CVE-2013-0723

CVE-2013-0723 affects Kingsoft Spreadsheets 2012 (v8.1.0.3030) and related versions via multiple heap-based buffer overflows in etxrw.dll. The vulnerability can be triggered by a crafted spreadsheet file, potentially leading to memory corruption, denial of service, or arbitrary code execution. Th...

Oracle Linux 5 : kernel (ELSA-2010-0723)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0723 advisory. - misc make compatallocuserspace incorporate the accessok Don Howard 634463 634464 CVE-2010-3081 - fs xfs: fix missing untrusted inode lookup tag Dave...

Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2009-0377)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0377 advisory. 1:1.6.0.0-0.30.b09.0.1.el5 - Add oracle-enterprise.patch 1:1.6.0.0-0.30.b09 - Updated java-1.6.0-openjdk-lcms.patch 1:1.6.0.0-0.29.b09 - Updated...

Kingsoft Spreadsheets 多个缓冲区溢出漏洞(CVE-2013-0723)

BUGTRAQ ID: 60801 CVECAN ID: CVE-2013-0723 Kingsoft Spreadsheets是创建专业表单、分析和计算数据的应用 Kingsoft Spreadsheets 8.1.0.3030及其他版本存在多个缓冲区溢出漏洞，成功利用后可允许远程攻击者在受影响应用上下文中执行任意代码 0 Kingsoft Corp Spreadsheets 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.kingsoft.com/...

IBM AIX和Virtual I/O Server 'dupmsg'系统呼叫本地拒绝服务漏洞

BUGTRAQ ID: 54706 CVE ID: CVE-2012-0723 AIX是一个基于开放标准的UNIX操作系统，为用户提供企业信息技术基础架构。Virtual I/O Server 提供了命令行的管理方式，通过命令行可以管理VIOS。 IBM AIX和Virtual I/O Server在导出"dupmsg"内核扩展调用到用户空间时存在错误，在实现上存在本地拒绝服务漏洞，攻击者可利用此漏洞使受影响计算机崩溃。 0 IBM AIX 7.x IBM AIX 6.x IBM AIX 5.x IBM Virtual I/O Server VIOS 2.x 厂商补丁： IBM ---...

CVE-2012-0723

Summary: Local denial of service on IBM AIX 5.3/6.1/7.1 and VIOS 2.2.1.4-FP-25 SP-02 due to a flaw in the dupmsg kernel call. Root cause: a kernel extension call is exported to user space without proper sanity checks, allowing a crafted application to crash the system. Impacted components: AIX ke...

Vulnerability in AIX system call

IBM SECURITY ADVISORY First Issued: Thu Jul 26 12:59:02 CDT 2012 | Update: Wed Oct 24 8:49:40 CDT 2012 | Update: Updated interim fix file names | Update: New ifixes for the latest SP's | Updated: Thu Dec 12 12:55:11 CST 2013 | Update: 1. Added KEYs for parsing purposes | 2. Moved to OpenSSL...

CentOS Update for kernel CESA-2010:0723 centos5 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2010:0723 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Sql injection

The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote attackers to have an unspecified impact via a crafted VC-1 file, a related issue to CVE-2011-0723...

CVE-2011-0723

CVE-2011-0723 affects FFmpeg 0.5.x (as used in MPlayer and other products). A malformed VC-1 file can crash the application or potentially allow code execution. The Debian advisory DSA-2306-1 notes FFmpeg upgrades to 0.5.4 to fix this and related CVEs; OpenVAS entries corroborate multiple CVEs in...

Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:089 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for ffmpeg MDVSA-2011:061 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[USN-1104-1] FFmpeg vulnerabilities

=========================================================== Ubuntu Security Notice USN-1104-1 April 04, 2011 ffmpeg vulnerabilities CVE-2010-3429, CVE-2010-3908, CVE-2010-4704, CVE-2011-0480, CVE-2011-0722, CVE-2011-0723 =========================================================== A security issue...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : ffmpeg vulnerabilities (USN-1104-1)

Cesar Bernardini and Felipe Andres Manzano discovered that FFmpeg incorrectly handled certain malformed flic files. If a user were tricked into opening a crafted flic file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of...

Sql injection

SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-0723...

RHEL 5 : kernel (RHSA-2010:0723)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0723 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

CVE-2010-0723

SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0723

CVE-2010-0723 is a SQL injection vulnerability in news.php of Ero Auktion 2.0 and 2010. The vulnerability is triggered via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry assigns a base score of 7.5 (HIGH) with network attack vector and low complexity,...

Mandriva Security Advisory MDVSA-2009:121-1 (lcms)

The remote host is missing an update to lcms announced via advisory MDVSA-2009:121-1. OpenVAS Vulnerability Test $Id: mdksa20091211.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:121-1 lcms Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

SLES11: Security update for lcms

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: lcms liblcms1 More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finder...