CVE-2014-1344

WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1...

CVE-2014-1344

CVE-2014-1344 affects WebKit as used in Apple's Safari (before 6.1.4 on some platforms and before 7.0.4 on 7.x), and WebKitGTK+ used in Linux GTK frontends. The issue is a memory corruption vulnerability triggered by a crafted web site, enabling remote code execution or a denial of service (appli...

Microsoft Windows Kernel 'Win32k.sys' 本地权限提升漏洞(CVE-2013-1344)(MS13-076)

BUGTRAQ ID: 62196 CVECAN ID: CVE-2013-1344 Windows是一款由美国微软公司开发的窗口化操作系统。 如果 Windows 内核模式驱动程序不正确地处理内存中的对象，多次提取操作导致错误，则存在特权提升漏洞。成功利用这些漏洞的攻击者可以获得更高的特权和读取任意多次内核内存。 0 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Storage Server 2003 Microsoft Windows Server 2008 Microsoft Windows Serve...

CVE-2013-1344

CVE-2013-1344 affects win32k.sys in multiple Windows kernel-mode drivers. A memory handling flaw in Win32k allows local privilege escalation via a crafted application on affected OSes (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows R...

MS13-076: Vulnerabilities in Kernel-Mode Drivers Could Allow Elevation of Privilege (2876315)

The Windows kernel on the remote host has the following vulnerabilities : - Multiple privilege escalation vulnerabilities exist in the Windows kernel-mode driver. CVE-2013-1341, CVE-2013-1342, CVE-2013-1343, CVE-2013-1344, CVE-2013-3864, CVE-2013-3865 - A privilege escalation vulnerability exists...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-1344 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

CVE-2012-1344

Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service device reload by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328...

CentOS Update for seamonkey CESA-2011:1344 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu Update for linux USN-1344-1

Ubuntu Update for Linux kernel vulnerabilities USN-1344-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13441.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1344-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

CentOS Update for seamonkey CESA-2011:1344 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Apple iTunes < 10.2.2 Multiple (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.2.2. As such, it is potentially affected by several issues : - An integer overflow issue in the handling of nodesets could lead to a crash or arbitrary code execution. CVE-2011-1290 - A use after free issue in the...

About the security content of Safari 5.0.5

About the security content of Safari 5.0.5 Last Modified: April 14, 2011 Article: HT4596 Email this article Print this page Summary This document describes the security content of Safari 5.0.5. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until...

VUPEN Security Research - Apple Safari Text Nodes Remote Use-after-free Vulnerability &#40;CVE-2011-1344&#41;

VUPEN Security Research - Apple Safari Text Nodes Remote Use-after-free Vulnerability CVE-2011-1344 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Apple Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser,...

Apple iTunes < 10.2.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 10.2.2. It is, therefore, affected by multiple vulnerabilities in the WebKit component : - An integer overflow vulnerability exists in the handling of nodesets that can be exploited by a remote attacker to execute arbitrary code...

CVE-2011-1344

CVE-2011-1344 is a use-after-free vulnerability in WebKit that enables remote code execution via crafted DOM manipulation (adding then removing a WBR tag), as demonstrated during Pwn2Own. Affected products include Apple Safari prior to 5.0.5 and iOS prior to 4.3.2 (iPhone, iPod, iPad) and iOS pri...

CVE-2010-1344

SQL injection vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter in a detail action to index.php...

CVE-2010-1344

CVE-2010-1344 describes an SQL injection in the Joomla! CKForms (com_ckforms) component for version 1.3.3, enabling remote attackers to execute arbitrary SQL commands via the fid parameter in the detail action to index.php. Affected product: CKForms for Joomla!; vulnerability root cause: unsafe h...

CVE-2010-1344

SQL injection vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the fid parameter in a detail action to index.php...

CVE-2010-1344

creationtimestamp| type| source ---|---|--- 2010-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11785...

CVE-2009-1344

Cross-site scripting XSS vulnerability in the Localization client module 5.x before 5.x-1.2 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the translation functionality...