CVE-2016-1661

Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a...

Stable Channel Update

The stable channel has been updated to 50.0.2661.94 for Windows, Mac, and Linux. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library th...

Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (3038314)

This host is missing a critical security update according to Microsoft Bulletin MS15-032. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-1661

CVE-2015-1661 affects Internet Explorer 6–11 and is described as an ASLR bypass vulnerability triggered by visiting a crafted web page. Multiple connected sources corroborate an IE security-bypass/memory-corruption family of issues and tie CVE-2015-1661 to MS15-032 (KB 3038314) as the remediation...

Microsoft Internet Explorer Memory Corruption (MS15-032 : CVE-2015-1661)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer CVE-2015-1661 ASLR Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Internet Explorer 6, 7, 8, 9, 10, and 11 are...

NEW VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2013-0011 Synopsis: VMware ESXi and ESX address an NFC Protocol Unhandled Exception Issue date: 2013-08-29 Updated on: 2013-08-29...

CVE-2013-1661

CVE-2013-1661 affects VMware ESXi 4.0–5.1 and ESX 4.0–4.1, where the NFC protocol handling can be exploited by MITM to trigger a denial of service (unhandled exception and crash). The issue stems from improper NFC data stream processing. VM advisories (VMSA-2013-0011) document affected releases a...

VMware ESXi及ESX NFC协议处理远程拒绝服务漏洞

BUGTRAQ ID: 62077 CVECAN ID: CVE-2013-1661 VMware ESX Server是为适用于任何系统环境的企业级虚拟计算机软件 ESXi 4.0, 4.1, 5.0, 5.1、ESX 4.0, 4.1 在处理NFC协议时存在远程拒绝服务漏洞，要利用此漏洞，攻击者需要截获并修改ESXi/ESX和客户端之间的NFC流量，利用成功后可导致拒绝服务 0 VMWare ESX 4.1 VMWare ESX 4.0 VMWare ESXi 5.0 VMWare ESXi 4.1 VMWare ESXi 4.0 厂商补丁： VMWare ------...

VMSA-2013-0011 : VMware ESXi and ESX address an NFC Protocol Unhandled Exception

a. VMware ESXi and ESX NFC Protocol Unhandled Exception VMware ESXi and ESX contain a vulnerability in the handling of the Network File Copy NFC protocol. To exploit this vulnerability, an attacker must intercept and modify the NFC traffic between ESXi/ESX and the client. Exploitation of the issu...

VMSA-2013-0011:VMware ESXi and ESX address an NFC Protocol Unhandled Exception

VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0011 VMware Security Advisory Synopsis: VMware ESXi and ESX address an NFC Protocol Unhandled Exception VMware Security Advisory Issue date:...

CVE-2012-5207

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1661...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1661...

CVE-2012-5207

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1661...

Ubuntu Update for linux USN-1661-1

Ubuntu Update for Linux kernel vulnerabilities USN-1661-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16611.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1661-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu 10.04 LTS : linux vulnerability (USN-1661-1)

Zhang Zuotao discovered a bug in the Linux kernel's handling of overlapping fragments in ipv6. A remote attacker could exploit this flaw to bypass firewalls and initial new network connections that should have been blocked by the firewall. Note that Tenable Network Security has extracted the...

CVE-2012-1661

ESRI ArcMap 9 and ArcGIS Desktop 10.0.2.3200 and earlier are affected by a flaw that does not properly prompt before executing embedded VBA macros in map files (.mxd), allowing user‑assisted remote code execution. Root cause: VBA macro execution is not prompting the user. Affected products/versio...

ESRI ArcGIS 10.0.X / ArcMap 9 Arbitrary Code Execution

Exploit for windows platform in category local exploits ===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. Thi...

ESRI ArcMap Arbitrary Code Execution

Description: Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a user before executing embedded VBA. Mxd files are not filtered by email systems so this allows a remote...

ESRI ArcGIS 10.0.x ArcMap 9 - Arbitrary Code Execution

ESRI ArcGIS 10.0.x ArcMap 9 - Arbitrary Code Execution ===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This...