Mozilla Products Multiple Vulnerabilities - Mar12 (Windows)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnmar12win.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilities - Mar12 Windows Authors: Rachana Shetty...

Mozilla Thunderbird 3.1.x < 3.1.20 Multiple Vulnerabilities

Binary data 6353.prm...

Mozilla Firefox 3.6.x < 3.6.28 Multiple Vulnerabilities

Binary data 6351.prm...

Mozilla Firefox 3.6.x < 3.6.28 Multiple Vulnerabilities

Binary data 801364.prm...

Mozilla Firefox ESR 10.x < 10.0.3 Multiple Vulnerabilities

Binary data 6350.prm...

CVE-2012-0457

Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might...

CVE-2012-0457

Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might...

CVE-2012-0457

CVE-2012-0457 is a use-after-free in the Firefox DOM/SVG handling: the nsSMILTimeValueSpec::ConvertBetweenTimeContainer path can be triggered via SVG animations to allow remote code execution. Affected products and versions per sources include Mozilla Firefox before 3.6.28 and 4.x through 10.0, F...

CVE-2012-0457

Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might...

CentOS Update for libwmf CESA-2009:0457 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-0457

CVE-2011-0457 affects the e107 CMS (versions 0.7.22 and earlier). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. The Red Hat/ENISA/JVN data confirm the issue in e107 prior to 0.7.23 and indicate upgradin...

CVE-2011-0457

Cross-site scripting XSS vulnerability in e107 0.7.22 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-0457

The CVE-2010-0457 entry describes an SQL injection in the Magic-Portal 2.1 application, specifically in home.php where the id parameter is unsafely used in SQL queries. Root cause: lack of input sanitization/parameterization for id, enabling remote attackers to execute arbitrary SQL commands. Imp...

CVE-2010-0457

creationtimestamp| type| source ---|---|--- 2010-01-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11235...

CentOS Security Advisory CESA-2009:0457 (libwmf)

The remote host is missing updates to libwmf announced in advisory CESA-2009:0457. CESA-2009:0457 64014 6 $Id: ovcesa20090457.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0457 libwmf Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD : mysql -- mysqlhotcopy insecure temporary file creation (0c4d5973-f2ab-11d8-9837-000c41e2cdad)

According to Christian Hammers : mysqlhotcopy created temporary files in /tmp which had predictable filenames and such could be used for a tempfile run attack. Jeroen van Wolffelaar is credited with discovering the issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

Fedora Update for wireshark FEDORA-2007-216

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-0457

CVE-2009-0457 concerns multiple directory traversal vulnerabilities in AJA Portal 1.2. The issues allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php (affecting the Contact_Plus and Reviews modules) a...

CVE-2009-0457

creationtimestamp| type| source ---|---|--- 2009-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7939...

Gentoo Security Advisory GLSA 200502-17 (Opera)

The remote host is missing updates announced in advisory GLSA 200502-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...