Oracle: Security Advisory (ELSA-2009-1335)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2015:1829-1 Security update for lxc

lxc was update to fix one security issue. The following vulnerability was fixed: CVE-2015-1335: A directory traversal flaw while lxc-start is initially setting up the mounts for a container bsc946744...

CVE-2015-1335

lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a 1 mount target or 2 bind mount source...

CVE-2015-1335

CVE-2015-1335 affects LXC (lxc-start) before 1.0.8 and 1.1.x before 1.1.4, enabling a local container administrator to escape AppArmor confinement via a symlink attack on a mount target or bind mount source. The connected documents corroborate a container breakout/unsafe mounting scenario and sho...

CVE-2015-1335

lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a 1 mount target or 2 bind mount source...

UBUNTU-CVE-2015-1335

lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a 1 mount target or 2 bind mount source...

IBM Tivoli Storage Manager FastBack Server Opcode 1335 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1335. By sending a crafted packet on TCP...

Apple TV < 6.1.2 Multiple Vulnerabilities

Binary data 8323.prm...

May 2014 Apple Safari Browser Security Patches

Apple released an update to Safari yesterday patching 22 vulnerabilities in the WebKit browser engine that allow code execution or a browser crash. Safari 7.0.4 is available for OS X Mavericks 10.9 and Safari 6.1.4 for OS X Mountain Lion 10.8. The vulnerabilities could be exploited if the user wa...

Safari < 6.1.4 / 7.0.4 Multiple Vulnerabilities

Binary data 8264.prm...

CVE-2014-1335

WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1...

CVE-2014-1335

CVE-2014-1335 affects WebKit as used by Apple Safari, before 6.1.4 and 7.x before 7.0.4. A crafted website can lead to remote arbitrary code execution or a denial of service via memory corruption, causing application crash. The description and references in the provided documents confirm the vuln...

Microsoft Office Wordview Remote Code Execution Vulnerability (2830399)

This host is missing an important security update according to Microsoft Bulletin MS13-043. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RHEL 5 : openssl (RHSA-2009:1335)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1335 advisory. - openssl: mimehdrcmp NULL dereference crash CVE-2006-7250 - openssl: ASN1 printing crash CVE-2009-0590 - OpenSSL: DTLS epoch record buffer...

Cisco WebEx Recording Format Player atdl2006.dll Buffer Overflow (CVE-2012-1335)

A remote code execution vulnerability has been reported in Cisco WebEx Recording Format WRF Player...

Buffer overflow

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and...

CVE-2012-1335

The CVE-2012-1335, CVE-2012-1336, and CVE-2012-1337 flaws affect Cisco WebEx Recording Format (WRF) Player. The issues are buffer/heap buffer overflows in the WRF Player (notably involving atas32.dll on Windows) triggered by processing crafted WRF files, permitting remote code execution. Affected...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : t1lib vulnerabilities (USN-1335-1)

Jon Larimer discovered that t1lib did not properly parse AFM fonts. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. CVE-2010-2642, CVE-2011-0433 Jonathan Brossard discovered that...

CentOS Update for openssl CESA-2009:1335 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1335

CVE-2011-1335 – Cybozu Office XSS: A cross-site scripting vulnerability exists in Cybozu Office 6.x, 7, and 8 prior to 8.1.1, enabling remote attackers to inject arbitrary script/HTML via the address book and user list functions. The underlying issue is a failure to properly sanitize user-supplie...