Ubuntu 12.10 : linux vulnerability (USN-1996-1)

Dan Carpenter discovered an information leak in the HP Smart Aray and Compaq SMART2 disk-array driver in the Linux kernel. A local user could exploit this flaw to obtain sensitive information from kernel memory. Note that Tenable Network Security has extracted the preceding description block...

SuSE 11.3 Security Update : xorg-x11-libs (SAT Patch Number 7944)

This update of xorg-x11-libs fixes several integer and buffer overflow issues. Bug 815451/821663 CVE-2013-1984 / CVE-2013-1985 / CVE-2013-1986 / CVE-2013-1988 / CVE-2013-1990 / CVE-2013-1991 / CVE-2013-1992 / CVE-2013-1995 / CVE-2013-1996 / CVE-2013-1998 / CVE-2013-1999 / CVE-2013-2000 /...

SuSE 11.2 Security Update : xorg-x11-libs (SAT Patch Number 7846)

This update of xorg-x11-libs fixes several integer and buffer overflow issues. bnc815451, bnc821663 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, In...

CVE-2013-1996

CVE-2013-1996 affects X.org libFS 1.0.4 and earlier. The vulnerability arises from an unexpected sign extension in FSOpenServer, enabling allocation of insufficient memory and a buffer overflow. Public-material patches exist (e.g., openSUSE/SUSE updates; Red Hat/Solaris/NASL entries) that fix the...

Fedora Update for libFS FEDORA-2013-9140

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"lib...

Fedora Update for libFS FEDORA-2013-9140

Check for the Version of libFS OpenVAS Vulnerability Test Fedora Update for libFS FEDORA-2013-9140 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora 18 : libFS-1.0.4-6.20130524git26dc23446.fc18 (2013-9140)

Update to latest git to fix the following CVEs: CVE-2013-1996 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

[SECURITY] [DSA 2687-1] libfs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2687-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

CVE-2013-1996

X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function...

CVE-2012-1996

CVE-2012-1996 concerns HP Systems Insight Manager (SIM) prior to version 7.0. The vulnerability is described as an unspecified issue that allows remote attackers to modify data via unknown vectors. The available connected documents confirm the affected product and version range, but do not disclo...

Microsoft Internet Explorer Option Element Use-After-Free Vulnerability

This Metasploit module exploits a vulnerability in Microsoft Internet Explorer. A memory corruption may occur when the Option cache isn't updated properly, which allows other JavaScript methods to access a deleted Option element, and results in code execution under the context of the user. This...

CVE-2011-1996

creationtimestamp| type| source ---|---|--- 2013-01-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24020 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms11081option.rb 2025-02-06 03:13:40+00:00| seen...

Microsoft Internet Explorer - Option Element Use-After-Free (MS11-081) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Microsoft Interne...

Microsoft Internet Explorer Option Element Use-After-Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Microsoft Interne...

ZDI-11-287 : Internet Explorer Select Element Cache Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-287 : Internet Explorer Select Element Cache Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-287 October 15, 2011 - -- CVE ID: CVE-2011-1996 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors...

CVE-2011-1996

Microsoft Internet Explorer 6–8 is affected by CVE-2011-1996 (Option Element Use-After-Free), a memory corruption vulnerability triggered when IE accesses objects that have been deleted. Remote code execution could be achieved by convincing a user to view a crafted webpage. The issue is documente...

Microsoft Internet Explorer Multiple Vulnerabilities (2586448)

This host is missing a critical security update according to Microsoft Bulletin MS11-081. OpenVAS Vulnerability Test $Id: secpodms11-081.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2586448 Authors: Veerendra G.G Copyright: Copyright c 2011 SecPod...

Internet Explorer Option Element Memory Corruption (MS11-081; CVE-2011-1996)

A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer attempts to access objects that have not been initialized or have been deleted. A remote attacker could trigger this vulnerability by enticing an...

Webster HTTP Server - GET Buffer Overflow (Metasploit)

$Id: websterhttp.rb 10887 2010-11-03 12:19:19Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

CVE-2010-1996

CVE-2010-1996 involves multiple cross-site scripting (XSS) vulnerabilities in TomatoCMS (index.php) prior to 2.0.5. The flaws allow remote authenticated users with certain creation privileges to inject arbitrary script/HTML via (1) content with /admin/poll/add PATH_INFO, (2) meta with /admin/cate...