Microsoft Windows Journal File Processing CVE-2015-1699 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsof...

KLA10577 Arbitrary code execution vulnerabilities in Windows Journal

An unspecified vulnerabilities were found in Windows products. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed Journal file. Original advisories Microsoft Advisory CVE-2015-1697 CVE-2015-1696...

MS15-045: Vulnerability in Windows Journal Could Allow Remote Code Execution (3046002)

The version of Windows running on the remote host is affected by a remote code execution vulnerability due to a flaw in Windows Journal. A remote attacker can exploit this vulnerability by convincing a user to open a specially crafted Journal file .jnt, resulting in execution of arbitrary code in...

Siemens SIMATIC WinCC OA Multiple Vulnerabilities

OVERVIEW Researchers Gleb Gritsai, Ilya Karpov, and Kirill Nesterov of Positive Technologies have identified multiple vulnerabilities in the Siemens SIMATIC WinCC Open Architecture OA application. Siemens has produced updates that mitigate these vulnerabilities. These vulnerabilities could be...

CVE-2014-1699

CVE-2014-1699 affects Siemens SIMATIC WinCC OA before version 3.12 P002 January. The vulnerability resides in the integrated Web server on port 4999/TCP and stems from improper input validation, allowing remote attackers to trigger a denial of service (monitoring-service outage) by sending malfor...

CVE-2013-1699

CVE-2013-1699 affects Mozilla Firefox before 22.0. The IDN display algorithm mishandles .com/.net/.name, allowing spoofing of the address bar via homograph characters. The MFSA advisory MFSA2013-61 documents the issue; openSUSE/other advisories show a fix in Firefox 22.0 (e.g., openSUSE-SU-2013-5...

Mozilla Firefox Multiple Vulnerabilities - June 13 (Windows)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxmultvulnjun13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox Multiple Vulnerabilities - June 13 Windows Authors: Arun Kallavi Copyright: Copyright c...

Mozilla Firefox Multiple Vulnerabilities - June 13 (Mac OS X)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxmultvulnjun13macosx.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Firefox Multiple Vulnerabilities - June 13 Mac OS X Authors: Arun Kallavi Copyright:...

Mozilla Firefox Multiple Vulnerabilities (Jun 2013) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Ubuntu Update for linux USN-1699-2

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN16992.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for linux USN-1699-2 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

USN-1699-2: Linux kernel regression

USN-1699-1 fixed vulnerabilities in the Linux kernel. Due to an unrelated regression inotify/fanotify stopped working after upgrading. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jon Howell reported a flaw in the Linux kernel's KVM Kernel-based...

Ubuntu: Security Advisory (USN-1699-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP-UX PHSS_43202 : s700_800 11.23 X Font Server Patch

s700800 11.23 X Font Server Patch : A potential security vulnerability has been identified with HP-UX running the X Font Server xfs. The vulnerability could be exploited locally to create a Denial of Service DoS, or allow unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

CVE-2012-1699

The CVE-2012-1699 entry concerns the xfs font server (Difs) in X.Org X11R6 up to 6.6 and XFree86 before 3.3.3. The root cause is that ProcSetEventMask in difs/events.c calls SendErrToClient with a mask value instead of a pointer. This can allow local users to cause memory corruption and a crash o...

Novell iPrint Client 'printer-url' Multiple BOF Vulnerabilities - Windows

Novell iPrint Client is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ZDI-11-172: Novell iPrint nipplib.dll uri Remote Code Execution Vulnerability

ZDI-11-172: Novell iPrint nipplib.dll uri Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-172 June 6, 2011 -- CVE ID: CVE-2011-1699 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Novell -- Affected Products: Novell iPrint -- TippingPointTM IPS...

CVE-2011-1699

CVE-2011-1699 affects Novell iPrint Client (nipplib.dll) on Windows prior to 5.64. The flaw is a heap-based buffer overflow in handling the uri parameter of the user-supplied printer-url, enabling remote code execution. Exploitation requires user interaction (e.g., visiting a malicious page). Con...

Novell iPrint Client < 5.64 Multiple Vulnerabilities

Binary data 5942.prm...

Novell iPrint Client < 5.64 Multiple Vulnerabilities

The version of Novell iPrint Client installed on the remote host is prior to 5.64. It is, therefore, affected by one or more of the following vulnerabilities in the nipplib.dll component, as used by both types of browser plugins, that can allow for arbitrary code execution : - The uri parameter...

[SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1988-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano February 02, 2010 http://www.debian.org/security/faq -...