SUSE: Security Advisory for libpng16 (SUSE-SU-2015:0092-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-0973)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : libpng16 (SUSE-SU-2015:0092-1)

This update fixes the following security issues : - CVE-2014-9495: libpng versions heap overflow vulnerability, that under certain circumstances could be exploit. bnc912076 - CVE-2015-0973: A heap-based overflow was found in the pngcombinerow function of the libpng library, when very large...

Fedora 20 : libpng10-1.0.63-1.fc20 (2015-2830)

This update addresses a couple of buffer overflows that might allow context-dependent attackers to execute arbitrary code via very wide PNG images. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora Update for libpng10 FEDORA-2015-2863

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libpng16 (openSUSE-SU-2015:0161-1)

libpng was updated to fix some security issues : - CVE-2014-9495 bnc912076: Heap-buffer overflow pngcombinerow with very wide interlaced images - CVE-2015-0973 bnc912929: overflow in pngreadIDATdata libpng is now also build with -DPNGSAFELIMITSSUPPORTED. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2015-0973

CVE-2015-0973 is a library-level vulnerability in libpng. A buffer overflow in png_read_IDAT_data (libpng) can be triggered by IDAT data with a large width, allowing potential arbitrary code execution. Affected libpng versions are before 1.5.21 (and 1.6.x before 1.6.16). Android bulletin coverage...

CVE-2015-0973

Buffer overflow in the pngreadIDATdata function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495...

CVE-2014-0973

The imageverify function in platform/msmshared/imageverify.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not check whether a certain digest size is consistent with the RSApublicdecrypt API...

CVE-2014-0973

CVE-2014-0973 affects the Little Kernel (LK) bootloader used with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices. The image_verify function in platform/msm_shared/image_verify.c does not ensure the digest size is consistent with the RSA_public_decrypt API, enabling bypass...

CVE-2013-0973

Apple Mac OS X up to 10.7.5 is affected by CVE-2013-0973, where the marketing-text WebView could load plugins, enabling MITM attackers to run plugin code by modifying the data stream. The issue was addressed in the 2013-001 security update for OS X (and related Mountain Lion changes noted in the ...

CVE-2012-0973

OSClass prior to 2.3.5 is vulnerable to SQL injection via the sCategory parameter in index.php. The root cause is improper handling in osc_search_category_id (hSearch.php) and findBySlug (Category.php), enabling remote command execution. Evidence across sources shows CVE-2012-0973 with CVSS v2 ba...

CentOS Update for nspr CESA-2012:0973 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-0973

creationtimestamp| type| source ---|---|--- 2012-01-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36625...

CVE-2010-0973

The CVE-2010-0973 entry describes an SQL injection in index.php of the phppool media Domain Verkaus and Auktions Portal, allowing remote attackers to execute arbitrary SQL commands via the id parameter. Affected component: index.php; vulnerability type: SQL injection due to unsanitized id input. ...

CVE-2010-0973

creationtimestamp| type| source ---|---|--- 2010-03-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11733...

CVE-2009-0973

CVE-2009-0973 affects Oracle Database 10.1.0.5 specifically the Cluster Ready Services component. The available data characterizes it as an unspecified vulnerability that could allow remote attackers to impact availability via unknown vectors. There are no exploitation details provided in the doc...

Fedora Core 9 FEDORA-2009-0973 (asterisk)

The remote host is missing an update to asterisk announced via advisory FEDORA-2009-0973. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

CVE-2008-0973

The CVE-2008-0973 entry describes a buffer overflow in Double-Take (HP StorageWorks Storage Mirroring) version 4.5.0.1629 and other 4.5.0.x releases. The vulnerability is exploitable by remote attackers via a packet containing a long string in the username field. The impact is listed as unknown/u...

CVE-2007-0973

CVE-2007-0973 affects Jupiter CMS 1.1.5 and describes multiple cross-site scripting (XSS) vulnerabilities in index.php. The issue arises because certain HTTP headers (including Referer) are displayed without proper sanitization when an administrator performs a Logged Guest action, enabling inject...