Mozilla Products Memory Corruption Vulnerabilities - August12 (Mac OS X)

This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmemcorrvulnaug12macosx.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products Memory Corruption Vulnerabilities - August12 Mac OS X Authors:...

CVE-2012-1971

CVE-2012-1971 concerns Mozilla Firefox (pre-15.0), Thunderbird (pre-15.0), and SeaMonkey (pre-2.12). The description identifies memory corruption and potential remote code execution or crashes related to garbage collection after certain MethodJIT execution, plus other unspecified vectors. Impact ...

CVE-2011-1971

The CVE-2011-1971 entry describes a Windows kernel vulnerability where the kernel’s file metadata parsing is flawed, enabling local users to trigger a denial-of-service (reboot) via a crafted file. Affected are Windows Vista SP2, Windows Server 2008 SP2, R2 and R2 SP1, and Windows 7 Gold/SP1. The...

Microsoft Windows Kernel CVE-2011-1971远程拒绝服务漏洞

Bugtraq ID: 48997 CVE ID：CVE-2011-1971 Microsoft Windows是一款流行的操作系统。 在解析文件中的元数据信息时内核存在错误，可导致系统崩溃。 要成功利用漏洞需要用户浏览器包含特制文件的文件夹如浏览网络共享或WEB站点引用的网络共享 Microsoft Windows Vista x64 Edition SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 R2 x64 SP1 Microsoft Windows Server 2008 R2 x64 Microsoft...

MS11-068: Vulnerability in Windows Kernel Could Allow Denial of Service (2556532)

The remote host is running a Windows kernel version that is affected by a denial of service vulnerability involving the code that handles parsing file metadata when browsing a folder. A remote attacker could exploit this issue by tricking a user into opening a folder containing a specially crafte...

CVE-2010-1971

Cross-site request forgery CSRF vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968...

CVE-2010-1971

Cross-site request forgery CSRF vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968...

CVE-2010-1971

CVE-2010-1971: CSRF vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack user authentication. Documented by multiple sources (NVD, Red Hat, HP security bulletins) with HP stating mitigations via HP Insight Software Installer 6.1 or later. Affecte...

Debian DSA-1971-1 : libthai - integer overflow

Tim Starling discovered that libthai, a set of Thai language support routines, is vulnerable of integer/heap overflow. This vulnerability could allow an attacker to run arbitrary code by sending a very long string. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2009-1971

CVE-2009-1971 affects Oracle Database Data Pump in 10.1.0.5, 10.2.0.3, and 11.1.0.7. Root cause and vectors are not described in the Initial Document, but the vulnerability allows remote authenticated users to affect integrity via unknown vectors. The issue is acknowledged in the Oracle October 2...

CVE-2008-1971

CVE-2008-1971 affects phShoutBox Final 1.5 and earlier. The vulnerability arises because authentication checks are performed only when a password is provided in $_POST, enabling remote attackers to elevate privileges by setting the phadmin cookie to admin.php (and, in 1.4 and earlier, the ssbadmi...

CVE-2008-1971

creationtimestamp| type| source ---|---|--- 2008-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5467...

CVE-2006-1971

CVE-2006-1971 is an XSS vulnerability in KRANKIKOM ContentBoxX, specifically in login.php where the action parameter can be exploited to inject arbitrary script/HTML. The affected component is the login form handling in ContentBoxX, with the root cause described as a cross-site scripting flaw tha...

CVE-2002-1971

The CVE-2002-1971 entry describes a vulnerability in Sourcecraft Networking_Utils 1.0 where the ping utility (networking_utils.php) can read arbitrary files via shell metacharacters in the Domain name or IP argument. Affected component: networking_utils.php in Sourcecraft Networking_Utils 1.0. Ro...

CVE-2005-1971

The CVE-2005-1971 issue concerns InteractivePHP FusionBB 0.11 Beta and earlier, where a directory traversal flaw in the language parameter allows remote attackers to include arbitrary local files by supplying ".." sequences. The underlying cause is improper validation of file paths, enabling pote...

CVE-2004-1971

The CVE-2004-1971 entry concerns PHP-Nuke Video Gallery Module 0.1 Beta 5. a vulnerability where remote attackers can cause an error message by issuing HTTP requests with invalid catid or clipid parameters, causing disclosure of the full server path. Affected component: PHP-Nuke Video Gallery Mod...

CVE-2004-1971

modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid 1 catid or 2 clipid parameter, which reveals the full path in an error message...