102 matches found
Google Chrome Multiple Vulnerabilities-01 (Jul 2015) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
CVE-2015-1278
Google Chrome up to 44.0.2403.89 is affected by CVE-2015-1278 due to content/browser/web_contents/web_contents_impl.cc not closing a PDF document's modal dialog when navigating to an interstitial page, enabling URL spoofing via a crafted PDF (alert_dialog.pdf). Remediation: upgrade to Chrome 44.0...
Google Chrome < 44.0.2403.89 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 44.0.2403.89. It is, therefore, affected by multiple vulnerabilities as referenced in the 201507stable-channel-update21 advisory. - The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in...
CVE-2014-1278
The CVE-2014-1278 entry concerns an out-of-bounds memory access in the ARM kernel ptmx_get_ioctl function on Apple iOS (pre-7.1) and Apple TV (pre-6.1). This local-privilege/escalation vulnerability could allow a local user to gain privileges or cause a denial of service via a crafted call. Affec...
Apple TV < 6.1 Multiple Vulnerabilities
According to its banner, the remote Apple TV 2nd generation or later device is prior to 6.1. It is, therefore, reportedly affected by multiple vulnerabilities, the most serious issues of which could result in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2013-1278
CVE-2013-1278 describes a kernel race condition in Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT. The vulnerability allows local privilege elevation via crafted objects in memory, as part o...
Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2799494)
This host is missing an important security update according to Microsoft Bulletin MS13-017. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS13-017: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2799494)
The Windows kernel on the remote host has the following vulnerabilities : - Multiple race condition vulnerabilities exists. CVE-2013-1278, CVE-2013-1279 - A reference count vulnerability exists. CVE-2013-1280 A local attacker could exploit any of these vulnerabilities to elevate privileges. C...
Microsoft Windows Kernel CVE-2013-1278 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause...
Ubuntu: Security Advisory (USN-1278-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for linux-lts-backport-maverick USN-1278-1
Ubuntu Update for Linux kernel vulnerabilities USN-1278-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12781.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-lts-backport-maverick USN-1278-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
CentOS Update for lftp CESA-2009:1278 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-1278
CVE-2011-1278 affects Microsoft Excel 2002 SP3 and Office 2004 for Mac. The issue arises when parsing Excel record information, where input validation failures can lead to remote code execution or memory corruption via a crafted spreadsheet (Excel WriteAV vulnerability). The vulnerability is tied...
MS11-045: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2537146)
The remote Windows host is running a version of Microsoft Excel or Excel Viewer that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, he or she could leverage this issue to execute arbitrary code subject to t...
CVE-2010-1278
CVE-2010-1278 describes a buffer overflow in the gp.ocx ActiveX control (Atlcom.get_atlcom) used by Adobe Download Manager, affecting Adobe Reader/Acrobat 8.x before 8.2 and 9.x before 9.3. During initialization, two parameters are copied into a fixed-length buffer; oversized values can overflow ...
ZDI-10-077: Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability
ZDI-10-077: Adobe Download Manager Atlcom.getatlcom ActiveX Control Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-077 April 21, 2010 -- CVE ID: CVE-2010-1278 -- Affected Vendors: Adobe -- Affected Products: Adobe Download Manager -- TippingPointTM IPS...
SLES9: Security update for tcpdump
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: tcpdump For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021499 within the SuS...
CentOS Security Advisory CESA-2009:1278 (lftp)
The remote host is missing updates to lftp announced in advisory CESA-2009:1278. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
CVE-2009-1278
Gravity Board X (GBX) 2.0 BETA has a static code injection in forms/ajax/configure.php that allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php. Affected: GBX 2.0 BETA; vulnerable file: forms/ajax/configure.php. Root cause: configuration work...
