RedHat Update for thunderbird RHSA-2012:0715-01

Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2012:0715-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Microsoft Windows OLE Object File Handling Remote Code Execution(CVE-2011-3400)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

CentOS 5 / 6 : thunderbird (CESA-2012:0715)

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Fedora 15 : qemu-0.14.0-9.fc15 (2012-8604)

CVE-2011-1750 virtio-blk: heap buffer overflow bz 698906, bz 698911 - CVE-2011-2527 set groups properly for -runas bz 720773, bz 720784 - CVE-2012-0029 e1000 buffer overflow bz 783984, bz 772075 - virtio-blk: refuse SGIO requests with scsi=off bz 770135 Note that Tenable Network Security has...

Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE:...

CVE-2011-2911

Integer overflow in the CSoundFile::ReadWav function in src/loadwav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow...

CVE-2011-2914

Off-by-one error in the CSoundFile::ReadDSM function in src/loaddms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted DSM file with a large number of samples...

CVE-2011-2913

Off-by-one error in the CSoundFile::ReadAMS function in src/loadams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service stack memory corruption and possibly execute arbitrary code via a crafted AMS file with a large number of samples...

CVE-2011-4964

...

CVE-2011-2911

CVE-2011-2911 is a memory- safety vulnerability in the libmodplug library: an integer/heap-based overflow in CSoundFile::ReadWav (src/load_wav.cpp) before 0.8.8.4 can be triggered by a crafted WAV file, allowing remote denial of service and potentially arbitrary code execution. The issue affects ...

CVE-2011-2913

CVE-2011-2913 is an off-by-one error in the CSoundFile::ReadAMS function (src/load_ams.cpp) in libmodplug before 0.8.8.4 that can be triggered by a crafted AMS file with a large number of samples, enabling denial of service (stack memory corruption) and potentially arbitrary code execution. Publi...

CVE-2011-2914

CVE-2011-2914 affects libmodplug’s DSM file handling: Off-by-one in CSoundFile::ReadDSM (src/load_dms.cpp) before 0.8.8.4 may allow a remote attacker to cause memory corruption, leading to denial of service and potential arbitrary code execution via crafted DSM files with many samples. Public rep...

CVE-2011-2914

Off-by-one error in the CSoundFile::ReadDSM function in src/loaddms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted DSM file with a large number of samples...

CVE-2011-1761

CVE-2011-1761 affects libmodplug prior to 0.8.8.3, with multiple stack-based buffer overflows in the ABC loader paths (abc_new_macro and abc_new_umacro) in src/load_abc.cpp. The vulnerability allows remote attackers to crash the application and potentially execute arbitrary code via a crafted ABC...

CVE-2011-2912

CVE-2011-2912: In libmodplug, the CSoundFile::ReadS3M() implementation in src/load_s3m.cpp before version 0.8.8.4 is affected by a stack-based buffer overflow when processing crafted S3M files with an invalid offset. This can lead to denial of service and may allow arbitrary code execution. Other...

CVE-2011-2915

CVE-2011-2915 describes an off-by-one error in libmodplug’s CSoundFile::ReadAMS2 (src/load_ams.cpp) prior to 0.8.8.4, which can be triggered by a crafted AMS file with many instruments to cause memory corruption, potentially enabling code execution or denial of service. Public references discuss ...

CVE-2011-1761

Multiple stack-based buffer overflows in the 1 abcnewmacro and 2 abcnewumacro functions in src/loadabc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ABC file. NOTE: some of these details are obtained fr...

CVE-2011-4964

CVE-2011-4964 is a duplicate of CVE-2012-2667 and is thus not the active vulnerability entry. Connected documents show concrete details for CVE-2012-2667 related to the same software family: php-symfony-symfony. The Fedora advisories (FEDORA-2012-8911, -8966, -8985) and OpenVAS/Nessus entries rep...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2012:0710 Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CV...