137 matches found
Memory corruption
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0347,...
Memory corruption
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0350,...
Memory corruption
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-0347,...
CVE-2015-0350
Adobe Flash Player vulnerable to memory corruption that can lead to remote code execution or denial of service. Affected versions: Windows/OS X before 13.0.0.281 and 14.x–17.x before 17.0.0.169; Linux before 11.2.202.457. Vectors are unspecified; no exploitation details provided in the source. No...
CVE-2013-0350
tmpsmtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log...
CVE-2013-0350
tmpsmtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log...
CVE-2013-0350
CVE-2013-0350 affects pktstat 1.8.5 via a local-symlink vulnerability in /tmp/smtp.log that lets a local user overwrite arbitrary files. The connected documents confirm the affected component and the root cause (symlink attack) and the impact (arbitrary file overwrite). No concrete remediation or...
CVE-2014-0350
The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate...
CVE-2014-0350
The CVE concerns POCO C++ Libraries’ NetSSL X509Certificate::verify in Poco::Net, vulnerable before 1.4.6p4 to MITM via crafted DNS PTRs during server-name wildcard comparison. Affected product: POCO’s NetSSL in POCO C++ Libraries; root cause: weak validation of X.509 CN/SAN matching against wild...
CVE-2014-0350
The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate...
POCO C++ Libraries NetSSL library fails to properly validate wildcard certificates
Overview The POCO C++ Libraries NetSSL library fails to properly validate wildcard certificates, allowing an attacker to trick the victim application into trusting a malicious certificate. Description CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action Guenter Obiltschnig o...
Oracle Linux 6 : kernel (ELSA-2012-0350)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory. - fs xfs: Fix missing xfsiunlock on error recovery path in xfsreadlink Carlos Maiolino 749161 694702 CVE-2011-4077 - fs xfs: Fix memory corruption in...
RedHat Update for kernel RHSA-2012:0350-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RHEL 6 : kernel (RHSA-2012:0350)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0350 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...
CVE-2011-0350
Cisco IOS 12.4(24)MD1+ on the Cisco Content Services Gateway Second Generation (CSG2) is vulnerable to DoS via crafted TCP packets, causing device hang or reload. The issue is tied to Bug IDs CSCth41891 and is separate from CVE-2011-0349 (CVE-2011-0350). The advisory describes two DoS vulnerabili...
CVE-2010-0350
Directory traversal vulnerability in the Photo Book gooffotoboek extension 1.7.14 and earlier for TYPO3 has unknown impact and remote attack vectors...
CVE-2010-0350
CVE-2010-0350 affects TYPO3’s Photo Book (goof_fotoboek) extension versions 1.7.14 and earlier, where a directory traversal vulnerability exists in the Photo Book component. The description notes unknown impact and remote attack vectors; no explicit exploit details, affected file(s), or remediati...
CVE-2009-0350
Stack-based buffer overflow in Merak Media Player 3.2 allows remote attackers to execute arbitrary code via a long string in a .m3u playlist file, related to the status bar icon's tooltip. NOTE: some of these details are obtained from third party information...
CVE-2009-0350
Merak Media Player 3.2 is affected by a stack-based buffer overflow in how it processes the status bar tooltip text for .m3u playlists. A crafted long string in an .m3u file can trigger the overflow, allowing remote attackers to execute arbitrary code. The vulnerability is confirmed by multiple s...
CVE-2009-0350
creationtimestamp| type| source ---|---|--- 2009-01-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7857 2009-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8126...