93 matches found
Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006)
This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2011-006. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
QuickTime < 7.7 Multiple Vulnerabilities
Binary data 801184.prm...
CVE-2011-0187
CVE-2011-0187 affects Mac OS X via the CoreMedia/QuickTime path: a cross-origin redirect in CoreMedia could bypass Same Origin Policy and allow access to potentially sensitive video data. The public details in connected docs indicate this is tied to OS X Lion/QuickTime/CoreMedia components, with ...
Gentoo Security Advisory GLSA 201101-09 (adobe-flash)
The remote host is missing updates announced in advisory GLSA 201101-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
SuSE 10 Security Update : flash-player (ZYPP Patch Number 6845)
The following bug has been fixed: Insufficient checks in flash-player allowed malicious flash applets to create illegal cross-domain requests CVE-2010-0186. The update also fixes a denial of service condition. CVE-2010-0187 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description...
Mac OS X 10.6.x < 10.6.4 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.4. Mac OS X 10.6.4 contains security fixes for the following components : - CUPS - DesktopServices - Flash Player plug-in - Folder Manager - Help Viewer - iChat - ImageIO - Kerberos - Kernel - libcurl - Network...
openSUSE Security Update : flash-player (flash-player-1970)
Insufficient checks in flash-player allowed malicious flash applets to create illegal cross-domain requests CVE-2010-0186. The update also fixes a denial of service condition CVE-2010-0187. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
CVE-2010-0187
CVE-2010-0187 affects Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130, allowing remote attackers to cause an application crash (DoS) via a modified SWF file. Connected advisories indicate updates to Flash Player (e.g., upgrade to 10.0.45.2) mitigate the issue (RHSA-2010-0102; ...
Adobe AIR < 1.5.3.9130 Multiple Vulnerabilities (APSB10-06)
The remote Windows host contains a version of Adobe AIR that is earlier than 1.5.3.9130 Such versions are potentially affected by multiple vulnerabilities : - An issue that could subvert the domain sandbox and make unauthorized cross-domain requests. CVE-2010-0186 - An unspecified denial of...
CVE-2010-0187
creationtimestamp| type| source ---|---|--- 2010-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11182...
Orbit Downloader Connecting Log Creation Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Orbit Downloader...
Orbit Downloader Connecting Log Creation Buffer Overflow
This module exploits a stack buffer overflow in Orbit Downloader 2.8.4. When an attacker serves up a malicious web site, arbitrary code may be executed. The PAYLOAD windows/shellbindtcp works best. This module requires Metasploit: https://metasploit.com/download Current source:...
Orbit Downloader Connecting log message buffer overflow
Added: 03/04/2009 CVE: CVE-2009-0187 BID: 33894 OSVDB: 52294 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability when constructing "Connecting" log messages allows command execution when a user loads an HTTP URL with a long,...
Orbit Downloader Connecting log message buffer overflow
Added: 03/04/2009 CVE: CVE-2009-0187 BID: 33894 OSVDB: 52294 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability when constructing "Connecting" log messages allows command execution when a user loads an HTTP URL with a long,...
Orbit Downloader Connecting log message buffer overflow
Added: 03/04/2009 CVE: CVE-2009-0187 BID: 33894 OSVDB: 52294 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability when constructing "Connecting" log messages allows command execution when a user loads an HTTP URL with a long,...
CVE-2009-0187
creationtimestamp| type| source ---|---|--- 2009-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8118 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16569 2018-05-29 15:50:33+00:00| seen|...
CVE-2009-0187
CVE-2009-0187 describes a stack-based buffer overflow in Orbit Downloader (versions before 2.8.5, specifically 2.8.4) triggered by a crafted HTTP URL with a long host name when constructing the Connecting log message. This leads to remote code execution on Windows systems running Orbit Downloader...
CVE-2008-0187
SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote attackers to execute arbitrary SQL commands via the songid parameter...
CVE-2008-0187
CVE-2008-0187 is a SQL injection vulnerability in SAM Broadcaster’s web component samPHPweb (songinfo.php) that allows an attacker to inject arbitrary SQL via the songid parameter. The affected code path is described as exploitable in SAM Broadcaster versions up to 4.2.2 and earlier. The vulnerab...
