Fedora 21 : libXfont-1.5.1-1.fc21 (2015-4230)

Security fix for CVE-2015-1802, CVE-2015-1803, CVE-2015-1804 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for libXfont FEDORA-2015-4230

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated libxfont package fixes security vulnerabilities

The bdf parser reads a count for the number of properties defined in a font from the font file, and allocates arrays with entries for each property based on that count. It never checked to see if that count was negative, or large enough to overflow when multiplied by the size of the structures...

SUSE-SU-2015:0702-1 Security update for libXfont

LibXFont was updated to fix security problems. Following security issues were fixed: - CVE-2015-1802: The bdf parser reads a count for the number of properties defined in a font from the font file, and allocates arrays with entries for each property based on that count. It never checked to see if...

CVE-2015-1803

CVE-2015-1803 affects the X.Org libXfont library. The bdfReadCharacters function in bitmap/bdfread.c does not properly handle unreadable character bitmaps, allowing remote authenticated users to trigger a denial of service via NULL pointer dereference and crash, with the potential to execute arbi...

KLA10478 Denial of service vulnerability in X.Org libXfont

Improper type conversion and bitmaps handling was found in X.Org libXfont. By exploiting this vulnerability malicious users can execute arbitrary code or cause denial of service. This vulnerability can be exploited remotely via a specially designed BDF font file. Original advisories X.Org advisor...

Ubuntu: Security Advisory (USN-2536-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-2536-1] libXfont vulnerabilities

========================================================================== Ubuntu Security Notice USN-2536-1 March 18, 2015 libxfont vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

[SECURITY] [DSA 3194-1] libxfont security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3194-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 17, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3194-1 (libxfont - security update)

Ilja van Sprundel, Alan Coopersmith and William Robinet discovered multiple issues in libxfont OpenVAS Vulnerability Test $Id: deb3194.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3194-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright:...

Debian: Security Advisory (DSA-3194-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory corruption

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1775, CVE-2014-1779, CVE-2014-1799,...

CVE-2014-1803

Mode C: CVE-2014-1803 is an Internet Explorer memory-corruption vulnerability (IE6–IE11) described in the connected doc as a Use-After-Free in heap-allocated objects, with a PoC referencing MS14-035. The myhack58 article details a UAF chain in mshtml, tracing the crash to a virtual function call ...

KLA10010 Multiple vulnerabilities at Microsoft Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer versions 6-11. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass a sandbox protection mechanism, obtain sensitive information, modify TLS session data or read...

CVE-2013-1803

PHP-Fusion 7.x is affected by CVE-2013-1803: multiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06. The issues allow remote SQL execution via numerous parameters across several scripts (downloads.php; forum/postedit.php; forum/postnewthread.php; administration/settings_messages.php;...

Fedora Update for libpng15 FEDORA-2014-1803

Check for the Version of libpng15 OpenVAS Vulnerability Test Fedora Update for libpng15 FEDORA-2014-1803 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for libjpeg-turbo RHSA-2013:1803-01

Check for the Version of libjpeg-turbo OpenVAS Vulnerability Test RedHat Update for libjpeg-turbo RHSA-2013:1803-01 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for libjpeg-turbo CESA-2013:1803 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : rdesktop (ELSA-2008-0575)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2008-0575 advisory. 1.4.1-6 - Update the prototype for xrealloc as well. - Fix bug 452978, cve-2008-1803 - Fix bug 452978, cve-2008-1801 Tenable has extracted the precedin...

Ubuntu: Security Advisory (USN-1803-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...