CVE-2012-0925

RealPlayer RV40 remote code execution vulnerability (CVE-2012-0925) affects RealPlayer 11.x, 14.x, 15.x before 15.02.71 and RealPlayer SP 1.0–1.1.5. The flaw is in rv40.dll when parsing RV40 sample data, where a miscalculated offset can lead to arbitrary code execution. Exploitation requires a us...

Real Networks RealPlayer < 15.0.2.72 Multiple Vulnerabilities

Binary data 6311.prm...

RealPlayer for Windows < 15.0.2.71 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 15.0.2.71. As such, it is affected by multiple vulnerabilities : - Errors exist related to 'rvrender RMFF' flags, 'RV20' frame size arrays, 'VIDOBJSTARTCODE', 'RV40', 'RV10',...

CVE-2011-0925

The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop CSD allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco digital signature and then renaming this program ...

CVE-2011-0925

Cisco Secure Desktop (CSD) 3.x contains an ActiveX flaw in CSDWebInstaller.ocx (CSDWebInstallerCtrl) that allows remote code execution. The vulnerability stems from a lack of validation of executables downloaded by the CSDWebInstaller Web control, enabling an attacker to corrupt a downloaded prog...

RHEL 6 : krb5 (RHSA-2010:0925)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0925 advisory. Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a...

Apple Safari <= 4.0.4 'SRC' Remote DoS Vulnerability

Apple Safari is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

CVE-2010-0925

cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.4 on Windows, allows remote attackers to cause a denial of service application crash via a long string in the SRC attribute of a 1 IMG or 2 IFRAME element...

CVE-2010-0925

Apple Safari

CVE-2009-0925

CVE-2009-0925 affects Sun Solaris 10 on SPARC sun4v and OpenSolaris snv_47–snv_85. Local non-privileged users can cause a denial-of-service by hanging the UFS filesystem write via the ufs_getpage/ufs_putapage paths (CR 6425723). Related CRs (6442712) affect 64-bit x86 OpenSolaris snv_39–snv_45; 6...

CVE-2008-0925

Technical details (affected product/version, root cause, impact, or exploit information) are not publicly provided in the supplied documents. Monitor for updates on CVE-2008-0925.

Debian Security Advisory DSA 407-1 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 407-1. OpenVAS Vulnerability Test $Id: deb4071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 407-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 407-1 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 407-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-0925

CVE-2007-0925 describes a cross-site scripting (XSS) vulnerability in Community Server’s search/SearchResults.aspx, exploitable via the q parameter to inject arbitrary script/HTML. Affected component is the search results handler; underlying cause is improper handling/encoding of user input in th...

CVE-2006-0925

CVE-2006-0925 affects the IMAP server component (IMAP4rev1) of Alt-N MDaemon 8.1.1 (and possibly 8.1.4). The vulnerability is a format string flaw in folder-name handling that, when an attacker creates and lists folders containing format specifiers, can cause the server to suffer CPU exhaustion a...

CVE-2005-0925

CVE-2005-0925 affects Ublog Reload 1.0–1.0.4. Affected component: login.asp, vulnerable parameter: msg, enabling Cross‑site Scripting (XSS) by remote attackers to inject arbitrary script/HTML. Impact aligns with partial integrity concerns and no confidentiality/availability loss per CVSS—base 4.3...

CVE-2004-0925

CVE-2004-0925 affects Postfix on Mac OS X 10.3.x through 10.3.5 with SMTPD AUTH enabled. The root cause is that the username is not properly cleared between authentication attempts, allowing the user with the longest username to prevent other valid users from authenticating. The connected documen...

CVE-2003-0925

Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string...

CVE-2003-0925

...

CVE-2002-0925

Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via 1 the USER command to mmpop3d for mmmail 0.0.13 and earlier, 2 the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or 3 the USER command to mmftpd 0.0.7 and earlier...