CVE-2013-1042

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

RHEL 6 : kernel (RHSA-2012:1042)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1042 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

Mandrake Linux Security Advisory : ypserv (MDKSA-2000:064)

A format string parsing bug exists in ypbind 3.3 if it is run in debug mode which leaks file descriptors under certain circumstances which can lead to a DoS. In addition, ypbind may suffer from buffer overflows. In the ypserv program, a buffer overflow and format bug exist if the build system doe...

CVE-2011-1042

Affected software: Google Chrome OS (flimflam/flimflamd) prior to 0.9.130.14 Beta. Vulnerability: use-after-free in the network daemon that can be triggered by a crafted hidden Wi‑Fi network name, enabling user-assisted remote denial of service (daemon crash). Impact: partial availability loss of...

Ubuntu: Security Advisory (USN-1042-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Media Player '.AVI' File DOS Vulnerability

Windows Media Player is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1042

Microsoft Windows Media Player 11 is affected by CVE-2010-1042 due to an error in colorspace conversion when processing crafted .AVI files. The vulnerability can lead to a denial of service (memory corruption) and possibly arbitrary code execution. OpenVAS entries corroborate a Denial of Service ...

CVE-2010-1042

creationtimestamp| type| source ---|---|--- 2010-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33770...

CVE-2009-1042

Affected software is Apple Safari on Mac OS X 10.5.6. The vulnerability is described as an unspecified remote code execution triggered by clicking a link, demonstrated during PWN2OWN 2009. No concrete root-cause details, affected subcomponents, or remediation/version fixes are provided in the con...

Gentoo Security Advisory GLSA 200504-15 (PHP)

The remote host is missing updates announced in advisory GLSA 200504-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-1042

Directory traversal vulnerability in include/body.inc.php in Linux Web Shop LWS php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the content parameter...

CVE-2008-1042

CVE-2008-1042 describes a directory traversal in Linux Web Shop (LWS) PHP Download Manager 1.0 and 1.1, where include/body.inc.php accepts a .. in the content parameter to include and execute arbitrary local files. This vulnerability can impact confidentiality, integrity, and availability (CVSSv2...

CVE-2008-1042

Directory traversal vulnerability in include/body.inc.php in Linux Web Shop LWS php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the content parameter...

CVE-2007-1042

CVE-2007-1042 affects Xpression News (X-News) 1.0.1. A directory traversal vulnerability in news.php allows remote attackers to include arbitrary files or read sensitive information via the xnews-template parameter when magic_quotes_gpc is disabled. The underlying issue is path traversal (dot-dot...

CentOS 4 : PHP (CESA-2005:406)

Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...

Debian DSA-1042-1 : cyrus-sasl2 - programming error

The Mu Security research team discovered a denial of service condition in the Simple Authentication and Security Layer authentication library SASL during DIGEST-MD5 negotiation. This potentially affects multiple products that use SASL DIGEST-MD5 authentication including OpenLDAP, Sendmail, Postfi...

CentOS 3 : PHP (CESA-2005:405)

Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...

CVE-2006-1042

CVE-2006-1042 affects Gregarius 0.5.2. The vulnerability is a SQL injection in the web UI, exploitable via the 1) folder parameter to feed.php or 2) rss_query parameter to search.php, enabling remote attackers to execute arbitrary SQL commands. The provided sources describe multiple SQL injection...

Fedora Core 3 : php-4.3.11-2.4 (2005-315)

This update includes the latest stable release of PHP 4.3, including a number of security fixes to the exif extension CVE-2005-1042 and CVE-2005-1043 and the getimagesize function CVE-2005-0524, along with many bug fixes. Note that Tenable Network Security has extracted the preceding description...

CVE-2005-1042

Integer overflow in the exifprocessIFDTAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count...