159 matches found
Memory corruption
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2016-1124
Technical details about CVE-2016-1124 are not provided in the connected documents; public specifics (affected product/version, impact, or fix) are not available here. Monitor for updates.
CVE-2016-1063
Technical details for CVE-2016-1063 are not publicly provided in the connected documents. The supplied sources do not specify affected products, versions, root cause, or remediation beyond the general description. Monitor for updates.
Mageia: Security Advisory (MGASA-2016-0116)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple Safari Multiple Vulnerabilities -01 (Apr 2015) - Mac OS X
Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...
CVE-2015-1124
The CVE-2015-1124 entry concerns WebKit as used in Apple products (iOS before 8.3, Apple TV before 7.2, Safari before 6.2.5, 7.x before 7.1.5, 8.x before 8.0.5) where a crafted web site can trigger remote code execution or memory corruption, potentially causing an application crash. Connected sou...
Mac OS X : Apple Safari < 6.2.5 / 7.1.5 / 8.0.5 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.5 / 7.1.5 / 8.0.5. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the state management which can result in the user's browser history not being fully purged from 'history.plist'...
openSUSE Security Update : roundcubemail (openSUSE-SU-2012:1124-1)
Update to version 0.8.1 - lot of bugfixes and new features including new skin please check the CHANGELOG - contains security related fixes bnc777446 - Fix XSS vulnerability in message subject handling using Larry skin CVE-2012-3507 - Fix XSS issue where plain signatures wasn't secured in HTML...
CVE-2013-1124
The CVE-2013-1124 entry concerns the Cisco Network Admission Control (NAC) agent for macOS, which does not verify the X.509 certificate of an Identity Services Engine (ISE) server during SSL. This enables man-in-the-middle attackers to spoof ISE servers using an arbitrary certificate. Impact is d...
CentOS Update for net-snmp CESA-2009:1124 centos3 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-1124
CVE-2011-1124 is a use-after-free vulnerability in Google Chrome prior to 9.0.597.107 that can allow remote attackers to cause a denial of service or potentially other impact via vectors related to blocked plug-ins. The associated sources describe the issue consistently; no specific exploit detai...
IBM AIX 5.3 getaddrinfo()函数远程拒绝服务漏洞
BUGTRAQ ID: 38964 CVE ID: CVE-2010-1124 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX在执行getaddrinfo调用后bos.rte.libc不支持读取某些地址字段,用户受骗访问了恶意服务器IP地址就会导致拒绝服务。 IBM AIX 5.3 厂商补丁: IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www-01.ibm.com/support/docview.wss?uid=isg1IZ66710...
CVE-2010-1124
bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service application crash via unspecified vectors, as demonstrated by IBM DB2 crashes on "syste...
CVE-2010-1124
CVE-2010-1124 affects bos.rte.libc 5.3.9.4 on IBM AIX 5.3. After a successful getaddrinfo call, reading a certain address field can cause an application crash (DoS) in contexts such as IBM DB2 databases cataloged with alternate IP addresses. The issue is due to improper handling in bos.rte.libc. ...
CVE-2010-1124
bos.rte.libc 5.3.9.4 on IBM AIX 5.3 does not properly support reading a certain address field after a successful getaddrinfo function call, which allows context-dependent attackers to cause a denial of service application crash via unspecified vectors, as demonstrated by IBM DB2 crashes on "syste...
CentOS Security Advisory CESA-2009:1124 (net-snmp)
The remote host is missing updates to net-snmp announced in advisory CESA-2009:1124. CESA-2009:1124 64326 2 $Id: ovcesa20091124.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1124 net-snmp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Microsoft Windows内核参数和指针验证权限提升漏洞(MS09-025)
BUGTRAQ ID: 35240,35238 CVECAN ID: CVE-2009-1125,CVE-2009-1124 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核没有正确地验证传递给系统调用的参数,以及从用户态传递的某些指针,导致权限提升漏洞。成功利用此漏洞的攻击者可以运行内核态中的任意代码。攻击者可随后安装程序;查看、更改或删除数据;或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microso...
CVE-2009-1124
This CVE entry covers multiple Windows kernel privilege-escalation flaws (CVE-2009-1123, -1124, -1125, -1126) related to improper validation of changes to kernel objects, user-mode pointers, system-call arguments, and certain desktop parameters. Exploitation is local and requires valid logon cred...
Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537)
This host is missing a critical security update according to Microsoft Bulletin MS09-025. OpenVAS Vulnerability Test $Id: secpodms09-025.nasl 5934 2017-04-11 12:28:28Z antu123 $ Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege 968537 Authors: Antu Sanadi Updated By: Madhuri D ...
MS09-025: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537)
The remote host contains a version of the Windows kernel that is affected by multiple vulnerabilities : - A failure of the Windows kernel to properly validate changes in certain kernel objects allows a local user to run arbitrary code in kernel mode. CVE-2009-1123 - Insufficient validation of...