CVE-2015-0851

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider SP, does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service crash via schema-invalid XML data...

CVE-2015-0851

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider SP, does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service crash via schema-invalid XML data...

CVE-2015-0851

CVE-2015-0851 affects XMLTooling-C (before 1.5.5) as used in OpenSAML-C and Shibboleth Service Provider. The vulnerability arises from improper handling of integer conversion exceptions, allowing remote attackers to trigger a denial of service (crash) via schema-invalid XML data. Affected compone...

[SECURITY] [DLA 290-2] opensaml2 security update

Package : opensaml2 Version : 2.3-2+squeeze2 CVE ID : CVE-2015-0851 It was discovered that opensaml2, a Security Assertion Markup Language library, needed to be rebuilt against a fixed version of the xmltooling package due to its use of macros vulnerable to CVE-2015-0851 as fixed in the DSA 3321-...

Debian DLA-290-2 : opensaml2 security update

It was discovered that opensaml2, a Security Assertion Markup Language library, needed to be rebuilt against a fixed version of the xmltooling package due to its use of macros vulnerable to CVE-2015-0851 as fixed in the DSA 3321-1 update. NOTE: Tenable Network Security has extracted the preceding...

[SECURITY] [DLA 290-1] xmltooling security update

Package : xmltooling Version : 1.3.3-2+deb6u1 CVE ID : CVE-2015-0851 Debian Bug : 793855 Shibboleth SP software crashes on well-formed but invalid XML Another upload for opensaml2 is needed to really solve this issue. This will be done shortly...

[SECURITY] [DSA 3321-2] opensaml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3321-2 [email protected] https://www.debian.org/security/ Alessandro Ghedini August 08, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3321-1] xmltooling security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3321-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini July 30, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3321-1] xmltooling security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3321-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini July 30, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3003-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3003-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 10, 2014 http://www.debian.org/security/faq -...

CVE-2013-0851

CVE-2013-0851 : FFmpeg’s decode_frame routine in libavcodec/eamad.c is vulnerable to an out-of-bounds array access when processing crafted Electronic Arts Madcow video data, affecting FFmpeg versions prior to 1.1. This remote issue can trigger a crash or unspecified impact. The CVE is documented ...

Gentoo Security Advisory GLSA 201210-06 (libav)

The remote host is missing updates announced in advisory GLSA 201210-06. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2012-0851

The ffh264decodeseqparameterset function in h264ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via ...

CVE-2012-0851

The CVE-2012-0851 vulnerability affects FFmpeg/libavcodec (function ff_h264_decode_seq_parameter_set in h264_ps.c). A crafted H.264 file can trigger a denial of service (application crash) and possibly execute arbitrary code due to issues related to chroma_format_idc. Affected releases include FF...

Debian Security Advisory DSA 2494-1 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory DSA 2494-1. OpenVAS Vulnerability Test $Id: deb24941.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2494-1 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Ubuntu Update for ffmpeg USN-1479-1

Ubuntu Update for Linux kernel vulnerabilities USN-1479-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14791.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ffmpeg USN-1479-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2012-0851

The ffh264decodeseqparameterset function in h264ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via ...

OpenSSL 0.9.6k < 0.9.6l Vulnerability

The version of OpenSSL installed on the remote host is prior to 0.9.6l. It is, therefore, affected by a vulnerability as referenced in the 0.9.6l advisory. - OpenSSL 0.9.6k allows remote attackers to cause a denial of service crash via large recursion via malformed ASN.1 sequences. CVE-2003-0851...

CVE-2011-0851

Technical details about CVE-2011-0851 are not publicly provided in the supplied documents. No confirmed affected products, vulnerable components, impact, or fixes are disclosed here. Monitor for updates.

Oracle Database 'XML DB component' Unspecified vulnerability

Oracle database is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:databaseserver";...