Fedora 13 : webkitgtk-1.2.4-1.fc13 (2010-14409)

Update to 1.2.4 which fixes: CVE-2010-1780 CVE-2010-1782 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 CVE-2010-2648 Update to 1.2.3 which fixes: CVE-2010-1386 CVE-2010-1392 CVE-2010-1405 CVE-2010-1407 CVE-2010-1416 CVE-2010-1417...

FreeBSD Ports: webkit-gtk2

The remote host is missing an update to the system as announced in the referenced advisory. VID 19419b3b-92bd-11df-b140-0015f2db7bde OpenVAS Vulnerability Test $ Description: Auto generated from VID 19419b3b-92bd-11df-b140-0015f2db7bde Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

CVE-2010-1664

CVE-2010-1664 affects Google Chrome prior to 4.1.249.1064, where improper handling of HTML5 media can cause memory corruption leading to a denial of service and potentially other impact via unknown vectors. This is tied to the Chrome HTML5/media handling bug described in the initial entry and cor...

Google Chrome < 4.1.249.1064 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 4.1.249.1064. Such versions are reportedly affected by multiple vulnerabilities : - A cross-origin bypass in Google URL GURL. Issue 40445 - An HTML5 media handling issue could lead to memory corruption. Issue 40487 - A font...

CVE-2009-1664

The CVE-2009-1664 entry documents a vulnerability in myaccount.php of Easy Scripts Answer and Question Script where the application does not verify the original password before allowing password changes. This permits an attacker to modify userid, txtpassword, and txtRpassword parameters to change...

Gentoo Security Advisory GLSA 200802-12 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200802-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200604-16 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200604-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: libxine

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Buffer overflow

Buffer overflow in demuxers/demuxasf.c aka the ASF demuxer in the xineplugdmxasf.so plugin in xine-lib before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted ASF header. NOTE: this issue leads to a crash when an attack uses the CVE-2006-16...

Fedora 8 : xine-lib-1.1.10-1.fc8 (2008-1043)

Maintenance/security fix release 1.1.10. http://sourceforge.net/project/shownotes.php?groupid=9655&releaseid= 571608 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

libxine -- buffer overflow vulnerability

xine project reports: A new xine-lib version is now available. This release contains a security fix remotely-expoitable buffer overflow, CVE-2006-1664. This is not the first time that that bug has been fixed... It also fixes a few more recent bugs, such as the audio output problems in 1.1.9...

Debian Security Advisory DSA 1318-1 (ekg)

The remote host is missing an update to ekg announced via advisory DSA 1318-1. OpenVAS Vulnerability Test $Id: deb13181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1318-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-1664

ekg before 1:1.7rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service NULL pointer dereference via a vector related to the token OCR functionality...

CVE-2007-1664

ekg before 1:1.7rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service NULL pointer dereference via a vector related to the token OCR functionality...

Debian DSA-1318-1 : ekg - several vulnerabilities

Several remote vulnerabilities have been discovered in ekg, a console Gadu Gadu client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-2370 It was discovered that memory alignment errors may allow remote attackers to cause a denial of service on...

CVE-2007-1664

CVE-2007-1664 affects ekg prior to 1:1.7~rc2-1etch1 in Debian Etch, where a NULL pointer dereference in the token OCR functionality allows remote denial of service. Related entries show Debian has a security advisory (DSA-1318-1) and Fedora/OpenVAS references tracking a الفض updates (e.g., FEDORA...

CVE-2006-1664

CVE-2006-1664 concerns a buffer overflow in xine_list_delete_current within libxine (v1.14 and earlier; as distributed in xine-lib v1.1.1 and earlier). The flaw permits remote code execution via a crafted MPEG stream. The entry lists a NETWORK attack vector with no authentication, no user interac...

CVE-2002-1664

Yahoo! Messenger vulnerability CVE-2002-1664: Before February 2002, remote attackers could add arbitrary users to another user’s buddy list, potentially exposing sensitive information. The NVD/CVE entries describe this as a buddy-list manipulation issue with partial confidentiality risk; no expli...

CVE-2004-1664

CVE-2004-1664 affects Call of Duty 1.4 and earlier. The issue arises from handling a large query or reply packet, where the buffer overflow protection mechanism fails to properly process the data, enabling remote attackers to cause a denial of service (game end). It may overlap with CVE-2005-0430...

CVE-2004-1664

Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service game end via a large 1 query or 2 reply packet, which is not properly handled by the buffer overflow protection mechanism. NOTE: this issue might overlap CVE-2005-0430...