120 matches found
Adobe Flash Player Multiple Vulnerabilities -01 (Feb 2016) - Windows
Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...
Adobe Flash Player <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)
The version of Adobe Flash Player installed on the remote Windows host is prior or equal to version 20.0.0.286. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-free...
Adobe Flash Player for Mac <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)
The version of Adobe Flash Player installed on the remote Mac OS X host is prior or equal to version 20.0.0.286. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-fre...
Adobe AIR <= 20.0.0.233 Multiple Vulnerabilities (APSB16-04)
The version of Adobe AIR installed on the remote Windows host is prior or equal to version 20.0.0.233. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-free errors...
SUSE: Security Advisory for libpng16 (SUSE-SU-2015:0092-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2012-0973)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED12 / SLES12 Security Update : libpng16 (SUSE-SU-2015:0092-1)
This update fixes the following security issues : - CVE-2014-9495: libpng versions heap overflow vulnerability, that under certain circumstances could be exploit. bnc912076 - CVE-2015-0973: A heap-based overflow was found in the pngcombinerow function of the libpng library, when very large...
Fedora 20 : libpng10-1.0.63-1.fc20 (2015-2830)
This update addresses a couple of buffer overflows that might allow context-dependent attackers to execute arbitrary code via very wide PNG images. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora Update for libpng10 FEDORA-2015-2863
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : libpng16 (openSUSE-SU-2015:0161-1)
libpng was updated to fix some security issues : - CVE-2014-9495 bnc912076: Heap-buffer overflow pngcombinerow with very wide interlaced images - CVE-2015-0973 bnc912929: overflow in pngreadIDATdata libpng is now also build with -DPNGSAFELIMITSSUPPORTED. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2015-0973
Buffer overflow in the pngreadIDATdata function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495...
CVE-2015-0973
CVE-2015-0973 is a library-level vulnerability in libpng. A buffer overflow in png_read_IDAT_data (libpng) can be triggered by IDAT data with a large width, allowing potential arbitrary code execution. Affected libpng versions are before 1.5.21 (and 1.6.x before 1.6.16). Android bulletin coverage...
CVE-2014-0973
The imageverify function in platform/msmshared/imageverify.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSApublicdecrypt API...
CVE-2014-0973
CVE-2014-0973 affects the Little Kernel (LK) bootloader used with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices. The image_verify function in platform/msm_shared/image_verify.c does not ensure the digest size is consistent with the RSA_public_decrypt API, enabling bypass...
CVE-2013-0973
Apple Mac OS X up to 10.7.5 is affected by CVE-2013-0973, where the marketing-text WebView could load plugins, enabling MITM attackers to run plugin code by modifying the data stream. The issue was addressed in the 2013-001 security update for OS X (and related Mountain Lion changes noted in the ...
CVE-2012-0973
OSClass prior to 2.3.5 is vulnerable to SQL injection via the sCategory parameter in index.php. The root cause is improper handling in osc_search_category_id (hSearch.php) and findBySlug (Category.php), enabling remote command execution. Evidence across sources shows CVE-2012-0973 with CVSS v2 ba...
CentOS Update for nspr CESA-2012:0973 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-0973
creationtimestamp| type| source ---|---|--- 2012-01-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36625...
CVE-2010-0973
The CVE-2010-0973 entry describes an SQL injection in index.php of the phppool media Domain Verkaus and Auktions Portal, allowing remote attackers to execute arbitrary SQL commands via the id parameter. Affected component: index.php; vulnerability type: SQL injection due to unsanitized id input. ...