Oracle Linux 6 : kernel (ELSA-2011-0928)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0928 advisory. - net fix netns vs proto registration ordering Wade Mealing 702305 702306 CVE-2011-1767 CVE-2011-1768 Tenable has extracted the preceding description...

Oracle Linux 5 : xen (ELSA-2008-0194)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0194 advisory. - Disable QEMU image format auto-detection CVE-2008-2004 rhbz 444700 - Fix QEMU buffer overflow CVE-2007-5730 rhbz 360381 - Fix QEMU block device exten...

EMC AlphaStor Device Manager Command Injection

Added: 02/01/2013 CVE: CVE-2013-0928 BID: 57472 OSVDB: 89436 Background EMC AlphaStor is a media lifecycle and tape library management product for enterprise environments. Problem EMC AlphaStor versions prior to 4.0 Build 800 are vulnerable to remote command injection. The AlphaStor Device Manage...

ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities EMC Identifier: ESA-2013-008 EMC Identifier: NW146708 CVE Identifier: CVE-2013-0928, CVE-2013-0929 Severity Rating: See below for individual severity scores Affected product: EMC AlphaStor 4.0 prior...

CVE-2013-0928

CVE-2013-0928 affects EMC AlphaStor, specifically the Device Manager process rrobotd.exe. The vulnerability is a remote command injection flaw exposed via the DCP run command, caused by improper input handling. Versions prior to 4.0 Build 800 are vulnerable; upgrading to 4.0 Build 800 or later is...

EMC AlphaStor Device Manager Opcode 0x75 Command Injection

This module exploits a flaw within the Device Manager rrobtd.exe. When parsing the 0x75 command, the process does not properly filter user supplied input allowing for arbitrary command injection. This module has been tested successfully on EMC AlphaStor 4.0 build 116 with Windows 2003 SP2 and...

RealNetworks RealPlayer Atrac Sample Decoding Remote Code Execution Vulnerability (Mac OS X)

This host is installed with RealPlayer which is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbrealplayeratracsamplecodeexecvulnmacosx.nasl 9122 2018-03-17 14:01:04Z cfischer $ RealNetworks RealPlayer Atrac Sample Decoding Remote Code Execution Vulnerability Mac O...

RealNetworks RealPlayer Atrac Sample Decoding Remote Code Execution Vulnerability - Mac OS X

RealPlayer is prone to a remote code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-0928

The CVE-2012-0928 entry affects RealNetworks RealPlayer: ATRAC decoding in RealPlayer 11.x and 14.x up to 14.0.7, RealPlayer SP 1.0–1.1.5, and Mac RealPlayer 12.x prior to 12.0.0.1703. The vulnerability arises during ATRAC sample decoding, where faulty parsing of the audio data allows remote atta...

Real Networks RealPlayer < 15.0.2.72 Multiple Vulnerabilities

Binary data 6311.prm...

Real Networks RealPlayer Atrac样本解码远程代码执行漏洞

Bugtraq ID: 51890 CVE ID：CVE-2012-0928 RealNetworks RealPlayer是一款流行的媒体播放程序 RealNetworks RealPlayer Atrac样本解码存在安全问题，远程攻击者可以构建恶意媒体文件，诱使用户解析，以应用程序上下文执行任意代码 0 RealPlayer 15.x 厂商解决方案 RealPlayer 15.0.2.71已经修复此漏洞，建议用户下载使用： http://www.real.com...

RealPlayer for Windows < 15.0.2.71 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 15.0.2.71. As such, it is affected by multiple vulnerabilities : - Errors exist related to 'rvrender RMFF' flags, 'RV20' frame size arrays, 'VIDOBJSTARTCODE', 'RV40', 'RV10',...

SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6161)

Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658 / CVE-2009-0927 / CVE-2009-0193 / CVE-2009-0928 / CVE-2009-1061 /...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6121)

Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658 / CVE-2009-0927 / CVE-2009-0193 / CVE-2009-0928 / CVE-2009-1061 /...

CVE-2010-0928

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation FWE algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to...

CVE-2010-0928

CVEs and details: CVE-2010-0928 affects OpenSSL 0.9.8i on the Gaisler LEON3 SoC (Xilinx Virtex-II Pro FPGA). The root cause is a Fixed Width Exponentiation (FWE) implementation that does not verify the signature before returning it, enabling a physically proximate attacker to recover the private ...

CentOS 5 : xen (CESA-2008:0194)

Updated xen packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The xen packages contain tools for managing the virtual machine monitor in Red Ha...

Adobe JRun 4 Server File Disclosure (CVE-2004-0928)

Adobe JRun is an application server used to deploy J2EE Java 2 Enterprise Edition applications, JSPs Java Server Pages, and other Java applications. It can be used as a stand-alone web server or can be accessed through other web servers including IIS and Apache. With IIS, JRun can be registered t...

Mandrake Security Advisory MDVSA-2009:257 (qemu)

The remote host is missing an update to qemu announced via advisory MDVSA-2009:257. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:257 (qemu)

The remote host is missing an update to qemu announced via advisory MDVSA-2009:257. OpenVAS Vulnerability Test $Id: mdksa2009257.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:257 qemu Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...