RHEL 7 : kernel-rt (RHSA-2015:1139)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1139 advisory. - Kernel: fs: isofs: infinite loop in CE record entries CVE-2014-9420 - kernel: use-after-free during key garbage collection CVE-2014-9529 -...

CVE-2015-1139

ImageIO in Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .sgi file...

CVE-2015-1139

CVE-2015-1139 affects Apple OS X ImageIO prior to 10.10.3. A crafted SGI image can cause remote code execution or memory corruption, leading to arbitrary code or DoS. Affected: ImageIO component on macOS prior to 10.10.3. Root cause: memory corruption in SGI parsing. Remediation: update to macOS ...

openSUSE Security Update : wireshark (openSUSE-SU-2011:0347-1)

Wireshark was updated to version 1.4.4 to fix several security issues CVE-2011-1138, CVE-2011-1139, CVE-2011-1140 CVE-2011-1143. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wireshark-4339...

openSUSE Security Update : freetype2 (openSUSE-SU-2012:0489-1)

Specially crafted font files could cause buffer overflows in freetype %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-220. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : wireshark (openSUSE-SU-2011:0347-1)

Wireshark was updated to version 1.4.4 to fix several security issues CVE-2011-1138, CVE-2011-1139, CVE-2011-1140 CVE-2011-1143. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wireshark-4339...

Oracle Linux 6 : wireshark (ELSA-2011-0369)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0369 advisory. 1.2.15-1.0.1.el60.1 - Add oracle-ocfs2-network.patch to allow disassembly of OCFS2 interconnect 1.2.15-1 - upgrade to 1.2.15 - see...

CVE-2013-1139

The CVE-2013-1139 issue affects Cisco Cloud Portal nsAPI interface in 9.1 SP1/SP2 and 9.3–9.3.2. It does not properly check privileges, enabling remote authenticated users to obtain sensitive information via a crafted URL (Bug CSCud81134). Documents show affected versions and the root cause (insu...

CVE-2013-1139

The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134...

Fedora Update for mingw-freetype FEDORA-2013-1114

Check for the Version of mingw-freetype OpenVAS Vulnerability Test Fedora Update for mingw-freetype FEDORA-2013-1114 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Update for freetype2 MDVSA-2012:057 (freetype2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Scientific Linux Security Update : freetype on SL5.x, SL6.x i386/x86_64 (20120410)

FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual glyphs efficiently. Multiple flaws were found in the way FreeType handled TrueType Font TTF, Glyph Bitmap Distribution Format BDF, Windows .fnt and .fon, and...

CentOS Update for freetype CESA-2012:0467 centos5

Check for the Version of freetype OpenVAS Vulnerability Test CentOS Update for freetype CESA-2012:0467 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for freetype CESA-2012:0467 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 201204-04 (FreeType)

The remote host is missing updates announced in advisory GLSA 201204-04. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2012-1139

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid stack read operation and memory corruption or possibly execute arbitrary code via crafted glyph data in a BDF font...

CVE-2012-1139

CVE-2012-1139 is a vulnerability in the FreeType library (before 2.4.9). The issue is an array index/stack read problem in FreeType used by Mozilla Firefox Mobile (and other products) that can cause a denial of service or potentially allow arbitrary code execution when processing BDF fonts. Conne...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 8039)

Specially crafted font files could have caused buffer overflows in freetype. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

CentOS 5 / 6 : freetype (CESA-2012:0467)

Updated freetype packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

FreeBSD : freetype -- multiple vulnerabilities (462e2d6c-8017-11e1-a571-bcaec565249c)

The Freetype project reports : Multiple vulnerabilities exist in freetype that can result in application crashes and remote code execution. Please review the details in each of the CVEs for additional information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...