104 matches found
CVE-2014-0991
Advantech WebAccess 7.2 is affected by a stack-based buffer overflow in the webvact.ocx ActiveX control (projectname parameter) that could allow remote code execution. CoreLabs CORE-2014-0005 documents this family of vulnerabilities and notes a vendor fix via an update (WebAccess 7.2, 2014.07.30 ...
Oracle RDBMS 10.2.0.3/11.1.0.6 - TNS Listener PoC
No description provided by source. TNS Listener Oracle RDBMS exploit, cause trap in Listener process more precisely: in function memcpy called from ncrfintn function which is located in oranro11.dll Successfully working with Oracle RDBMS Win32 11.1.0.6.0 and Oracle RDBMS Win32 10.2.0.3 with lates...
openSUSE Security Update : libmoon-devel (openSUSE-SU-2011:0313-1)
Moonlight was prone to several security problems : CVE-2011-0989: modification of read-only values via RuntimeHelpers.InitializeArray CVE-2011-0990: buffer overflow due to race condition in in Array.FastCopy CVE-2011-0991: use-after-free due to DynamicMethod resurrection CVE-2011-0992: informatio...
Mac OS X : Apple Safari < 6.0.5 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.5. It is, therefore, potentially affected by several issues : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...
APPLE-SA-2013-05-16-1 iTunes 11.0.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-16-1 iTunes 11.0.3 iTunes 11.0.3 is now available and addresses the following: iTunes Available for: Mac OS X v10.6.8 or later, Windows 7, Vista, XP SP2 or later Impact: An attacker in a privileged network position may manipulate HTTP...
KLA10076 Multiple vulnerabilities in Apple iTunes
Multiple critical vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or spoof HTTPS servers. Below is a complete list of vulnerabilities 1. Vectors related to browsing the iTunes Store can be...
CVE-2013-0991
CVE-2013-0991 affects WebKit as used by Apple iTunes prior to version 11.0.3. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a memory corruption leading to a crash via iTunes Store browsing. Root cause is memory corruption in WebKit components, enabling p...
CVE-2011-0991
CVE-2011-0991 is a use-after-free in Mono related to finalizing and resurrecting a DynamicMethod instance, affecting Moonlight 2.x before 2.4.1 or 3.x before 3.99.3. A remote attacker could cause denial of service or potentially other impact. Public sources (SUSE/Gentoo advisories) advise upgradi...
SuSE 11.1 Security Update : moonlight (SAT Patch Number 4246)
Moonlight was prone to several security problems : - modification of read-only values via RuntimeHelpers.InitializeArray. CVE-2011-0989 - buffer overflow due to race condition in in Array.FastCopy. CVE-2011-0990 - use-after-free due to DynamicMethod resurrection. CVE-2011-0991 - information leak...
Secunia Research: imlib2 "IMAGE_DIMENSIONS_OK()" Logic Error
====================================================================== Secunia Research 21/04/2010 - imlib2 "IMAGEDIMENSIONSOK" Logic Error - ====================================================================== Table of Contents Affected...
CVE-2010-0991
CVE-2010-0991 affects imlib2 1.4.3, where heap-based buffer overflows can be triggered by crafted ARGB, XPM, or BMP files due to a logic error in the IMAGE_DIMENSIONS_OK macro in lib/image.h. This has been documented across multiple sources; some advisories note the issue and reference a fix in l...
Information disclosure
Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-0991...
CVE-2009-0991
creationtimestamp| type| source ---|---|--- 2009-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8507...
Oracle RDBMS TNS Listener Proof Of Concept
TNS Listener Oracle RDBMS exploit, cause trap in Listener process more precisely: in function memcpy called from ncrfintn function which is located in oranro11.dll Successfully working with Oracle RDBMS Win32 11.1.0.6.0 and Oracle RDBMS Win32 10.2.0.3 with latest CPU patches applied Vulnerability...
Oracle RDBms 10.2.0.311.1.0.6 - TNS Listener (PoC)
Oracle RDBms 10.2.0.311.1.0.6 - TNS Listener PoC TNS Listener Oracle RDBMS exploit, cause trap in Listener process more precisely: in function memcpy called from ncrfintn function which is located in oranro11.dll Successfully working with Oracle RDBMS Win32 11.1.0.6.0 and Oracle RDBMS Win32...
Oracle RDBMS 10.2.0.3/11.1.0.6 TNS Listener PoC (CVE-2009-0991)
Exploit for unknown platform in category dos / poc =============================================================== Oracle RDBMS 10.2.0.3/11.1.0.6 TNS Listener PoC CVE-2009-0991 =============================================================== TNS Listener Oracle RDBMS exploit, cause trap in Listene...
CVE-2009-0991
CVE-2009-0991 is a vulnerability in the Oracle Database TNS Listener (Listener component) that allows remote attackers to cause a denial of service by sending crafted TNS packets. The vulnerability affects Oracle Database versions including 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7, an...
Fedora Core 10 FEDORA-2009-0991 (vnc)
The remote host is missing an update to vnc announced via advisory FEDORA-2009-0991. OpenVAS Vulnerability Test $Id: fcore20090991.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0991 vnc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Gentoo Security Advisory GLSA 200501-14 (media-sound/mpg123)
The remote host is missing updates announced in advisory GLSA 200501-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: mpg123, mpg123-nas, mpg123-esound
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...