SuSE 11.2 Security Update : xorg-x11-libs (SAT Patch Number 7846)

This update of xorg-x11-libs fixes several integer and buffer overflow issues. bnc815451, bnc821663 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, In...

CVE-2013-1990

CVE-2013-1990 is a documented flaw in X.Org X11 libXvMC (and related X11 client libraries) involving multiple integer overflow vulnerabilities in functions XvMCListSurfaceTypes and XvMCListSubpictureTypes that can lead to heap-based buffer overflows. The attached advisories (e.g., ALAS-2014-452, ...

Ubuntu 12.04 LTS / 12.10 / 13.04 : libxvmc vulnerabilities (USN-1868-1)

Ilja van Sprundel discovered multiple security issues in various X.org libraries and components. An attacker could use these issues to cause applications to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding...

Fedora Update for libXvMC FEDORA-2013-9117

Check for the Version of libXvMC OpenVAS Vulnerability Test Fedora Update for libXvMC FEDORA-2013-9117 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libXvMC FEDORA-2013-9117

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : libXvMC-1.0.7-6.20130524gite9415ddef.fc18 (2013-9117)

Update to latest git to fix the following CVEs: CVE-2013-1999 CVE-2013-1990 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

[SECURITY] [DSA 2675-1] libxvmc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2675-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2675-1] libxvmc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2675-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2675-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1990

CVE-2012-1990 describes multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb (before 3.0.1) and Kerwin (before 6.0.1). The issues allow remote attackers to inject arbitrary web script or HTML via (1) the evtvariablename parameter in an evts.xml action to kw.dll, (2) un...

Kerweb / Kerwin Cross Site Scripting

Kerweb/Kerwin XSS vulnerabilities Severity: Moderate Vendor: Schneider Electrics Versions Affected: Kerweb...

MDEF

1990 MDEF also known as Garfield and its variants emerged on the malware scene in 1990 to infect application and system files in Macintosh 128K and 512K, 512KE, Mac Plus, SE, SE/30, II, IIx, IIcx, IIci and IIfx computers. Coded by an Ithaca, N.Y. teenager and identified at nearby Cornell...

CVE-2011-1990

CVE-2011-1990 affects Microsoft Excel 2007 SP2, Excel in Office 2007 SP2, Excel Viewer SP2, Office Compatibility Pack SP2, and Excel Services on Office SharePoint Server 2007 SP2. The vulnerability arises from improper validation of the sign of an unspecified array index, allowing remote code exe...

Microsoft Excel Array Index CVE-2011-1990 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers could exploit this issue by enticing victims to open a maliciously crafted Excel file. Successful exploits will allow attackers to execute arbitrary code with the privileges of the user running the applicatio...

Microsoft Excel MS-OGRAPH Code Execution (MS11-072; CVE-2011-1990)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to improper parsing of certain records in Microsoft Excel while handling malformed Excel files. A remote attacker could trigger the vulnerability by enticing an affected target user to open a...

CVE-2010-1990

Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service excessive application launches via an HTML document with many IFRA...

CVE-2010-1990

CVE-2010-1990 affects Mozilla Firefox 3.6.x, 3.5.x, 3.0.19 and earlier, and SeaMonkey. The issue arises when an HTML document contains many IFRAME elements with a src of mailto:, causing the mail application to be launched repeatedly and leading to a denial of service via excessive application la...

openSUSE Security Update : compiz-fusion-plugins-main (compiz-fusion-plugins-main-1990)

The expo plugin in Compiz Fusion allowed local users with physical access to bypass the screen-saver by just dragging it aside. CVE-2008-6514: CVSS v2 Base Score: 6.2 %NASLMINLEVEL 70300 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502...

Debian DSA-1990-1 : trac-git - shell command injection

Stefan Goebel discovered that the Debian version of trac-git, the Git add-on for the Trac issue tracking system, contains a flaw which enables attackers to execute code on the web server running trac-git by sending crafted HTTP queries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA-1990-2] New trac-git package fixes regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1990-2 [email protected] http://www.debian.org/security/ Stefan Fritsch February 04, 2010 http://www.debian.org/security/faq -...