Fedora Update for php FEDORA-2010-11481

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for php-eaccelerator FEDORA-2010-11481

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for maniadrive FEDORA-2010-11428

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2089-1 : php5 - several vulnerabilities

Several remote vulnerabilities have been discovered in PHP 5, an hypertext preprocessor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1917 The fnmatch function can be abused to conduct denial of service attacks by crashing the interpreter by the...

[SECURITY] [DSA-2089-1] New php5 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2089-1 [email protected] http://www.debian.org/security/ Raphael Geissert August 6, 2010 http://www.debian.org/security/faq -...

CVE-2010-1917

The CVE-2010-1917 entry concerns a stack-consumption vulnerability in PHP 5.2–5.2.13 and 5.3–5.3.2 that allows context-dependent attackers to cause a denial of service (PHP crash) by passing a crafted long string as the first argument to fnmatch. The connected documents (e.g., MiracleLinux AXSA a...

Debian DSA-1917-1 : mimetex - several vulnerabilities

Several vulnerabilities have been discovered in mimetex, a lightweight alternative to MathML. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1382 Chris Evans and Damien Miller, discovered multiple stack-based buffer overflow. An attacker could...

iDefense Security Advisory 08.06.09: Microsoft Internet Explorer HTML TIME 'ondatasetcomplete' Use After Free Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 07.28.09 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 28, 2009 I. BACKGROUND HTML+TIME HTML Timed Interactive Multimedia Extensionsis a web standard that was created for Microsoft Corp.'s Internet Explorer IE t...

CVE-2009-1917

Microsoft Internet Explorer 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in...

CVE-2009-1917

CVE-2009-1917 affects multiple Internet Explorer versions (IE6/7/8) where memory objects could be accessed after deletion, enabling remote code execution via crafted HTML. The connected MSKB indicates this vulnerability was addressed by MS09-034, a cumulative IE update. The known remediation is t...

Microsoft Internet Explorer (CVE-2009-1917)内存破坏远程代码执行漏洞(MS09-034)

Bugraq ID: 35831 CVE ID：CVE-2009-1917 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理内存对象存在安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 攻击者需要构建恶意WEB页，诱使用户访问来触发此漏洞，目前没有详细漏洞细节提供。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft...

Internet Explorer Memory Corruption (MS09-034; CVE-2009-1917)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way that Internet Explorer handles a memory object. When Internet Explorer attempts to access an object that has been deleted, memory may be corrupted in such a way that an...

MS09-034: Cumulative Security Update for Internet Explorer (972260)

The remote host is missing IE Security Update 972260. The remote version of IE is affected by several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40407; scriptversion"1.26";...

Gentoo Security Advisory GLSA 200404-19 (lcdproc)

The remote host is missing updates announced in advisory GLSA 200404-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1917

CVE-2008-1917 describes multiple cross-site scripting (XSS) vulnerabilities in AMFPHP 1.2. The affected components are the browser/ module parameters: (1) class parameter to (a) methodTable.php, (b) code.php, and (c) details.php, and (2) the location parameter to browser/code.php. The CVE notes t...

CVE-2008-1917

creationtimestamp| type| source ---|---|--- 2008-04-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31652 2008-04-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31653 2008-04-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31651...

CVE-2007-1917

The CVE-2007-1917 entry concerns the SAP RFC Library (versions 6.40 and 7.00 prior to 20061211). The documented vulnerability is a buffer overflow in the SYSTEM_CREATE_INSTANCE function, which could allow remote attackers to execute arbitrary code via unspecified vectors. In the provided connecte...

CVE-2006-1917

The CVE-2006-1917 entry corresponds to a SQL injection vulnerability in Blackorpheus ClanMemberSkript 1.0, exploitable via the userID parameter in member.php. The issue allows remote attackers to append or execute arbitrary SQL commands, with impact described as Partial confidentiality, integrity...

CVE-2005-1917

CVE-2005-1917 affects kpopper 1.0 and earlier. Local users can create and overwrite arbitrary files through a symlink attack on the .popper-new temporary file due to insecure temporary file handling. Impact is described as low; exploitation is indicated in public advisories. Affected versions: kp...

CVE-2004-1917

CVE-2004-1917 involves a format string vulnerability in LCDProc, present in version 0.4.1 and earlier, specifically in test_func_func. The flaw allows remote attackers to execute arbitrary code by supplying format string specifiers via the str variable. The cited sources consistently describe the...