Microsoft Windows Elevation of Privilege (CVE-2019-1173)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2018-1173

CVE-2018-1173 affects Foxit Reader 9.0.0.29935. The root cause is a flaw in handling the XFA borderColor attribute where the code fails to validate the existence of an object before operating on it, enabling remote code execution. Multiple connected sources reference that an attacker can lure a u...

CVE-2016-1173

Cross-site scripting XSS vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1173

The CVE-2016-1173 issue affects the Menubook plugin for baserCMS prior to 0.9.3, described as a Cross-Site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vulnerability originates in the Menubook plugin’s handling of i...

CVE-2011-1173

The econetsendmsg function in net/econet/afeconet.c in the Linux kernel before 2.6.39 on the x8664 platform allows remote attackers to obtain potentially sensitive information from kernel stack memory by reading uninitialized data in the ah field of an Acorn Universal Networking AUN packet...

SUSE: Security Advisory for ntp (SUSE-SU-2015:1173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2013-1173)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-0468)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1173

CVE-2015-1173 affects Unit4 Polska TETA Web (22.62.3.4). The vulnerability is an authorization bypass where access to the Design Mode and Debug Logger modules is not properly restricted, allowing a remote attacker to gain privileges via a specially crafted “received” parameter. This is documented...

UNIT4TETA TETA WEB - Authorization Bypass vulnerability

Exploit for php platform in category web applications Title: UNIT4TETA TETA WEB - Authorization Bypass vulnerability Author: Lukasz Miedziński Date: 08. January 2015 CVE: CVE-2015-1173 Affected software : =================== UNIT4TETA TETA WEB 22.62.3.4 - newest version Older versions are probabl...

Oracle Solaris Third-Party Patch Update : libtiff (cve_2012_1173_numeric_errors)

The remote Solaris system is missing necessary patches to address security updates : - Multiple integer overflows in tiffgetimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the 1 gtTileSeparate or 2...

F5 Networks BIG-IP : Libtiff vulnerabilities (SOL15863)

CVE-2012-1173 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL15863. The text description of this plugin is C F5 Networks. include"compat.inc"; if description scriptid80447; scriptversion"1.5";...

SOL15863 - Libtiff vulnerabilities CVE-2012-1173 and CVE-2012-2088

Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, or does not list a version that is later than the version you...

openSUSE Security Update : tiff (openSUSE-SU-2012:0539-1)

specially crafted tiff files could cause a heap overflow in libtiff %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-234. The text description of this plugin is C SUSE LLC...

Amazon Linux AMI : libtiff (ALAS-2012-65)

Two integer overflow flaws, leading to heap-based buffer overflows, were found in the way libtiff attempted to allocate space for a tile in a TIFF image file. An attacker could use these flaws to create a specially crafted TIFF file that, when opened, would cause an application linked against...

CentOS Update for kernel CESA-2013:1173 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : kernel (ELSA-2013-1173)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1173 advisory. - x86 perf/x86: Fix offcorersp valid mask for SNB/IVB Nikola Pajkovsky 971314 971315 CVE-2013-2146 - bluetooth L2CAP - Fix info leak via getsockname...

Oracle Linux 4 : kernel (ELSA-2010-0474)

From Red Hat Security Advisory 2010:0474 : Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CV...

CVE-2013-1173

CVE-2013-1173 is a heap-based buffer overflow in ciscod.exe within the Cisco Security Service of Cisco AnyConnect Secure Mobility Client. Exploitation enables local privilege escalation to SYSTEM. Affected: Cisco AnyConnect Secure Mobility Client (Host Scan component) with vulnerable host-scan ha...

KLA10103 LPE vulnerability in Cisco AnyConnect

A buffer overflow was found in Cisco AnyConnect. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally. Original advisories Cisco bulletin Related products Cisco-AnyConnect-VPN-Client CVE list CVE-2013-1173 high Solution Update to latest...