Debian: Security Advisory (DSA-1814-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1814-1 : libsndfile - heap-based buffer overflow

Two vulnerabilities have been found in libsndfile, a library to read and write sampled audio data. The Common Vulnerabilities and Exposures project identified the following problems : - CVE-2009-1788 Tobias Klein discovered that the VOC parsing routines suffer of a heap-based buffer overflow whic...

[SECURITY] [DSA 1814-1] New libsndfile packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1814-1 [email protected] http://www.debian.org/security/ Nico Golde June 13th, 2009 http://www.debian.org/security/faq -...

DSA-1814-1 libsndfile - arbitrary code execution

Bulletin has no description...

Mandrake Security Advisory MDVSA-2009:132 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory MDVSA-2009:132. OpenVAS Vulnerability Test $Id: mdksa2009132.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:132 libsndfile Authors: Thomas Reinke Copyright: Copyright c 2009...

Gentoo Security Advisory GLSA 200905-09 (libsndfile)

The remote host is missing updates announced in advisory GLSA 200905-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: libsndfile

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: libsndfile

The remote host is missing an update to the system as announced in the referenced advisory. VID 6355efdb-4d4d-11de-8811-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 6355efdb-4d4d-11de-8811-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

libsndfile: User-assisted execution of arbitrary code

Background libsndfile is a C library for reading and writing files containing sampled sound. Description The following vulnerabilities have been found in libsndfile: Tobias Klein reported that the headerread function in src/common.c uses user input for calculating a buffer size, possibly leading ...

CVE-2009-1791

Technical details about CVE-2009-1791 are not publicly available in the provided connected documents. Monitor for updates.

Debian: Security Advisory (DSA-1791-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1791-1 (moin)

The remote host is missing an update to moin announced via advisory DSA 1791-1. OpenVAS Vulnerability Test $Id: deb17911.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1791-1 moin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2008-1791

CVE-2008-1791 is an SQL injection in ladder.php of My Gaming Ladder 7.5 and earlier . The vulnerability is triggered via the ladderid parameter , allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a NETWORK attack vector, LOW complexity, with no authentication, and i...

CVE-2008-1791

creationtimestamp| type| source ---|---|--- 2008-04-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5401...

CVE-2007-1791

CVE-2007-1791 targets Picture-Engine (wall.php) 1.2.0 and earlier. Affected component: cat parameter in wall.php, enabling remote SQL injection to execute arbitrary SQL commands. Documented across NVD/CVE lists; no remediation details provided in the supplied documents.

CVE-2006-1791

CVE-2006-1791 affects QuickBlogger 1.4 through the file acc.php , enabling a directory traversal that lets an attacker read or include arbitrary local files via the request parameter; note that an include failure can yield XSS . The connected documents confirm the affected product and vulnerabili...

CVE-2002-1791

CVE-2002-1791 affects SGI IRIX 6.5–6.5.17. The vulnerability stems from creating temporary desktop files with world-writable permissions, enabling local users to overwrite or corrupt those files. Exploitation details, affected files, and patch information are not provided in the documents. Public...

CVE-2005-1791

CVE-2005-1791 affects Microsoft Internet Explorer 6 SP2 (build 6.0.2900.2180). The issue is a crash of URLMON.DLL when a user attempts to add a URI to the restricted zone whose full domain begins with a numeric sequence that looks like an IP address. The vulnerability is documented across CVE lis...

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to an IP address. NOTE: if there is not an exploit scenario in which an attacker can trigger this...

CVE-2004-1791

CVE-2004-1791 concerns Edimax AR-6004 ADSL Routers where the web management interface uses a default administrator name and password that also appear as the default login text. Multiple connected sources corroborate that this enables remote access to the device (attack surface is network-enabled)...