libxml2 security update

CentOS Errata and Security Advisory CESA-2012:0017 Updated libxml2 packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS bas...

Important: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Important: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

libxml2 security update

2.6.26-2.1.12.0.1.el57.2 - Add libxml2-enterprise.patch - Replaced docs/redhat.gif in tarball with updated image 2.6.26-2.1.12.el57.2 - Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008 - Fix an off by one error in encoding CVE-2011-0216 - Fix some potential problems on...

Apple Safari "libxml"远程代码执行漏洞

BUGTRAQ ID: 48832 CVE ID: CVE-2011-0216 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Safari 5.0.6之前版本在libxml的实现上存在单字节溢出漏洞，攻击者可利用此漏洞在受影响应用程序下执行任意代码或造成拒绝服务。 Apple Safari 5.x Apple Safari 4.x Apple TV 4.3 Apple TV 4.2 Apple TV 4.1 Apple TV 4.0 Apple TV 2.1 Apple TV 1.0 Apple iOS 4.x 厂商补丁...

RHEL 6 : libxml2 (RHSA-2011:1749)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1749 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. One of those standards is the XML Path...

APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4 Apple TV Software Update 4.4 is now available and addresses the following: Apple TV Available for: Apple TV 4.0 through 4.3 Impact: An attacker with a privileged network position may intercept user...

Apple Safari Multiple Vulnerabilities (Jul 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Apple Safari 'libxml'远程代码执行漏洞

Bugtraq ID: 48832 CVE ID：CVE-2011-0216 Apple Safari是一款流行的WEB浏览器。 Apple Safari使用的libxml处理XML数据时存在一个单字节堆缓冲区溢出，查看特制的WEB站点可导致应用程序崩溃或可能以应用程序上下文执行任意代码。 Apple Safari 4.1.2 for Windows Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 f...

CVE-2011-0216

Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and application crash via a crafted web site...

CVE-2011-0216

CVE-2011-0216 is an off-by-one vulnerability in libxml2 that Safari prior to 5.0.6 could be exploited remotely via a crafted site to execute code or cause a heap-based buffer overflow and crash. Connected advisories and Nessus/OpenVAS entries show libxml2 is bundled in affected products (e.g., Mi...

CVE-2010-0216

authenticateadsetupfinished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter...

CVE-2010-0216

Summary of CVE-2010-0216 (MediaCAST) Affected software: MediaCAST 8 and earlier. Issue: authenticate_ad_setup_finished.cfm reveals usernames and cleartext passwords by returning verbose error messages when using the UserID parameter, enabling an attacker to enumerate valid usernames and obtain cl...

CVE-2010-0216

authenticateadsetupfinished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter...

CVE-2009-0216

GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module...

CVE-2009-0216

CVE-2009-0216 affects GE Fanuc iFIX 5.0 and earlier. The vulnerability arises from client-side authentication that stores passwords in a locally shared file, using weak encryption, enabling a remote attacker to recover credentials and bypass access controls to start privileged server login sessio...

FreeBSD Security Advisory (FreeBSD-SA-08:01.pty.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:01.pty.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-08:01.pty.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:01.pty.asc ADV FreeBSD-SA-08:01.pty.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

MS08-011: Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081)

The remote host is running a version of Microsoft Office Works Converter that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. Then a bug in the wps header handler would result in code execution. C...

iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability

iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Microsoft Works is a word processor created by Microsoft in the 1980s. Microsoft Office, a widely use productivity suite, is distributed with converters for various versions of th...