Mozilla Firefox ESR Multiple Vulnerabilities - August 13 (Windows)

The host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrmultvulnaug13win.nasl 6093 2017-05-10 09:03:18Z teissa $ Mozilla Firefox ESR Multiple Vulnerabilities - August 13 Windows Authors: Thanga Prakash S Copyright...

Mozilla Thunderbird ESR 17.x < 17.0.8 Multiple Vulnerabilities

The installed version of Thunderbird ESR 17.x is earlier than 17.0.8 and is, therefore, potentially affected the following vulnerabilities: - Various errors exist that could allow memory corruption conditions. CVE-2013-1701 - Errors exist related to the update service and 'maintenanceservice.exe'...

Mozilla Firefox Multiple Vulnerabilities (Aug 2013) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Mozilla Firefox ESR Multiple Vulnerabilities (Aug 2013) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Firefox < 23.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 23.0 and is, therefore, potentially affected by the following vulnerabilities : - Various errors exist that could allow memory corruption conditions. CVE-2013-1701, CVE-2013-1702 - Use-after-free errors exist related to DOM modification when using...

CVE-2013-1707

CVE-2013-1707 is a stack-based buffer overflow in Mozilla Updater used by Mozilla Maintenance Service, enabling local privilege escalation via a long pathname on the command line. Affected products/versions include Mozilla Firefox up to version 23.0 (and ESR), Thunderbird up to 17.0.8, with corre...

Ubuntu: Security Advisory (USN-1707-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : libssh vulnerability (USN-1707-1)

Yong Chuan Koh discovered that libssh incorrectly handled certain negotiation requests. A remote attacker could use this to cause libssh to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

CVE-2012-1707

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base, a different vulnerability than...

CVE-2012-1707

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base, a different vulnerability than...

CVE-2012-1707

CVE-2012-1707 describes an unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Software, affecting versions 5.0.2, 5.3.0–5.3.4, 6.0.1, and 6.2.0. It enables remote authenticated users to affect confidentiality via unknown vectors related to Core-...

Novell iPrint Client 'printer-url' Multiple BOF Vulnerabilities - Windows

Novell iPrint Client is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ZDI-11-181: Novell iPrint op-printer-list-all-jobs url Remote Code Execution Vulnerability

ZDI-11-181: Novell iPrint op-printer-list-all-jobs url Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-181 June 6, 2011 -- CVE ID: CVE-2011-1707 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Novell -- Affected Products: Novell iPrint --...

CVE-2011-1707

CVE-2011-1707 affects the Novell iPrint Client (nipplib.dll) prior to version 5.64. A stack-based buffer overflow in the nipplib component occurs when handling the op-printer-list-all-jobs parameter in the printer-url, allowing remote code execution. The vulnerability exists in both ActiveX and N...

Novell iPrint Client < 5.64 Multiple Vulnerabilities

Binary data 5942.prm...

Novell iPrint Client < 5.64 Multiple Vulnerabilities

The version of Novell iPrint Client installed on the remote host is prior to 5.64. It is, therefore, affected by one or more of the following vulnerabilities in the nipplib.dll component, as used by both types of browser plugins, that can allow for arbitrary code execution : - The uri parameter...

CVE-2010-1707

Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...

CVE-2010-1707

CVE-2010-1707 affects Piwigo 2.0.9 and earlier. The register.php endpoint does not properly filter the login and mail_address parameters, enabling multiple cross‑site scripting (XSS) vulnerabilities. Remote attackers could inject arbitrary HTML/JavaScript that would execute in a victim’s browser ...

CVE-2010-1707

Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...

openSUSE Security Update : flash-player (flash-player-1707)

Specially crafted Flash SWF files can cause overflows in flash-player. Attackers could potentially exploit that to execute arbitrary code CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798,CVE-2009-3799, CVE-2009-3800, CVE-2009-3951 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...