101 matches found
Apple TV < 6.1 Multiple Vulnerabilities
According to its banner, the remote Apple TV 2nd generation or later device is prior to 6.1. It is, therefore, reportedly affected by multiple vulnerabilities, the most serious issues of which could result in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if...
CentOS Update for rtkit CESA-2013:1282 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RedHat Update for rtkit RHSA-2013:1282-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 6 : rtkit (ELSA-2013-1282)
The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-1282 advisory. 0.5-2 - CVE-2013-4326 Resolves: 1007174 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...
RHEL 6 : rtkit (RHSA-2013:1282)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2013:1282 advisory. RealtimeKit is a D-Bus system service that changes the scheduling policy of user processes/threads to SCHEDRR that is, realtime scheduling mode on...
CVE-2013-1282
CVE-2013-1282 affects the LDAP service in Microsoft Active Directory family (AD DS, ADAM, AD LDS). The vulnerability allows a remote attacker to cause memory consumption and a denial of service by sending a crafted LDAP query, leading to service outage. The root cause is the LDAP service failing ...
Microsoft Active Directory LDAP Request Memory Consumption (MS13-032; CVE-2013-1282)
A denial of service vulnerability exists in implementations of Active Directory. Successful exploitation could cause the service to stop responding. The vulnerability is caused when the LDAP service fails to handle a specially crafted query. A Remote attacker can exploit this issue via a speciall...
Race condition
Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...
Ubuntu 11.10 : thunderbird vulnerabilities (USN-1282-1)
Yosuke Hasegawa discovered that the Mozilla browser engine mishandled invalid sequences in the Shift-JIS encoding. It may be possible to trigger this crash without the use of debugging APIs, which might allow malicious websites to exploit this vulnerability. An attacker could possibly use this fl...
CentOS Update for nspr CESA-2011:1282 centos4 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for nspr CESA-2011:1282 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Windows CSRSS子系统SrvSetConsoleLocalEUDC权限提升漏洞(CVE-2011-1282)(MS11-056)
BUGTRAQ ID: 48598 CVE ID: CVE-2011-1282 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的CSRSS子系统在SrvSetConsoleLocalEUDC的实现上存在漏洞，本地攻击者可利用此漏洞在内核模式中执行任意代码。 此漏洞源于CSRSS子系统中的SrvSetConsoleLocalEUDC函数存在输入验证错误，可被利用将某些数据写入到空页。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008...
CVE-2011-1282
CVE-2011-1282 affects the Windows Client/Server Run-time Subsystem (CSRSS) in the Win32 subsystem, where improper memory initialization leads to a NULL pointer in SrvSetConsoleLocalEUDC. This allows local users to gain privileges or cause memory corruption. Affected products include Windows XP (S...
MS11-056: Vulnerabilities in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2507938)
The remote host allows elevation of privileges in its Windows Client/Server run-time subsystem CSRSS. An attacker could exploit these vulnerabilities to run arbitrary code in kernel mode. The attacker must have valid login credentials and be able to log on locally in order to exploit these...
CVE-2010-1282
Adobe Shockwave Player (Windows/macOS; prior to 11.5.7.609) is vulnerable due to parsing a specially crafted Director (.dir) file; a crafted ATOM size can trigger an infinite loop and high CPU usage, causing remote denial of service. Multiple connected sources corroborate CVE-2010-1282 and relate...
[CAL-20100204-1]Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability
CAL-20100204-1Adobe Shockwave Player Director File Parsing ATOM size infinite loop vulnerability Affected Products ================= 11.5.2.602 ,11.5.6.606 and prior CVE ID: CVE-2010-1282 CAL ID: CAL-20100204-1 Vulnerability Details ===================== Code Audit Labs http://www.vulnhunt.com ha...
SuSE 11 Security Update : silc-toolkit (SAT Patch Number 1282)
This update of slic-toolkit fixes stack-based overflow while encoding a ASN.1 OID CVE-2008-7159 and several format string bugs CVE-2009-3051 / CVE-2008-7160. The probability to exploit this issues to execute arbitrary code is high. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
glFusion lib-session.php模块SQL注入漏洞
BUGTRAQ ID: 34361 CVECAN ID: CVE-2009-1282,CVE-2009-1283 glFusion是一个开源的内容管理系统。 glFusion的private/system/lib-session.php模块没有正确地过滤用户所提交的glfsession cookie参数，远程攻击者可以通过向服务器提交恶意请求执行SQL注入攻击。以下是/private/system/lib-session.php 的97-117行的有漏洞代码段： ... if isset $COOKIE$CONF'cookiesession' $sessid = COMapplyFilt...
