SuSE 10 Security Update : freetype2 (ZYPP Patch Number 8039)

Specially crafted font files could have caused buffer overflows in freetype. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

CentOS 5 / 6 : freetype (CESA-2012:0467)

Updated freetype packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

FreeBSD : freetype -- multiple vulnerabilities (462e2d6c-8017-11e1-a571-bcaec565249c)

The Freetype project reports : Multiple vulnerabilities exist in freetype that can result in application crashes and remote code execution. Please review the details in each of the CVEs for additional information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

CVE-2011-1127

Simple Machines Forum (SMF) is affected by CVE-2011-1127. The issue lies in SSI.php, where guest access is not properly restricted, allowing remote attackers to cause an unspecified impact via unknown vectors. Affected products/versions: SMF 1.1.12 and earlier (pre-1.1.13) and SMF 2.x prior to 2....

CVE-2011-1127

SSI.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors...

Microsoft Internet Explorer Denial of Service Vulnerability - Mar10

This host is installed with Internet Explorer and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiedosvulnmar10.nasl 5394 2017-02-22 09:22:42Z teissa $ Microsoft Internet Explorer Denial of Service Vulnerability - Mar10 Authors: Antu Sanadi Copyright: Copyrig...

CVE-2010-1127

CVE-2010-1127 affects Microsoft Internet Explorer 6 and 7. The vulnerability arises when executing the createElement method, where certain data structures are not initialized, enabling a remote attacker to cause a denial of service via crafted JavaScript. Specifically, setting the (1) outerHTML o...

CVE-2009-1127

win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not correctly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application that trigger...

CVE-2009-1127

Microsoft Windows kernel Win32k subsystem (Win32k.sys) contains multiple vulnerabilities disclosed under CVE-2009-1127, CVE-2009-2513, and CVE-2009-2514 (MS09-065). The common root cause across the entries is improper validation of arguments passed to kernel/system calls (and related GDI input ha...

Microsoft Windows Win32k内核态驱动本地权限提升（MS09-065）

BUGTRAQ ID: 36939,36941 CVE ID: CVE-2009-1127,CVE-2009-2513 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中的Win32k内核态驱动（Win32k.sys）没有正确地验证传送给Windows内核系统调用的参数，以及用户态通过GDI内核组件所传送的输入。拥有有效的登录凭据且能够本地登录的攻击者可以利用这些漏洞执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2...

Microsoft Windows Kernel-Mode Drivers Multiple Vulnerabilities (969947)

This host is missing a critical security update according to Microsoft Bulletin MS09-065. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS09-065: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (969947)

The remote host contains a version of the Windows kernel that is affected by multiple vulnerabilities : - A NULL pointer dereferencing vulnerability allowing a local user to elevate his privileges CVE-2009-1127 - Insufficient validation of certain input passed to GDI from user mode allows a local...

SuSE9 Security Update : perl-Net-Server (YOU Patch Number 10270)

A format string problem was found in the logging routines of the perl-Net-Server perl module collection. This could lead to a remote attacker being able to crash a server using the perl-Net-Server module. This is tracked by the Mitre CVE ID CVE-2005-1127. %NASLMINLEVEL 70300 C Tenable Network...

Gentoo Security Advisory GLSA 200411-37 (opendchub)

The remote host is missing updates announced in advisory GLSA 200411-37. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200411-37 (opendchub)

The remote host is missing updates announced in advisory GLSA 200411-37. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200608-18 (net-server)

The remote host is missing updates announced in advisory GLSA 200608-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: opendchub

The remote host is missing an update to the system as announced in the referenced advisory. VID cdf14b68-3ff9-11d9-8405-00065be4b5b6 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-1127

CVE-2008-1127 affects the game Crysis (Crysis 1.1.1.5879) in the cryactio function. The vulnerability is a format string flaw in the user name field that can be triggered when the game character is killed, allowing remote authenticated users to execute arbitrary code. Affected component: cryactio...

Debian: Security Advisory (DSA-1122)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1127)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...