177 matches found
SuSE 10 Security Update : ruby (ZYPP Patch Number 7528)
This update improves the handling of big decimal integers. Prior to this update, a bug in VpMemAlloc could cause a denial of service situation or even lead to arbitrary code execution. CVE-2011-0188 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...
CentOS Update for irb CESA-2011:0908 centos4 i386
Check for the Version of irb OpenVAS Vulnerability Test CentOS Update for irb CESA-2011:0908 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CentOS Update for irb CESA-2011:0908 centos4 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS 4 : ruby (CESA-2011:0908)
Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
ruby security update
CentOS Errata and Security Advisory CESA-2011:0909 Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...
Moderate: Red Hat Security Advisory: ruby security update
Updated ruby packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Moderate: Red Hat Security Advisory: ruby security update
Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
ruby security update
1.8.5-19.el56.1 - Address CVE-2011-1004 'Symlink race condition by removing directory trees in fileutils module' ruby-1.8.7-CVE-2011-1004.patch - Address CVE-2011-1005 'Untrusted codes able to modify arbitrary strings' ruby-1.8.7-CVE-2011-1005.patch - Address CVE-2011-0188 'memory corruption in...
ruby security update
1.8.1-16.el4 - Comply with guidelines - Related: rhbz709959 1.8.1-15.el4 - Address CVE-2011-1005 'Untrusted codes able to modify arbitrary strings' ruby-1.8.7-CVE-2011-1005.patch - Address CVE-2011-0188 'memory corruption in BigDecimal on 64bit platforms' ruby-1.8.7-CVE-2011-0188.patch - Address...
Mandriva Update for ruby MDVSA-2011:097 (ruby)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Linux Security Advisory : ruby (MDVSA-2011:097)
Multiple vulnerabilities have been identified and fixed in ruby : Cross-site scripting XSS vulnerability in the WEBrick HTTP server in Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page CVE-2010-0541. The...
CVE-2011-0188
CVE-2011-0188 concerns memory allocation in the BigDecimal implementation (bigdecimal.c) for Ruby 1.9.2-p136 and earlier, used on macOS before 10.6.7 and other platforms. The issue is that VpMemAlloc may misallocate memory for very large BigDecimal values in 64-bit processes, enabling context-dep...
Mac OS X Multiple Vulnerabilities (Security Update 2011-001)
The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2011-001 applied. This security update contains fixes for the following products : - Apache - bzip2 - ClamAV - ImageIO - Kerberos - Libinfo - libxml - Mailman - PHP - QuickLook - Ruby - X11 C Tenable Network...
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6879)
This update of acroread fixes : - Cross-domain request vulnerability CVE-2010-0188: CVSS v2 Base Score: 6.8 An unspecified vulnerability that possibly allowed remote code execution. CVE-2010-0186: CVSS v2 Base Score: 5.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6881)
This update of acroread fixes : - Cross-domain request vulnerability CVE-2010-0188: CVSS v2 Base Score: 6.8 An unspecified vulnerability that possibly allowed remote code execution. CVE-2010-0186: CVSS v2 Base Score: 5.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...
Adobe Acrobat - Bundled LibTIFF Integer Overflow (Metasploit)
$Id: adobelibtiff.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Adobe Reader Libtiff TIFFFetchShortPair Stack Buffer Overflow
Added: 03/22/2010 CVE: CVE-2010-0188 BID: 38195 OSVDB: 62526 Background Adobe Reader is free software for viewing PDF documents. Problem A stack buffer overflow vulnerability allows command execution when a user opens a PDF file with an embedded TIFF image that has one of several fields encoded a...
Adobe Reader PDF - LibTiff Integer Overflow Code Execution
Adobe Reader PDF - LibTiff Integer Overflow Code Execution doc=''' Title: Adobe PDF LibTiff Integer Overflow Code Execution. Product: Adobe Acrobat Reader Version: =8.3.0, =9.3.0 CVE: 2010-0188 Author: villy villys777 at gmail.com Site: http://bugix-security.blogspot.com/ Tested : succesfully...
CVE-2010-0188
creationtimestamp| type| source ---|---|--- 2010-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11787 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16670 2012-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21868 2012-10-09...
Adobe Reader PDF - LibTiff Integer Overflow Code Execution
doc=''' Title: Adobe PDF LibTiff Integer Overflow Code Execution. Product: Adobe Acrobat Reader Version: =8.3.0, =9.3.0 CVE: 2010-0188 Author: villy villys777 at gmail.com Site: http://bugix-security.blogspot.com/ Tested : succesfully tested on Adobe Reader 9.1/9.2/9.3 OS Windows XPSP2,SP3...