Oracle: Security Advisory (ELSA-2011-0534)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-1750

CVE-2014-1750 affects the Nokia Maps & Places WordPress plugin (version up to 1.6.6). The vulnerability is an open redirect via the href parameter to page/place.html, enabling an attacker to redirect users to arbitrary sites and potentially facilitate phishing. Some sources also reference XSS, bu...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1747, CVE-2015-1750, and...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1747, and...

CVE-2015-1750

Microsoft Internet Explorer 11 is the affected component for CVE-2015-1750. The vulnerability involves memory corruption in IE11 triggered by visiting a crafted web page, allowing remote code execution or a denial of service. The available sources identify IE11 and the memory corruption vector bu...

Microsoft Internet Explorer Memory Corruption (MS15-056: CVE-2015-1750)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

KLA10594 Multiple vulnerabilities in Microsoft Internet Explorer

An unspecified vulnerabilities were found in Microsoft Internet Explorer. By exploiting these vulnerabilities malicious users can gain privileges or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed web site. Original advisories Microsoft bulletin...

Oracle Solaris Critical Patch Update : jul2012_SRU7_5

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring logon to...

openSUSE Security Update : kvm (openSUSE-SU-2011:0510-1)

By causing a hot-unplug of the pci-isa bridge from within guests the qemu process could access already freed memory. A privileged user inside the guest could exploit that to crash the guest instance or potentially execute arbitrary code on the host CVE-2011-1751. The virtio-blk driver did not...

CSGuestbook csGuestbook.cgi setup Parameter Code Execution - Ver2 (CVE-2002-1750)

A code execution vulnerability has been reported in Cgiscript.net Csguestbook. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2013-1750

RealNetworks RealPlayer is affected by a heap-based buffer overflow (CVE-2013-1750) that allows remote code execution when processing a malformed MP4 file. The vulnerable products listed include RealPlayer prior to version 16.0.1.18 and RealPlayer SP 1.0 through 1.1.5. The root cause is a heap-ba...

Real Networks RealPlayer堆缓冲区溢出漏洞(CVE-2013-1750)

BUGTRAQ ID: 58539 CVECAN ID: CVE-2013-1750 RealPlayer是网上收听收看实时音频、视频和Flash的工具。 RealPlayer在处理MP4文件时存在错误，可被利用造成堆缓冲区溢出。成功利用后可允许执行任意代码。 0 RealPlayer 15.x 厂商补丁： Real Networks ------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://service.real.com/realplayer/security/...

RealPlayer for Windows < 16.0.1.18 MP4 Heap-Based Buffer Overflow

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 16.0.1.18. It is, therefore, affected by a heap-based buffer overflow vulnerability related to handling malformed MP4 files that could lead to arbitrary code execution. C Tenable Network...

RHEL 6 : qemu-kvm (RHSA-2011:0534)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0534 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space...

Gentoo Security Advisory GLSA 201210-04 (ebuild)

The remote host is missing updates announced in advisory GLSA 201210-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Scientific Linux Security Update : qemu-kvm on SL6.x x86_64

KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space component for running virtual machines using KVM. It was found that the virtio-blk driver in qemu-kvm did not properly validate read and write requests from guest...

CVE-2012-1750

CVE-2012-1750 affects Oracle Solaris 8–11 in the mailx(1) component. The vulnerability is described as unspecified with local access required to affect confidentiality, integrity, and availability; no exploit details are provided in the sources. Remediation is indicated by Oracle’s July 2012 CPU ...

CVE-2011-1750

CVE-2011-1750 affects qemu-kvm 0.14.0 with heap-based buffer overflows in virtio-blk (hw/virtio-blk.c) allowing a privileged guest user to crash the guest or potentially gain host privileges via unaligned read/write requests. Connected advisories confirm affected environments (e.g., RHSA-2011:053...

Fedora 15 : qemu-0.14.0-9.fc15 (2012-8604)

CVE-2011-1750 virtio-blk: heap buffer overflow bz 698906, bz 698911 - CVE-2011-2527 set groups properly for -runas bz 720773, bz 720784 - CVE-2012-0029 e1000 buffer overflow bz 783984, bz 772075 - virtio-blk: refuse SGIO requests with scsi=off bz 770135 Note that Tenable Network Security has...

RedHat Update for qemu-kvm RHSA-2011:0534-01

Check for the Version of qemu-kvm OpenVAS Vulnerability Test RedHat Update for qemu-kvm RHSA-2011:0534-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...