[SECURITY] [DSA 2457-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2457-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 24, 2012 http://www.debian.org/security/faq -...

RHEL 6 : libvirt (RHSA-2011:0479)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0479 advisory. The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition,...

Google Chrome Multiple Vulnerabilities (Jan 2011) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-0479

Google Chrome (Windows/Linux/macOS) before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by CVE-2011-0479, a vulnerability in extensions handling that allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer. The issue stems f...

Microsoft Publisher File Conversion Textbox buffer overflow

Added: 04/30/2010 CVE: CVE-2010-0479 BID: 39347 OSVDB: 63748 Background Microsoft Office Publisher, part of the Microsoft Office suite, is a product for creating publications and marketing materials. Problem A buffer overflow vulnerability allows command execution when a user loads a Publisher 97...

Microsoft Publisher File Conversion Textbox buffer overflow

Added: 04/30/2010 CVE: CVE-2010-0479 BID: 39347 OSVDB: 63748 Background Microsoft Office Publisher, part of the Microsoft Office suite, is a product for creating publications and marketing materials. Problem A buffer overflow vulnerability allows command execution when a user loads a Publisher 97...

ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability

ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-069 April 13, 2010 -- CVE ID: CVE-2010-0479 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Publisher -- TippingPointTM...

Microsoft Office Publisher Remote Code Execution Vulnerability (981160)

This host is missing a critical security update according to Microsoft Bulletin MS10-023. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS10-023: Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)

The Publisher component of Microsoft Office installed on the remote host has a buffer overflow vulnerability. A remote attacker could exploit this by tricking a user into opening a specially crafted Publisher file, resulting in remote code execution. C Tenable Network Security, Inc...

CentOS Security Advisory CESA-2009:0479 (perl-DBD-Pg)

The remote host is missing updates to perl-DBD-Pg announced in advisory CESA-2009:0479. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CentOS Security Advisory CESA-2009:0479 (perl-DBD-Pg)

The remote host is missing updates to perl-DBD-Pg announced in advisory CESA-2009:0479. CESA-2009:0479 64015 2 $Id: ovcesa20090479.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0479 perl-DBD-Pg Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

CVE-2009-0479

The CVE-2009-0479 entry concerns Online Grades 3.2.4, specifically the admin/admin_login.php component, where the (1) uname and (2) pword parameters are susceptible to SQL injection. Remote attackers could execute arbitrary SQL commands via these inputs, indicating a classic backend query manipul...

CVE-2009-0479

creationtimestamp| type| source ---|---|--- 2009-02-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7956...

CVE-2008-0479

CVE-2008-0479 is a directory traversal vulnerability affecting Web Wiz NewsPad 1.02, specifically in RTE_file_browser.asp. The issue arises from improper handling of the sub parameter (via a pattern like .....\ in the sub parameter), enabling remote attackers to list arbitrary directories and acc...

Cisco IOS TCP Listener Crafted Packets Remote DoS (CSCek37177)

The remote CISCO switch runs a version of IOS contains a flaw which may cause the remote router to crash when processing specially malformed TCP packets. An attacker might use these flaws to crash this router remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

CVE-2007-0479

CVE-2007-0479 is a memory-leak flaw in the Cisco IOS TCP listener (affecting IOS 9.x–12.x) that can be triggered by crafted IPv4 TCP traffic to cause remote denial of service. Multiple connected sources reference a remote DoS condition via malformed TCP packets; Cisco provided a security advisory...

CVE-2006-0479

pmwiki.php in PmWiki 2.1 beta 20, with registerglobals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS variable with the same name, which causes PmWiki to unset the GLOBALS variable but not the GPC...

CVE-2005-0479

CVE-2005-0479 : The vulnerability affects TrackerCam (TrackerCam 5.12 and earlier). A directory traversal flaw exists in ComGetLogFile.php3 that allows remote attackers to read arbitrary files by supplying a manipulated fn parameter with .. sequences and variations such as / , ****, or hex-encode...

CVE-2005-0479

Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and 1 "/" slash, 2 "" backslash, or 3 hex-encoded characters in the fn parameter...

CVE-2003-0479

CVE-2003-0479 is a reported cross-site scripting vulnerability in the WebBBS guestbook. It allows remote attackers to inject arbitrary script via the Name , Email , or Message fields. The documented CVSS 2.0 metrics yield a base score of 4.3 (Medium) with a network attack vector and no authentica...