APPLE-SA-2014-05-15-2 iTunes 11.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-05-15-2 iTunes 11.2 iTunes 11.2 is now available and addresses the following: iTunes Available for: Windows 8, Windows 7, Vista, XP SP3 or later Impact: An attacker in a privileged network position can obtain iTunes credentials...

APPLE-SA-2014-04-22-1 Security Update 2014-002

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-04-22-1 Security Update 2014-002 Security Update 2014-002 is now available and addresses the following: CFNetwork HTTPProtocol Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2...

CVE-2014-1296

CFNetwork in iOS before 7.1.1, OS X up to 10.9.2, and Apple TV before 6.1.1 mishandles incomplete Set-Cookie headers, allowing a remote attacker to bypass access restrictions by closing the TCP connection during header transmission (HTTPOnly). Public fix/version not specified in the provided docu...

Microsoft RDP ActiveX Control Remote Code Execution Vulnerability (2828223)

This host is missing a critical security update according to Microsoft Bulletin MS13-029. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-1296

The CVE-2013-1296 issue affects Microsoft Remote Desktop Connection Client (mstscax.dll) ActiveX in versions 6.1 and 7.0. It is a use-after-free memory access vulnerability that allows remote code execution when a user visits a malicious webpage or when handling objects in memory, yielding the sa...

Microsoft Windows RDP ActiveX Control Remote Code Execution (MS13-029; CVE-2013-1296)

A remote code execution vulnerability in the way the Remote Desktop ActiveX control, mstscax.dll, attempts to access an object in memory that has been deleted. An attacker could exploit this vulnerability by convincing the user to visit a specially crafted webpage. An attacker who successfully...

Design/Logic Flaw

Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a directory that contains a .hmxz, .hmxp, .hmskin, .hmx, .hm3, .hpj, .hlp, or .chm file. NOTE: some of...

CVE-2012-1296

Multiple cross-site scripting XSS vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body parameter to admin/preview...

Multiple vulnerabilities in Elefant CMS

Advisory ID: HTB23076 Product: Elefant CMS Vendor: Elefant CMS Vulnerable Versions: 1.1.3 beta and probably prior Tested Version: 1.1.3 beta Vendor Notification: 22 February 2012 Vendor Patch: 22 February 2012 Public Disclosure: 14 March 2012 Vulnerability Type: SQL Injection, XSS Cross Site...

Ubuntu: Security Advisory (USN-1296-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3162

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...

Code injection

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...

CVE-2011-3162

HP Data Protector Notebook Extension 6.20 and HP Data Protector for Personal Computers 7.0 are affected by an SQL injection vulnerability in the dpnepolicyservice FinishedCopy method, exposed via a DPNECentral Web Service on TCP port 80. A remote attacker can craft requests with an unsafely used ...

Buffer overflow

Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted 1 .grd or 2 .abr file, a related issue to CVE-2010-1296...

CVE-2011-2443

Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted 1 .grd or 2 .abr file, a related issue to CVE-2010-1296...

EC Software Help Manual 5.5.1 Build 1296 - ijl15.dll DLL Loading Arbitrary Code Execution

EC Software Help Manual 5.5.1 Build 1296 - ijl15.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/47349/info EC Software Help & Manual is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to us...

Google Chrome multiple vulnerabilities - March 11 (Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnmar11win.nasl 7024 2017-08-30 11:51:43Z teissa $ Google Chrome multiple vulnerabilities - March 11 Windows Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

CVE-2011-1296

Technical details for CVE-2011-1296 are not provided in the connected documents. The initial description notes a Chrome SVG text handling issue leading to DoS, but no concrete product/version/impact specifics are given beyond that.

Google Fixes Six High-Risk Bugs in New Chrome Release

Google has released a new version of its Chrome browser, fixing six high-risk security bugs in the process and paying out $8,500 in bug bounties along the way. The latest version of Chrome, version 10.0.648.204, also includes a number of other new features for some of the supported platforms. The...

Adobe Photoshop CS4 ABR File Processing Buffer Overflow (APSB10-13; CVE-2010-1296)

Adobe Photoshop CS4 is a graphics editing program that features a 3D engine. A buffer overflow vulnerability has been reported in Adobe Photoshop CS4. The vulnerability is due to an error in Adobe Photoshop CS4 that fails to properly handle malformed ABR files. By convincing a user to open a...