Debian DSA-2427-1 : imagemagick - several vulnerabilities

Two security vulnerabilities related to EXIF processing were discovered in ImageMagick, a suite of programs to manipulate images. - CVE-2012-0247 When parsing a maliciously crafted image with incorrect offset and count in the ResolutionUnit tag in EXIF IFD0, ImageMagick writes two bytes to an...

CVE-2012-0247

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via crafted offset and count values in the ResolutionUnit tag in the EXIF IFD0 of an image...

Apple QuickTime Multiple Buffer Overflow Vulnerabilities - Windows

Apple QuickTime is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ZDI-11-257: Apple QuickTime Player H.264 Slice Header Remote Code Execution Vulnerability

ZDI-11-257: Apple QuickTime Player H.264 Slice Header Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-257 August 16, 2011 -- CVE ID: CVE-2011-0247 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple Quicktime --...

ZDI-11-255: Apple QuickTime Player H.264 Reference Picture List Remote Code Execution Vulnerability

ZDI-11-255: Apple QuickTime Player H.264 Reference Picture List Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-255 August 16, 2011 -- CVE ID: CVE-2011-0247 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple Quickti...

CVE-2011-0247

CVE-2011-0247 relates to multiple stack-based buffer overflows in Apple QuickTime on Windows, caused by improper bounds checking while parsing H.264 movie data. Exploitation allows remote arbitrary code execution or a crash (denial of service). Affected product is Apple QuickTime (Windows), with ...

QuickTime < 7.7 Multiple Vulnerabilities

Binary data 801184.prm...

CVE-2010-0247

CVE-2010-0247 affects Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1. The flaw is an uninitialized/deleted object in memory that can trigger memory corruption, enabling remote code execution when a user views a crafted page. This yields high-severity impact (remote code execution with full co...

SLES9: Security update for squid

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: squid For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021105 within the SuSE...

SLES9: Security update for postgresql

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-devel postgresql-docs postgresql-pl postgresql-libs postgresql-server postgresql postgresql-contrib For more information, please visit the...

SLES9: Security update for squid

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: squid For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021105 within the SuSE...

SuSE9 Security Update : squid (YOU Patch Number 11402)

This update fixes a remotely exploitable denial-of-service bug in squid, that can be triggered by using special ftp:// URLs. CVE-2007-0247 - The packages are not vulnerable to a bug in external ACLs. CVE-2007-0248 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

Fedora Update for squid FEDORA-2007-092

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE Update for squid SUSE-SA:2007:012

Check for the Version of squid OpenVAS Vulnerability Test $Id: gbsuse2007012.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for squid SUSE-SA:2007:012 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

CVE-2009-0247

The server for 53KF Web IM 2009 Home, Professional, and Enterprise editions relies on client-side protection mechanisms against cross-site scripting XSS, which allows remote attackers to conduct XSS attacks by using a modified client to send a crafted IM message, related to the msg variable...

CVE-2009-0247

The CVE-2009-0247 issue affects the 53KF Web IM 2009 Home, Professional, and Enterprise editions. The vulnerability arises because the server relies on client-side protection against cross-site scripting (XSS), allowing an attacker to perform XSS by using a modified client to send a crafted IM me...

FreeBSD Ports: postgresql, postgresql-server, ja-postgresql

The remote host is missing an update to the system as announced in the referenced advisory. VID 6b4b0b3f-8127-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 332-1 (kernel-source-2.4.17, kernel-patch-2.4.17-mips)

The remote host is missing an update to kernel-source-2.4.17, kernel-patch-2.4.17-mips announced via advisory DSA 332-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian Security Advisory DSA 311-1 (kernel)

The remote host is missing an update to kernel announced via advisory DSA 311-1. OpenVAS Vulnerability Test $Id: deb3111.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 311-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2008-0247

Summary: IBM Tivoli Storage Manager Express 5.3’s Backup Server component (dsmsvc.exe) is affected by a heap-based buffer overflow when handling a length field in a network packet. This vulnerability can be triggered by an unauthenticated remote attacker sending a crafted packet to the Express Ba...