Apple QuickTime Multiple Buffer Overflow Vulnerabilities - Windows

Apple QuickTime is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CentOS Update for thunderbird CESA-2009:0258 centos4 i386

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2009:0258 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

MS10-017: Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (980150) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, these issues could be leveraged to execute arbitrary code subject to the user's privilege...

CVE-2010-0258

CVE-2010-0258 is a Microsoft Office Excel Sheet Object Type Confusion Vulnerability. It affects Excel 2002 SP3, 2003 SP3, 2007 SP1/SP2, and Mac variants (2004/2008 for Mac, Open XML Converter for Mac, Excel Viewer SP1/2, and Compatibility Pack SP1/SP2). Root cause: improper parsing of the Excel f...

Microsoft Excel对象类型混淆远程代码执行漏洞（MS10-017）

BUGTRAQ ID: 38550 CVE ID: CVE-2010-0258 Excel是微软Office套件中的电子表格工具。 Excel在解析XSL文件中畸形BRAI BIFF记录时存在内存破坏漏洞。在这种情况下，多个记录之间所共享的包含有识别对象类型字段的记录可能导致类型混淆。用户受骗打开了特制的Excel文档就可以触发这个漏洞。通过控制所分配堆块边界之外的内存，攻击者就可以控制虚函数调用中所使用的C++对象指针，导致将内存区处理为不同的对象类型，越界访问所分配的对象。 Microsoft Excel Viewer SP2 Microsoft Excel Viewer SP1...

CentOS Security Advisory CESA-2009:0258 (thunderbird)

The remote host is missing updates to thunderbird announced in advisory CESA-2009:0258. CESA-2009:0258 64013 6 $Id: ovcesa20090258.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0258 thunderbird Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

FreeBSD Ports: typo3

The remote host is missing an update to the system as announced in the referenced advisory. VID 653606e9-f6ac-11dd-94d9-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 653606e9-f6ac-11dd-94d9-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: typo3

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-1711-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1711-1] New TYPO3 packages fix remote code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1711-1 [email protected] http://www.debian.org/security/ Nico Golde January 26, 2009 http://www.debian.org/security/faq -...

Debian DSA-1711-1 : typo3-src - several vulnerabilities

Several remotely exploitable vulnerabilities have been discovered in the TYPO3 web content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0255 Chris John Riley discovered that the TYPO3-wide used encryption key is generated wi...

[SECURITY] [DSA 1711-1] New TYPO3 packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1711-1 [email protected] http://www.debian.org/security/ Nico Golde January 26, 2009 http://www.debian.org/security/faq -...

DSA-1711-1 typo3-src - remote code execution

Bulletin has no description...

CVE-2009-0258

The Indexed Search Engine indexedsearch system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line index...

CVE-2009-0258

TYPO3 Indexed Search Engine (indexed_search) in TYPO3 versions 4.0.0–4.0.9, 4.1.0–4.1.7, and 4.2.0–4.2.3 is vulnerable to remote command execution via a crafted filename containing shell metacharacters. The issue arises because the command-line indexer does not properly handle such characters, al...

FreeBSD Ports: phpbb

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-0258

CVE-2008-0258 affects PHP Running Management (phpRunMan) index.php; it is a Cross-Site Scripting (XSS) vulnerability via the message parameter in versions before 1.0.3. The vulnerability allows remote attackers to inject arbitrary script/HTML, with no authentication required (CVSS v2 base score 4...

CVE-2007-0258

CVE-2007-0258 is an XSS vulnerability in the web application code paths for 1) Fastilo 2.0 and 2) Open Solution Quick.Cart 2.0, specifically in index.php where the p parameter can be used to inject arbitrary script/HTML. The connected sources consistently describe the issue as a cross-site script...

CVE-2006-0258

Oracle Database Server versions 8.1.7.4 and 9.0.1.5 are affected in the Connection Manager component by CVE-2006-0258. The vulnerability is described as unspecified in impact and attack vectors (Oracle Vuln# DB03); no root cause, exploit details, or official fix are provided in the connected docu...

CVE-2005-0258

Directory traversal vulnerability in 1 usercpregister.php and 2 usercpavatar.php for phpBB 2.0.11, and possibly other versions, with gallery avatars enabled, allows remote attackers to delete unlink arbitrary files via "/../" sequences in the avatarselect parameter...