Mac OS X 10.5.x < 10.5.3 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.3. Mac OS X 10.5.3 contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid32477;...

Mac OS X Multiple Vulnerabilities (Security Update 2008-003)

The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-003 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if descripti...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 5159)

This flash player update to version 9.0.124.0 fixes several security problems. In the worst case an attacker could potentially have flash-player execute arbitrary code via specially crafted files. CVE-2007-5275 / CVE-2007-6243 / CVE-2007-6637 / CVE-2007-6019 / CVE-2007-0071 / CVE-2008-1655 /...

CVE-2008-1655

CVE-2008-1655 refers to a DNS rebinding vulnerability in Adobe Flash Player 9.0.115.0 and earlier (and 8.0.39.0 and earlier) that could be exploited remotely via unspecified vectors. Open-source advisories and Red Hat/OSS reports corroborate that this issue was addressed by updating Flash Player ...

[SECURITY] [DSA 1317-1] New tinymux packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA 1317-1 [email protected] http://www.debian.org/security/ Steve Kemp June 23, 2007 - ------------------------------------------------------------------------ Package : tinymux Vulnerability :...

CVE-2007-1655

Buffer overflow in the funladd function in funmath.cpp in TinyMUX before 20070126 might allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via unspecified vectors related to lists of numbers...

CVE-2007-1655

CVE-2007-1655: TinyMUX contains a buffer overflow in the fun_ladd function (funmath.cpp) that affects pre-20070126 builds. The issue could allow a remote attacker to cause a denial of service or possibly execute arbitrary code via vectors related to lists of numbers. Public sources (including Deb...

[SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1074-1 [email protected] http://www.debian.org/security/ Martin Schulze May 24th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1074-1 [email protected] http://www.debian.org/security/ Martin Schulze May 24th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1655

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear...

CVE-2006-1655

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear...

CVE-2006-1655

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear...

CVE-2006-1655

CVE-2006-1655 concerns mpg123 with version 0.59r suffering multiple buffer overflows caused by insufficient validation of MPEG 2.0 Layer 3 files. The vulnerability can trigger a segmentation fault and potentially allow other impacts via a specially crafted MP3 file (as illustrated by mpg1DoS3). P...

CVE-2005-1655

AOL Instant Messenger (AIM) 5.5.x and earlier is affected. The vulnerability arises when the client handles a font tag with an invalid smiley icon location in the sml parameter, allowing a remote attacker to cause a denial of service (client crash). The affected component is the AIM client’s pars...

CVE-2002-1655

The CVE-2002-1655 entry affects the Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x. The vulnerability allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. No remediation details, exploit status, or additional impact informat...

CVE-2004-1655

CVE-2004-1655 affects phpWebsite (version 0.9.3-4 and earlier). The vulnerability is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary script or HTML via the CM_pid parameter in the comments module or via the subject or message fields in the notes module. The pro...

CVE-2004-1655

Cross-site scripting XSS vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 CMpid parameter in the comments module or 2 the subject or message fields in the notes module...