPSA-2009-0061-1 cups
rPath Security Advisory: 2009-0061-1 Published: 2009-04-17 Products: rPath Linux 1 rPath Linux 2 Rating: Severe Exposure Level Classification: Remote System User Deterministic Privilege Escalation Updated Versions: cups=conary.rpath.com@rpl:1/1.1.23-14.10-1 cups=conary.rpath.com@rpl:2/1.3.9-1.1-1...
FreeBSD Ports: racoon
The remote host is missing an update to the system as announced in the referenced advisory. VID 739bb51d-7e82-11d8-9645-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: racoon
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-0164
The CVE-2008-0164 entry concerns Plone CMS 3.0.5 and 3.0.6, describing two CSRF vulnerabilities: (1) remote attackers can add arbitrary accounts via the join_form page and (2) change group privileges via the prefs_groups_overview page. The NVD entry assigns a base score of 4.3 (Medium) with Netwo...
Critical: Red Hat Security Advisory: mod_jk security update
Updated modjk packages that fix a security issue are now available for Red Hat Application Server v2. This update has been rated as having critical security impact by the Red Hat Security Response Team. modjk is a Tomcat connector that can be used to communicate between Tomcat and the Apache HTTP...
CVE-2007-0164
CVE-2007-0164 concerns Camouflage 1.2.1, where password information is embedded in the carrier file. The underlying issue allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing certain bytes of the JPEG image with alternate password informati...
