MS13-016: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778344)

The Windows kernel on the remote host has several race condition vulnerabilities. A local attacker could exploit any of these vulnerabilities to elevate privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64577; scriptversion"1.11"; scriptcvsdate"Date:...

CentOS Update for bind97 CESA-2012:1266 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for bind97 CESA-2012:1266 centos5

Check for the Version of bind97 OpenVAS Vulnerability Test CentOS Update for bind97 CESA-2012:1266 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

RHEL 5 : bind97 (RHSA-2012:1266)

"The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1266 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : openldap vulnerability (USN-1266-1)

It was discovered that slapd contained an off-by-one error. An authenticated attacker could potentially exploit this by sending a crafted crafted LDIF entry containing an empty postalAddress. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

Ubuntu: Security Advisory (USN-1266-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZDI-11-197: Microsoft Internet Explorer vgx.dll imagedata Remote Code Execution Vulnerability

ZDI-11-197: Microsoft Internet Explorer vgx.dll imagedata Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-197 June 14, 2011 -- CVE ID: CVE-2011-1266 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Microsoft -- Affected Products: Microsoft Interne...

CVE-2011-1266

CVE-2011-1266 affects Microsoft Internet Explorer 6–8 via a vulnerability in vgx.dll handling of VML imagedata during DOM parsing, causing memory access to freed/uninitialized objects and enabling remote code execution. The issue is described as a VML memory corruption vulnerability, with the aff...

CVE-2011-1266

The Vector Markup Language VML implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "VML Memory...

Microsoft Internet Explorer VML内存破坏CVE-2011-1266远程代码执行漏洞

Bugtraq ID: 48173 CVE ID：CVE-2011-1266 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 从DOM解析VML对象时vgx.dll存在缺陷，具体来说，在页面结构过程中处理Imagedata参数时存在故障代码。通过向imagedata对象动态分配属性，进程会访问释放内存，成功利用漏洞可以应用程序上下文执行任意代码 Microsoft Internet Explorer 7.0.5730 .11 Microsoft Internet Explorer 8.0.7600.16385 Microsoft Internet...

MS11-052: Vulnerability in Vector Markup Language Could Allow Remote Code Execution (2544521)

The remote host is missing Internet Explorer IE Security Update 2497640. The installed version of IE is affected by a vulnerability in the implementation of the Vector Markup Language VML that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc...

Internet Explorer VML related src URL Memory Corruption (MS11-052; CVE-2011-1266)

A remote code execution vulnerability has been reported in in the way that Microsoft Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker could exploit the vulnerability by constructing a specially crafted Web page.Successful...

CVE-2010-1266

WebMaid CMS (

CVE-2010-1266

creationtimestamp| type| source ---|---|--- 2010-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11831...

SLES11: Security update for wireshark

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: wireshark More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 2009...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5050540 within the Su...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5050540 within the Su...

SuSE9 Security Update : ethereal (YOU Patch Number 12424)

Version upgrade to Wireshark 1.0.7 to fix various vulnerabilities : - crash while loading a Tektronix .rf5 file. CVE-2009-1269 - crash in Check Point High-Availability Protocol CPHAP dissector. CVE-2009-1268 - LDAP dissector could crash on Windows. CVE-2009-1267 - PROFINET format string bug...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 6269)

Version upgrade to Wireshark 1.0.7 to fix various vulnerabilities : - crash while loading a Tektronix .rf5 file CVE-2009-1268: crash in Check Point High-Availability Protocol CPHAP dissector CVE-2009-1267: LDAP dissector could crash on Windows CVE-2009-1210: PROFINET format string bug...

openSUSE 10 Security Update : wireshark (wireshark-6271)

Version upgrade to Wireshark 1.0.7 to fix various vulnerabilities: CVE-2009-1269: crash while loading a Tektronix .rf5 file CVE-2009-1268: crash in Check Point High-Availability Protocol CPHAP dissector CVE-2009-1267: LDAP dissector could crash on Windows CVE-2009-1210: PROFINET format string bug...