156 matches found
CVE-2017-1947
CVE-2017-1947 is rejected and does not represent an active vulnerability entry.
Security update for the MozillaFirefox, mozilla-nss and mozilla-nspr (important)
This update to MozillaFirefox fixes several security issues and bugs. Mozilla Firefox was updated to 44.0. Mozilla NSS was updated to 3.21 Mozilla NSPR was updated to 4.11. The following vulnerabilities were fixed: CVE-2016-1930/CVE-2016-1931: Miscellaneous memory safety hazards boo963633...
openSUSE: Security Advisory for Mozilla (openSUSE-SU-2016:0306-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2016:0309-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-1947
Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data...
CVE-2016-1947
CVE-2016-1947 pertains to Firefox 43.x where the Application Reputation service was disabled, enabling a remote attacker to trigger an unintended download by exploiting the absence of reputation data. The connected openSUSE advisories confirm this issue as part of MFSA 2016-11 and list CVE-2016-1...
CVE-2016-1947
Mozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which makes it easier for remote attackers to trigger an unintended download by leveraging the absence of reputation data...
CVE-2015-1947
CVE-2015-1947 affects IBM InfoSphere BigInsights (versions 3.0, 3.0.0.1, 3.0.0.2, and 4.0) when DB2 is used. The root cause is an untrusted search path that lets a local user place a malicious library loaded by a setuid/setgid binary, enabling privilege escalation to root. IBM documents this as a...
Oracle: Security Advisory (ELSA-2012-0710)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2012-0715)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-7367
CVE-2014-7367 affects the TuS 1947 Radis Android app (version 1.0). The root cause is that the application does not verify X.509 certificates from SSL servers, enabling an MITM attacker to spoof servers and obtain sensitive information via a crafted certificate. The NVD record indicates a medium ...
Medium: GraphicsMagick
Issue Overview: A buffer overflow flaw affecting ImageMagick and GraphicsMagic when handling PSD images was reported. Affected Packages: GraphicsMagick Issue Correction: Run yum update GraphicsMagick or yum update --advisory ALAS-2014-420 to update your system. New Packages: i686: ...
Fedora 19 : GraphicsMagick-1.3.20-3.fc19 (2014-9624)
New stable upstream release, patched for CVE-2014-1947. See also: http://www.graphicsmagick.org/NEWS.htmlaugust-16-2014 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Fedora 20 : GraphicsMagick-1.3.20-3.fc20 (2014-9927)
Better fix for psd security issue, CVE-2014-1947. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
MGASA-2014-0370 Updated graphicsmagick packages fix CVE-2014-1947
Updated graphicsmagick packages fix security vulnerability: A buffer overflow flaw was found in the way GraphicsMagick writes PSD images when the input data has a large number of layers. Due to the compilation options used in Mageia, the buffer overflow is reduced to a crash, making this a denial...
Updated graphicsmagick packages fix CVE-2014-1947
Updated graphicsmagick packages fix security vulnerability: A buffer overflow flaw was found in the way GraphicsMagick writes PSD images when the input data has a large number of layers. Due to the compilation options used in Mageia, the buffer overflow is reduced to a crash, making this a denial...
Fedora Update for GraphicsMagick FEDORA-2014-9596
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)
No description provided by source. !/usr/bin/perl Exploit Title: ImageMagick 6.8.8-5 - Local Buffer Overflow SEH Date: 2-13-2014 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ImageMagick all versions prior to 6.8.8-5 Software Link:...
openSUSE Security Update : MozillaFirefox / MozillaThunderbird / mozilla-nss / etc (openSUSE-SU-2012:0760-1)
Changes in MozillaFirefox : - update to Firefox 13.0 bnc765204 - MFSA 2012-34/CVE-2012-1938/CVE-2012-1937/CVE-2011-3101 Miscellaneous memory safety hazards - MFSA 2012-36/CVE-2012-1944 bmo751422 Content Security Policy inline-script bypass - MFSA 2012-37/CVE-2012-1945 bmo670514 Information...