94 matches found
CVE-2017-0664
CVE-2017-0664 affects Android’s Framework with an elevation of privilege vulnerability. Affected: Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 (Android ID A-36491278). Description in connected Nessus entry confirms the issue is an EoP in the Framework and notes there is no vendor-...
CVE-2016-0664
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-0664
The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195...
CVE-2015-0664
Cisco AnyConnect Secure Mobility Client (affected: 4.0(.00051) and earlier) contains an IPC channel vulnerability (CVE-2015-0664) that allows a local attacker to write to arbitrary user-space memory and escalate privileges via specially crafted IPC messages. Multiple Nessus/Cisco advisories reite...
KLA10482 Multiple vulnerabilities in Cisco AnyConnect SMC
Multiple serious vulnerabilities have been found in Cisco AnyConnect Secure Mobility Client. Malicious users can exploit these vulnerabilities to gain privileges or write arbitrary files. Below is a complete list of vulnerabilities 1. An unknown vulnerability can be exploited locally via a...
Apple QuickTime Text Track Descriptors Heap Buffer Overflow - Ver2 (CVE-2012-0664)
A heap buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to improper validation of parameters lengths. A remote attacker can exploit this vulnerability by enticing a victim to open a specially crafted QuickTime Text file with an affected version of...
DEBIAN-CVE-2013-4331
Light Display Manager aka LightDM 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file...
CVE-2013-0664
CVE-2013-0664 affects Schneider Electric Modicon PLCs (Quantum 140NOE77111, 140NWM10000, M340 BMXNOE0110x, Premium TSXETY5103). The vulnerability arises in the FactoryCast feature: remote authenticated users can embed Modbus messages in SOAP HTTP POST requests, enabling arbitrary code execution o...
QuickTime < 7.7.2 Multiple Vulnerabilities
Binary data 6489.prm...
Apple QuickTime 7.7.2之前版本多个远程任意代码执行漏洞
BUGTRAQ ID: 53547 CVE ID: CVE-2012-0663,CVE-2012-0664,CVE-2012-0665,CVE-2012-0666,CVE-2012-0667,CVE-2012-0668,CVE-2012-0669,CVE-2012-0670,CVE-2012-0671,CVE-2012-0265 OS X Lion Server 内含一组应用软件，可将任意一台Mac 变成功能强大的服务器。Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 Windows 7、Vista、XP上的Apple QuickTime...
CVE-2012-0664
CVE-2012-0664 affects Apple QuickTime on Windows prior to version 7.7.2. It is a heap-based buffer overflow in QuickTime’s handling of text tracks in a movie file, exploited via a crafted text track to execute arbitrary code or crash the application. Apple’s advisory notes QuickTime 7.7.2 as the ...
CVE-2011-0664
CVE-2011-0664 affects Microsoft .NET Framework 2.0 SP1/SP2, 3.5 Gold/SP1, 3.5.1, 4.0 and Silverlight 4 before 4.0.60531.0. The issue stems from improper validation of arguments to unspecified networking API functions, enabling remote code execution when processing crafted XBAPs, ASP.NET apps, .NE...
Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability (2514842)
This host is missing a critical security update according to Microsoft Bulletin MS11-039. OpenVAS Vulnerability Test $Id: secpodms11-039.nasl 8190 2017-12-20 09:44:30Z cfischer $ Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability 2514842 Authors: Sooraj KS Copyright:...
Google Chrome Multiple Vulnerabilities - (Windows)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnwin01.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome Multiple Vulnerabilities - Windows Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...
CVE-2010-0664
Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/childprocesssecuritypolicy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service memory consumption and application crash via a URL that specifies multiple...
CVE-2010-0664
Google Chrome prior to version 4.0.249.78 is affected by a stack consumption vulnerability in ChildProcessSecurityPolicy::CanRequestURL. The issue allows remote attackers to trigger memory consumption and a crash by supplying a URL that uses multiple protocols (e.g., repeated view-source: sequenc...
SLES9: Security update for libexif
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libexif For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5010513 within the SuS...
Debian Security Advisory DSA 1778-1 (mahara)
The remote host is missing an update to mahara announced via advisory DSA 1778-1. OpenVAS Vulnerability Test $Id: deb17781.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1778-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...