Mozilla updates 2014/06 (critical)

These updates contain the latest security and maintenance updates for - Mozilla Firefox 24.6esr - Mozilla Thunderbird 24.6 - Mozilla NSPR is also updated to 4.10.6 to fix MFSA 2014-48/CVE-2014-1533/CVE-2014-1534 Miscellaneous memory safety hazards MFSA...

Mandriva Linux Security Advisory : nspr (MDVSA-2014:125)

A vulnerability has been discovered and corrected in nspr : Mozilla Netscape Portable Runtime NSPR before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write via vectors involving the sprintf and console functions CVE-2014-1545. The updated ns...

Debian Security Advisory DSA 2960-1 (icedove - security update)

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb2960.nasl 6724 2017-07-14...

[SECURITY] [DSA 2955-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2955-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...

CVE-2014-1545

Mozilla Netscape Portable Runtime NSPR before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write via vectors involving the sprintf and console functions...

CVE-2014-1545

CVE-2014-1545 : Mozilla’s Netscape Portable Runtime (NSPR) prior to 4.10.6 contains an out-of-bounds write in the sprintf/console paths that can enable remote arbitrary code execution or a denial of service. IBM advisories (for IBM FlashSystem/Storwize families) reiterate impact and provide remed...

CVE-2014-1545

Mozilla Netscape Portable Runtime NSPR before 4.10.6 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write via vectors involving the sprintf and console functions...

Debian: Security Advisory (DSA-2955-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1545

CVE-2013-1545 affects Oracle Fusion Middleware’s Oracle HTTP Server components (versions 10.1.3.5, 11.1.1.5.0, 11.1.1.6.0). The vulnerability impacts availability via unknown vectors related to Web Listener; root cause is not specified in the provided documents. CVSSv2 base score is 5.0 (Medium) ...

Ubuntu: Security Advisory (USN-1545-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.10 / 12.04 LTS : nova vulnerability (USN-1545-1)

Padraig Brady discovered that the fix for CVE-2012-3361 was incomplete and an authenticated user could still corrupt arbitrary files on the host running Nova. A remote attacker could use this to cause a denial of service or possibly gain privileges. Note that Tenable Network Security has extracte...

CVE-2012-1545

CVE-2012-1545 affects Microsoft Internet Explorer versions 6–9 and 10 Consumer Preview. The issue allows remote attackers to bypass Protected Mode or trigger memory corruption causing a denial of service by leveraging access to a Low integrity process, as demonstrated by VUPEN during Pwn2Own at C...

CVE-2011-1545

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-1545

HP Insight Control Performance Management for Windows is affected by CVE-2011-1545 (CSRF) prior to v6.3. The vulnerability could allow remote attackers to hijack authentication and perform actions with the user’s privileges. The HP security bulletin indicates upgrade to v6.3 or later as the mitig...

CVE-2009-1545

CVE-2009-1545 is an AVI header parsing vulnerability in Windows affecting Avifil32.dll used by AVI header processing. A remote code execution could occur if a user opens a specially crafted AVI file, with affected OS versions listed as Windows 2000 SP4, XP SP2/SP3, Server 2003 SP2, Vista (Gold/SP...

Microsoft Windows AVI Media File Parsing Vulnerabilities (971557)

This host is missing a critical security update according to Microsoft Bulletin MS09-038. OpenVAS Vulnerability Test $Id: secpodms09-038.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows AVI Media File Parsing Vulnerabilities 971557 Authors: Nikita MR Updated By: Madhuri D on 2010-11-30 ...

Mandriva Update for nas MDKSA-2007:065 (nas)

Check for the Version of nas OpenVAS Vulnerability Test Mandriva Update for nas MDKSA-2007:065 nas Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Gentoo Security Advisory GLSA 200505-08 (hteditor)

The remote host is missing updates announced in advisory GLSA 200505-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200704-20 (NAS)

The remote host is missing updates announced in advisory GLSA 200704-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200704-20 (NAS)

The remote host is missing updates announced in advisory GLSA 200704-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...