Mandriva Linux Security Advisory : nfs-utils (MDVSA-2011:186)

A vulnerability has been discovered and corrected in nfs-utils : It was found that the mount.nfs tool did not handle certain errors correctly when updating the mtab mounted file systems table file. A local attacker could use this flaw to corrupt the mtab file CVE-2011-1749. The updated packages...

RHEL 6 : libxml2 (RHSA-2011:1749)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1749 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. One of those standards is the XML Path...

RHEL 6 : nfs-utils (RHSA-2011:1534)

Updated nfs-utils packages that fix two security issues, various bugs, and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Microsoft Windows Vector Markup Language Buffer Overflow (938127)

This security update resolves a privately reported vulnerability in the Vector Markup Language VML implementation in Windows. The vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. Users whose accounts are configured to have fewe...

Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists in the handling of images with an embedded ColorSync profile. By using a specially crafted image, a remote attacker...

CVE-2010-1749

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the Cascading Style Sheets CSS run-...

CVE-2010-1749

Removed by vendor...

CVE-2010-1749

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the Cascading Style Sheets CSS run-...

ZDI-10-101: Apple Webkit SVG RadialGradiant Run-in Remote Code Execution Vulnerability

ZDI-10-101: Apple Webkit SVG RadialGradiant Run-in Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-101 June 8, 2010 -- CVE ID: CVE-2010-1749 -- Affected Vendors: Apple -- Affected Products: Apple WebKit -- TippingPointTM IPS Customer Protection: TippingPoint...

CVE-2009-1749

Catviz 0.4.0 beta 1 contains multiple XSS in index.php, exploitable via the userman_form and webpages_form parameters. Root cause is improper handling of these inputs, allowing remote injection of arbitrary script/HTML. The vulnerability affects the ability to inject content into pages consumed b...

CVE-2009-1749

creationtimestamp| type| source ---|---|--- 2009-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8745...

Debian Security Advisory DSA 1749-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1749-1. OpenVAS Vulnerability Test $Id: deb17491.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1749-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1749-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1749

The CVE-2008-1749 issue affects Cisco Content Switching Module (CSM) and CSM-S when configured for layer 7 load balancing. A memory leak is triggered while processing TCP segments with a specific combination of TCP flags, causing memory consumption and potential denial of service as the servers b...

Microsoft IE向量标记语言VGX.DLL远程堆溢出漏洞（MS07-050）

BUGTRAQ ID: 25310 CVECAN ID: CVE-2007-1749 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE的VML在处理压缩的数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 VGX.DLL是IE中负责渲染VML的组件，该组件中的CDownloadSink类实现处理从VML中内嵌URL所下载的数据。例如，以下VML会下载由VGX.DLL!CDownloadSink::OnDataAvailable处理的额外内容： v:rect v:imagedata src="http://malice/compressed.emz...

CVE-2007-1749

CVE-2007-1749 is a VML/VGX.DLL heap-buffer-overflow remote-code-execution vulnerability in Internet Explorer versions 5.01, 6 and 7 caused by an integer underflow in CDownloadSink::OnDataAvailable when processing compressed VML content. The vulnerability can be triggered by a specially crafted we...

CVE-2006-1749

CVE-2006-1749 affects phpListPro 2.0 and earlier. The issue is a PHP remote file inclusion vulnerability where input from the returnpath parameter (in config.php and related scripts) can be used to include arbitrary PHP code, enabling code execution on the server. Exploitation is described as pos...

CVE-2005-1749

CVE-2005-1749 affects BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4. A buffer overflow flaw allows remote attackers to trigger a denial of service via CPU consumption caused by a looping thread. The vulnerability is documented with a MEDIUM base score (CVSS v2.0) and network access ...

CVE-2004-1749

Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service CPU consumption via a large number of HTTP requests...

CVE-2004-1749

The CVE-2004-1749 vulnerability affects Attack Mitigator IPS 5500 version 3.11.008 (and possibly other versions) when configured in a one-armed routing setup. It allows remote attackers to cause a denial-of-service by generating a large number of HTTP requests, leading to CPU consumption. The NVD...