CVE-2015-1781

CVE-2015-1781 affects the GNU C Library (glibc/eglibc) NSS gethostbyname_r and related functions. A misaligned input buffer can cause a buffer overflow, leading to a crash or potentially arbitrary code execution via crafted DNS responses. Public advisories (Debian, Cloud Foundry, CentOS/RH, CNVD)...

SUSE SLED11 / SLES11 Security Update : glibc (SUSE-SU-2015:1424-1)

This update for glibc provides fixes for security and non-security issues. These security issues have been fixed : - CVE-2015-1781: Buffer length after padding in resolv/nssdns/dns-host.c. bsc927080 - CVE-2013-2207: ptchown did not properly check permissions for tty files, which allowed local use...

openSUSE Security Update : glibc / glibc-testsuite / glibc-utils / etc (openSUSE-2015-383)

glibc was updated to fix security issues and bugs : - Separate internal state between getXXent and getXXbyYY NSS calls CVE-2014-8121, bsc918187, BZ 18007 - Fix read past end of pattern in fnmatch bsc920338, BZ 17062, BZ 18032, BZ 18036 - Fix buffer overflow in nssdns CVE-2015-1781, bsc927080, BZ...

Amazon Linux AMI : glibc (ALAS-2015-513)

A buffer overflow flaw was found in the way glibc's gethostbynamer and other related functions computed the size of a buffer when passed a misaligned buffer as input. An attacker able to make an application call any of these functions with a misaligned buffer could use this flaw to crash the...

Medium: glibc

Issue Overview: A buffer overflow flaw was found in the way glibc's gethostbynamer and other related functions computed the size of a buffer when passed a misaligned buffer as input. An attacker able to make an application call any of these functions with a misaligned buffer could use this flaw t...

CentOS 6 : glibc (CESA-2015:0863)

Updated glibc packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

RedHat Update for glibc RHSA-2015:0863-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : glibc (RHSA-2015:0863)

Updated glibc packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Oracle Linux 6 : glibc (ELSA-2015-0863)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0863 advisory. - Fix invalid file descriptor reuse while sending DNS query 1207995, CVE-2013-7423. - Fix buffer overflow in gethostbynamer with misaligned buffer...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2015:0863 Updated glibc packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

Moderate: Red Hat Security Advisory: glibc security and bug fix update

Updated glibc packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

openSUSE Security Update : libwebkit (openSUSE-SU-2010:0666-1)

The browser engine libwebkit was updated to version 1.2.4 to fix several security bugs. CVE-2010-1781, CVE-2010-1782, CVE-2010-1784, CVE-2010-1785 CVE-2010-1786, CVE-2010-1787, CVE-2010-1788, CVE-2010-1790 CVE-2010-1792, CVE-2010-1793, CVE-2010-2648 %NASLMINLEVEL 70300 C Tenable Network Security,...

Memory corruption

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1781, CVE-2014-1804, and CVE-2014-2770...

Memory corruption

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1781, CVE-2014-1792, and CVE-2014-2770...

CVE-2014-1781

The CVE-2014-1781 entry concerns Microsoft Internet Explorer 8 and describes memory corruption triggered by a crafted web site, i.e., the “Internet Explorer Memory Corruption Vulnerability.” It is stated to be a different vulnerability from CVE-2014-1792, CVE-2014-1804, and CVE-2014-2770. The con...

Ubuntu: Security Advisory (USN-1781-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1781

The CVE-2013-1781 entry affects Drupal’s Professional Theme prior to 7.x-1.4. The vulnerability is an XSS in the 3 slide gallery where unsanitized user content can be injected by remote authenticated users with administer themes permission via unspecified vectors. Affected software: Professional ...

SA-CONTRIB-2013-027 - Professional theme - Cross Site Scripting (XSS)

This third-party contributed theme change Drupal's interface. The theme doesn't properly sanitize user-entered content in the 3 slide gallery on the homepage leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker would have to have the...

RedHat Update for systemtap RHSA-2011:0842-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-1781

CVE-2012-1781 affects SocialCMS 1.0.5. The vulnerability is multiple cross-site scripting (XSS) in ajax/commentajax.php, exploitable via the parameters TREF_email_address and TR_name , enabling remote attackers to inject arbitrary web script or HTML. The provided sources confirm the affected comp...