Fedora 21 : libwmf-0.2.8.4-45.fc21 (2015-10601)

CVE-2015-0848 Heap overflow CVE-2015-4588 RLE decoding doesn't check that the 'count' fits into the image CVE-2015-4695 metapencreate heap buffer overflow CVE-2015-4696 wmf2gd/wmf2eps use after free Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora Update for libwmf FEDORA-2015-10627

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3302-1 : libwmf - security update

Insufficient input sanitising in libwmf, a library to process Windows metafile data, may result in denial of service or the execution of arbitrary code if a malformed WMF file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

[SECURITY] [DSA 3302-1] libwmf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3302-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 06, 2015 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3302-1 (libwmf - security update)

Insufficient input sanitising in libwmf, a library to process Windows metafile data, may result in denial of service or the execution of arbitrary code if a malformed WMF file is opened. OpenVAS Vulnerability Test $Id: deb3302.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory...

CVE-2015-0848

CVE-2015-0848 affects libwmf (0.2.8.4). A heap-based buffer overflow occurs when processing WMF files with embedded BMP images, enabling remote attackers to crash or possibly execute arbitrary code. Public advisories/updates across distributions fix libwmf to newer releases (e.g., 0.2.8.4-14 and ...

[SECURITY] [DLA 253-1] libwmf security update

Package : libwmf Version : 0.2.8.4-6.2+deb6u1 CVE ID : CVE-2015-0848 CVE-2015-4588 Debian Bug : 787644 The following vulnerabilities were discovered in the Windows Metafile conversion library when reading BMP images embedded into WMF files: CVE-2015-0848 A heap overflow when decoding embedded BMP...

Debian DLA-253-1 : libwmf security update

The following vulnerabilities were discovered in the Windows Metafile conversion library when reading BMP images embedded into WMF files : CVE-2015-0848 A heap overflow when decoding embedded BMP images that don't use 8 bits per pixel. CVE-2015-4588 A missing check in the RLE decoding of embedded...

Fedora 21 : libwmf-0.2.8.4-43.fc21 (2015-9674)

CVE-2015-0848 heap overflow when decoding BMP images CVE-2015-0848 heap overflow when decoding BMP images Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

openSUSE Security Update : libwmf (openSUSE-2015-443)

libwmf was updated to fix three security issues and one non-security bug. The following vulnerabilities were fixed : - CVE-2015-0848: An attacker that could trick a victim into opening a specially crafted WMF file with BMP portions in a libwmf based application could have executed arbitrary code...

openSUSE Security Update : libwmf (openSUSE-2015-444)

libwmf was updated to fix two security issues. The following vulnerabilities were fixed : - CVE-2015-0848: An attacker that could trick a victim into opening a specially crafted WMF file with BMP portions in a libwmf based application could have executed arbitrary code with the user's privileges...

Fedora Update for libwmf FEDORA-2015-9674

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3003-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3003-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 10, 2014 http://www.debian.org/security/faq -...

CVE-2014-0848

CVE-2014-0848 affects IBM Netezza Performance Portal 2.0 (before 2.0.0.4) where the Apache HTTP Server default config uses weak SSLCipherSuite values, enabling a remote attacker to potentially defeat cryptographic protections via brute-force. Vulnerable component: Apache web server in PERFPORTAL ...

IBM Netezza Performance Portal安全绕过漏洞

Bugtraq ID:66189 CVE ID:CVE-2014-0848 IBM Netezza数据仓库应用设备将存储、处理、数据库和分析融入到一个高性能数据仓库设备中,使大数据高级分析更简单、更迅捷和更易用。 IBM Netezza Performance Portal所使用的Apache WEB服务器默认配置使用低强度的SSL加密，允许攻击者利用漏洞比较容易的进行破解攻击。 0 IBM Netezza Performance Portal 2.0 IBM Netezza Performance Portal 2.0.0.4已经修复该漏洞，建议用户下载更新：...

CVE-2013-0848

The decodeinit function in libavcodec/huffyuv.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via a crafted width in huffyuv data with the predictor set to median and the colorspace set to YUV422P, which triggers an out-of-bounds array access...

CVE-2013-0848

CVE-2013-0848 concerns FFmpeg/libav’s decode_init in libavcodec/huffyuv.c, where before 1.1 the predictor set to median with width crafted in huffyuv data (colorspace YUV422P) can cause an out-of-bounds array access. The connected advisories confirm multiple vendors released fixes and updated pac...

Gentoo Security Advisory GLSA 201210-06 (libav)

The remote host is missing updates announced in advisory GLSA 201210-06. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2012-0848

The CVE-2012-0848 vulnerability affects FFmpeg 0.9.1, specifically a heap-based buffer overflow in libavcodec/ws-snd1.c (ws_snd_decode_frame) caused by an incorrect calculation of the samples count. This allows a remote attacker to crash the application by feeding a crafted media file, resulting ...

CentOS Update for java CESA-2010:0339 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...