CVE-2016-1043

CVE-2016-1043 : An integer overflow exists in Adobe Reader/Acrobat on Windows and macOS, affecting versions prior to 11.0.16, 15.006.30172, and 15.016.20039. The vulnerability opens the possibility of arbitrary code execution via unspecified vectors when processing certain content in Acrobat/Read...

VMware Fusion 6.x < 6.0.5 / 7.x < 7.0.1 Multiple Vulnerabilities (VMSA-2015-0001)

The version of VMware Fusion installed on the remote Mac OS X host is version 6.x prior to 6.0.5 or version 7.x prior to 7.0.1. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists that allows a local attacker to escalate privileges or cause a denial of servi...

CVE-2015-1043

Affected products and component: VMware HGFS in Workstation 10.x (before 10.0.5), VMware Player 6.x (before 6.0.5), and VMware Fusion 6.x (before 6.0.5) and 7.x (before 7.0.1). Vulnerability and impact: HGFS input validation flaw that allows guest OS users to cause a guest OS denial of service. T...

VMSA-2015-0001 : VMware vCenter Server, ESXi, Workstation, Player, and Fusion updates address security issues (POODLE)

a. VMware ESXi, Workstation, Player, and Fusion host privilege escalation vulnerability VMware ESXi, Workstation, Player and Fusion contain an arbitrary file write issue. Exploitation this issue may allow for privilege escalation on the host. The vulnerability does not allow for privilege...

KLA10452 Multiple vulnerabilities in VMware products

Multiple serious vulnerabilities have been found in VMware products. Malicious users can exploit these vulnerabilities to gain privileges or cause denial of service. Below is a complete list of vulnerabilities 1. Vectors related to file write can be exploited locally; 2. Improper input validation...

Apple iTunes < 11.1.4 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 11.1.4. It is, therefore, potentially affected by several issues : - The included versions of WebKit, libxml, and libxslt contain several errors that could lead to memory corruption and possibly arbitrary code executio...

Apple iTunes < 11.1.4 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 11.1.4. It is, therefore, affected by multiple vulnerabilities : - The included versions of the WebKit, libxml, and libxslt components in iTunes contain several errors that can lead to memory corruption and arbitrary code executio...

CVE-2013-1043

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2...

CVE-2013-1043

CVE-2013-1043 affects WebKit used in Apple iOS prior to 7. A remote attacker can trigger memory corruption to execute arbitrary code or cause a denial of service by visiting a crafted website, potentially crashing the application. The NVD notes a base score of 6.8 (Medium) with network attack vec...

Mandrake Linux Security Advisory : ypserv (MDKSA-2000:064)

A format string parsing bug exists in ypbind 3.3 if it is run in debug mode which leaks file descriptors under certain circumstances which can lead to a DoS. In addition, ypbind may suffer from buffer overflows. In the ypserv program, a buffer overflow and format bug exist if the build system doe...

RHEL 5 : libwpd (RHSA-2012:1043)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1043 advisory. - libwpd: Memory overwrite flaw by processing certain WordPerfect WPD documents CVE-2012-2149 Note that Nessus has not tested for this issue but has...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : lcms vulnerability (USN-1043-1)

It was discovered that a NULL pointer dereference in the code for handling transformations of monochrome profiles could allow an attacker to cause a denial of service through a specially crafted image. CVE-2009-0793. Note that Tenable Network Security has extracted the preceding description block...

BS.Player <= 2.56 build 1043 DLL Hijacking Exploit (mfc71loc.dll)

Exploit for windows platform in category local exploits ================================================================= BS.Player int main WinExec"calc", SWNORMAL; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved main; return 0; 0day.today 2018-04-08...

CVE-2010-1043

Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

CVE-2010-1043

CVE-2010-1043 affects jaxCMS 1.0: a directory traversal in index.php allows remote attackers to include and execute arbitrary local files via the p parameter (local file inclusion). Root cause: unsanitized directory traversal in input handling. Impact: partial disclosure, integrity, and availabil...

CVE-2010-1043

creationtimestamp| type| source ---|---|--- 2010-02-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11359...

CVE-2009-1043

CVE-2009-1043 affects Microsoft Internet Explorer 8 on Windows 7. The vulnerability allows remote code execution via unknown vectors triggered by clicking a link, demonstrated during PWN2OWN 2009. The public records describe an unspecified vulnerability with IE8/Win7; no concrete root-cause, affe...

Gentoo Security Advisory GLSA 200504-15 (PHP)

The remote host is missing updates announced in advisory GLSA 200504-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Immunity Canvas: PHPUSERBASE_INCLUDE

Name| phpuserbaseinclude ---|--- CVE| CVE-2008-1043 Exploit Pack| CANVAS Description| phpUserBase Remote File Include Notes| CVE Name: CVE-2008-1043 VENDOR: phpuserbase Repeatability: Infinite References: http://www.milw0rm.com/exploits/5180 CVE Url:...

CVE-2008-1043

Affected software: Linux Web Shop (LWS) PHP User Base 1.3 BETA. Vulnerability type: PHP remote file inclusion in templates/default/header.inc.php. Root cause / vector: remote attackers can supply a URL in the menu parameter, leading to arbitrary PHP code execution. Impact (as stated): arbitrary c...