CVE-2012-2524

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Computer Graphics Metafile CGM file, aka "CGM File Format Memory Corruption Vulnerability."...

Microsoft Office Remote Code Execution Vulnerability (2731879)

This host is missing an important security update according to Microsoft Bulletin MS12-057. OpenVAS Vulnerability Test $Id: secpodms12-057.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Office Remote Code Execution Vulnerability 2731879 Authors: Antu Sanadi Copyright: Copyright c 2012 SecPod,...

Security Update for Microsoft Office 2007 suites (KB2687441)

A security vulnerability exists in Microsoft Office 2007 suites that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office 2007 suites (KB2596856)

A security vulnerability exists in Microsoft Office 2007 suites that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

MS12-057: Description of the security update for 2007 Office system (MSO): August 14, 2012

Describes the security update for 2007 Office system MSO, that was released on September 14, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-057. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

MS12-043: Description of the security update for XML Core Services 5.0 when it is installed together with Office 2007, Office Compatibility Pack, Office Word Viewer, Expression Web, or Expression Web 2: August 14, 2012

None None...

SuSE Update for apache2 openSUSE-SU-2012:0314-1 (apache2)

Check for the Version of apache2 OpenVAS Vulnerability Test $Id: gbsuse201203141.nasl 8253 2017-12-28 06:29:51Z teissa $ SuSE Update for apache2 openSUSE-SU-2012:0314-1 apache2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This progr...

Scientific Linux Security Update : postgresql on SL4 i386,x86_64, SL5 i386

Updated postgresql packages that fix several security issues are now available. A flaw was found in the way PostgreSQL allows authenticated users to execute security-definer functions. It was possible for an unprivileged user to execute arbitrary code with the privileges of the security-definer...

Scientific Linux Security Update : autofs on SL5.x i386/x86_64

There was a security issue with the default installed configuration of autofs version 5 whereby the entry for the 'hosts' map did not specify the 'nosuid' mount option. A local user with control of a remote nfs server could create a setuid root executable within an exported filesystem on the remo...

Scientific Linux Security Update : jdk (java) on SL3.x, SL4.x i386/x86_64

NOTE: This combination of rpm's replaces j2sdk-1.4.2 with jdk-1.5.0. So your java will change from version 1.4.2 to 1.5.0. We apologize if this causes any problems, but it needed to be done for security reasons. A flaw in the applet caching mechanism of the Java Runtime Environment JRE did not...

Scientific Linux Security Update : openssh on SL4.x, SL5.x i386/x86_64

These packages fix a low severity flaw in the way ssh handles X11 cookies when creating X11 forwarding connections. When ssh was unable to create untrusted cookie, ssh used a trusted cookie instead, possibly allowing the administrative user of a untrusted remote server, or untrusted application r...

Scientific Linux Security Update : mcstrans on SL5.x i386/x86_64

An algorithmic complexity weakness was found in the way the mcstrans daemon handled ranges of compartments in sensitivity labels. A local user could trigger this flaw causing mctransd to temporarily stop responding to other requests; a partial denial of service. CVE-2007-4570 This update also fix...

Scientific Linux Security Update : kernel for SL 5.x on i386/x86_64

CVE-2007-5966 kernel: non-root can trigger cpuidle soft lockup CVE-2009-1385 kernel: e1000cleanrxirq denial of service CVE-2009-1388 kernel: docoredump vs ptracestart deadlock CVE-2009-1389 kernel: r8169: fix crash when large packets are received CVE-2009-1895 kernel: personality: fix...

Scientific Linux Security Update : nfs-utils-lib on SL4.x i386/x86_64

Tenable Network Security discovered a stack-based buffer overflow flaw in the RPC library used by nfs-utils-lib. A remote unauthenticated attacker who can access an application linked against nfs-utils-lib could trigger this flaw and cause the application to crash. On Red Hat Enterprise Linux 4 i...

Scientific Linux Security Update : evolution on SL4.x, SL3.x i386/x86_64

A flaw was found in the way Evolution processed certain APOP authentication requests. A remote attacker could potentially acquire certain portions of a user's authentication credentials by sending certain responses when evolution-data-server attempted to authenticate against an APOP server...

Scientific Linux Security Update : xterm on SL4.x i386/x86_64

A bug was found in the way xterm packages were built that caused the pseudo-terminal device files of the xterm emulated terminals to be owned by the incorrect group. This flaw did not affect Red Hat Enterprise Linux 4 Update 4 and earlier. CVE-2007-2797 %NASLMINLEVEL 70300 C Tenable Network...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

a flaw in the signal handling on PowerPC-based systems that allowed a local user to cause a denial of service floating point corruption. CVE-2007-3107, Moderate. In addition to the security issue described above, a fix for the following has been included : - a bug that can lead to data corruption...

Scientific Linux Security Update : xorg-x11 on SL4.x i386/x86_64

A temporary file flaw was found in the way the X.Org X11 xfs font server startup script executes. A local user could modify the permissions of the file of their choosing, possibly elevating their local privileges CVE-2007-3103. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Scientific Linux Security Update : libpng on SL3.x i386/x86_64

Several flaws were discovered in the way libpng handled various PNG image chunks. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was manipulated. CVE-2007-5269 %NASLMINLEVEL 70300 C Tenable...

Scientific Linux Security Update : coolkey on SL5.x i386/x86_64

Steve Grubb discovered a flaw in the way coolkey created a temporary directory. A local attacker could perform a symlink attack and cause arbitrary files to be overwritten. CVE-2007-4129 In addition, the updated packages contain fixes for the following bugs in the CAC Smart Card support : - CAC...