iTunes < 9.1 Multiple Vulnerabilities

Binary data 5491.prm...

iTunes < 9.1 Multiple Vulnerabilities (Mac OS X)

The remote version of iTunes is older than 9.1. Such versions are potentially affected by multiple vulnerabilities : - An infinite loop in the application's handling of imported MP4 podcast files may lead to an application crash and prevent subsequent operation. CVE-2010-0531 - Syncing a mobile...

Debian Security Advisory DSA 1819-1 (vlc)

The remote host is missing an update to vlc announced via advisory DSA 1819-1. OpenVAS Vulnerability Test $Id: deb18191.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1819-1 vlc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-1768

CVE-2009-1768 affects Rama Zaiten CMS 0.9.8 and earlier. The vulnerability is a directory traversal in download.php that allows remote attackers to read arbitrary files by supplying a .. in the file parameter. The root cause is insufficient validation of the file path, enabling access to files ou...

CVE-2009-1768

creationtimestamp| type| source ---|---|--- 2009-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8700...

Gentoo Security Advisory GLSA 200804-25 (vlc)

The remote host is missing updates announced in advisory GLSA 200804-25. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-1768

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service crash via the 1 MP4 demuxer, 2 Real demuxer, and 3 Cinepak codec, which triggers a buffer overflow...

CVE-2008-1768

Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service crash via the 1 MP4 demuxer, 2 Real demuxer, and 3 Cinepak codec, which triggers a buffer overflow...

VLC媒体播放器MP及Cinepak解码器缓冲区溢出漏洞

BUGTRAQ ID: 28904,28903 CVECAN ID: CVE-2008-1769,CVE-2008-1768 VLC Media Player是一款免费的媒体播放器。 VLC处理畸形格式的媒体文件时存在漏洞，如果用户受骗使用VLC播放器打开了特制的媒体文件或流媒体的话，就会在MP4和Cinepak解码器模块中触发缓冲区溢出，导致拒绝服务或执行任意指令。 VideoLAN VLC Media Player 0.8.6e Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200804-25）以及相应补丁: GLSA-200804-25：VLC:...

CVE-2008-1768

CVE-2008-1768 affects VLC media player prior to 0.8.6f. The vulnerability arises from multiple integer overflows in the MP4 demuxer, Real demuxer, and Cinepak codec, which can trigger a buffer overflow and cause a remote attack to crash the player (DoS). Related advisories confirm these problems ...

Debian: Security Advisory (DSA-921-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 921-1 (kernel-source-2.4.27)

The remote host is missing an update to kernel-source-2.4.27 announced via advisory DSA 921-1. OpenVAS Vulnerability Test $Id: deb9211.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 921-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-1768

CVE-2007-1768 affects Mephisto 0.7.3 and Mephisto Edge 20070325. Vulnerable component: app/helpers/application_helper.rb . Issue: Cross-site scripting (XSS) via the author name field in a comment, enabling remote injection of arbitrary web script/HTML. Exploitation details are not provided in the...

CVE-2006-1815

Multiple cross-site scripting XSS vulnerabilities in register.php in Tritanium Bulletin Board TBB 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 newuserrealname and 2 newusericq parameters, a different vector than CVE-2006-1768. NOTE: the provenance of this...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in register.php in Tritanium Bulletin Board TBB 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 newuserrealname and 2 newusericq parameters, a different vector than CVE-2006-1768. NOTE: the provenance of this...

CVE-2006-1815

Multiple cross-site scripting XSS vulnerabilities in register.php in Tritanium Bulletin Board TBB 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 newuserrealname and 2 newusericq parameters, a different vector than CVE-2006-1768. NOTE: the provenance of this...

[SECURITY] [DSA 921-1] New Linux 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 921-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2005 http://www.debian.org/security/faq -...

CVE-2005-1768

The CVE-2005-1768 issue is a race condition in the Linux kernel’s IA32 (x86) compatibility execve() handling, affecting amd64/Intel EM64T and Itanium platforms. A concurrent thread can increment a pointer count after nargs has counted pointers but before copying from user space to kernel space, l...

CVE-2002-1768

Cisco IOS versions 11.1–12.2 are affected when HSRP support is not enabled. The issue allows an attacker to cause a denial of service (CPU consumption) by sending randomly sized UDP packets to the HSRP port 1985. The Nessus plugin CISCO-20020606-HSRP.NASL confirms this condition and notes that th...

CVE-2004-1768

Symantec Brightmail AntiSpam 6.0.1 (before patch 132) is affected by a denial-of-service in the Spamhunter and Language ID character converters when processing messages using ISO-8859-10. The converters crash due to an unrecognized character set. Affected component: character converters in Spamhu...