Buffer overflow

The Font Xtra.x32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a PFR1 chunk containing an invalid size value that leads to an unexpected sign extension and a buffer overflow, a different...

CVE-2011-0556

Adobe Shockwave Player (Windows/macOS) is affected by CVE-2011-0556 via the Font Xtra.x32 module. The vulnerability stems from parsing the PFR1 chunk where a 16-bit size value is sign-extended, enabling memory corruption and arbitrary code execution or a crash. Affected versions are before 11.5.9...

Shockwave Player < 11.5.9.620 (APSB11-01)

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.620. Such versions are potentially affected by the following issues : - Several unspecified errors exist in the 'dirapi.dll' module that may allow arbitrary code execution. CVE-2010-2587,...

CentOS 5 : firefox (CESA-2010:0556)

Updated firefox and xulrunner packages that fix a security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

CVE-2010-0556

CVE-2010-0556 describes a cross-origin weakness in Google Chrome’s Password Manager where credentials stored for one site could be populated into an authentication dialog triggered by a third-party page (demonstrated via IMG src). Affected versions include Chrome 3.0.195.38 and 4.0.249.78; Chrome...

Chrome Password Manager Cross Origin Weakness &#40;CVE-2010-0556&#41;

Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Chrome Password Manager Cross Origin Weakness Release Date: 2010-02-15 Application: Google Chrome Web Browser Versions:...

SLES9: Security update for PostgreSQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-docs postgresql-server postgresql-pl postgresql-devel postgresql-libs postgresql-contrib postgresql For more information, please visit the...

SuSE9 Security Update : PostgreSQL (YOU Patch Number 11509)

This update fixes two vulnerabilities that affect the backend server and can only be exploited by authenticated users to cause a denial-of-service, or maybe to access other tables/databases without authentication. CVE-2007-0555 CVE-2007-0556 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

Solaris Update for PostgresSQL 123591-10

Check for the Version of PostgresSQL OpenVAS Vulnerability Test Solaris Update for PostgresSQL 123591-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

ZDI-09-019: Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability

ZDI-09-019: Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-019 May 12, 2009 -- CVE ID: CVE-2009-0556 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office PowerPoint -- TippingPointTM IPS...

Microsoft PowerPoint invalid object reference vulnerability

Added: 04/20/2009 CVE: CVE-2009-0556 BID: 34351 OSVDB: 53182 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability in Microsoft PowerPoint allows command execution when an invalid object is referenced...

Mandriva Update for postgresql MDKSA-2007:037-1 (postgresql)

Check for the Version of postgresql OpenVAS Vulnerability Test Mandriva Update for postgresql MDKSA-2007:037-1 postgresql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for postgresql MDKSA-2007:037 (postgresql)

Check for the Version of postgresql OpenVAS Vulnerability Test Mandriva Update for postgresql MDKSA-2007:037 postgresql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for postgresql MDKSA-2007:037 (postgresql)

Check for the Version of postgresql OpenVAS Vulnerability Test Mandriva Update for postgresql MDKSA-2007:037 postgresql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for postgresql MDKSA-2007:037-1 (postgresql)

Check for the Version of postgresql OpenVAS Vulnerability Test Mandriva Update for postgresql MDKSA-2007:037-1 postgresql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2009-0556

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in t...

CVE-2009-0556

CVE-2009-0556 affects Microsoft Office PowerPoint (Windows and Mac) versions listed in the description. It is a memory corruption vulnerability triggered by a PowerPoint file containing an OutlineTextRefAtom with an invalid index, enabling remote code execution when a user opens the malicious fil...

Microsoft Office PowerPoint code execution vulnerability

Overview Microsoft PowerPoint contains a vulnerability. If exploited, this vulnerability could allow an attacker to execute code. Description Microsoft Powerpoint is a component of Microsoft Office. Per Microsoft Security Advisory 969136: The vulnerability is caused when Microsoft Office PowerPoi...

Ubuntu Update for postgresql-7.4/-8.0/-8.1 vulnerabilities USN-417-1

Ubuntu Update for Linux kernel vulnerabilities USN-417-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4171.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for postgresql-7.4/-8.0/-8.1 vulnerabilities USN-417-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-417-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...