Microsoft Office Remote Code Execution Vulnerability (2590602)

This host is missing an important security update according to Microsoft Bulletin MS11-089. OpenVAS Vulnerability Test $Id: secpodms11-089.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Remote Code Execution Vulnerability 2590602 Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod...

RHEL 5 / 6 : icu (RHSA-2011:1815)

Updated icu packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2011-2018

CVE-2011-2018 affects multiple Windows OS kernels (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2, Windows 7 SP0/SP1). Root cause: the Windows kernel fails to initialize objects properly, enabling a local attacker to gain SYSTEM privileges via a crafted application (Windows Kernel Except...

CVE-2011-3406

CVE-2011-3406 describes a buffer overflow in Microsoft Windows Active Directory, ADAM, and AD LDS that can allow a remote authenticated attacker to execute arbitrary code by sending a crafted LDAP query. Root cause: memory initialization issue in LDAP request handling. Affected products/versions ...

Unfixed Redirect vulnerability at www.designourpepsican.com

Security researcher p0pc0rn, has submitted on 14/12/2011 a Redirect vulnerability affecting www.designourpepsican.com, which at the time of submission ranked 10839900 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently...

virt-v2v security and bug fix update

0.8.3-5 - Fix regression when converting Win7 32 bit to RHEV RHBZ738236 0.8.3-4 element 0.8.3-3 - Add missing dependency on new Sys::Virt 0.8.3-2 - Fix for CVE-2011-1773 - Document limitations wrt Windows Recovery Console 0.8.3-1 - Include missing virt-v2v.db - Rebase to upstream release 0.8.3...

Microsoft Office Remote Code Execution Vulnerability (2590602)

This host is missing an important security update according to Microsoft Bulletin MS11-089. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : chromium -- multiple vulnerabilities (68ac6266-25c3-11e1-b63a-00262d5ed8ee)

Google Chrome Releases reports : 81753 Medium CVE-2011-3903: Out-of-bounds read in regex matching. Credit to David Holloway of the Chromium development community. 95465 Low CVE-2011-3905: Out-of-bounds reads in libxml. Credit to Google Chrome Security Team Inferno. 98809 Medium CVE-2011-3906:...

CVE-2011-3905

libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2011-3915

Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF fonts...

CVE-2011-3913

Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to Range handling...

CVE-2011-3909

The Cascading Style Sheets CSS implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service memory corruption via unspecified vectors...

CVE-2011-3903

CVE-2011-3903 affects Chromium and V8 per Gentoo GLSA 201201-03 and related advisories. The issue is described as multiple vulnerabilities tied to regex handling in Chromium that could allow a context-dependent attacker to cause arbitrary code execution or a Denial of Service, with possible URL b...

CVE-2011-3906

CVE-2011-3906 affects Google Chrome/Chromium prior to 16.0.912.63, arising from the PDF parser causing an out-of-bounds read that can lead to remote denial of service. The Gentoo GLSA and related OpenVAS entries reference Chromium vulnerabilities and list a fix by upgrading to Chromium 16.0.912.7...

CVE-2011-3904

CVE-2011-3904 is a use-after-free in Chrome/Chromium bidi handling (Google Chrome before 16.0.912.63). The OpenVAS/Gentoo entries corroborate a high-severity flaw with potential DoS/impact, but explicit exploitation details are not provided in the documents. Remediation per sources: upgrade to Ch...

CVE-2011-3911

Technical details for CVE-2011-3911 are not provided in the connected documents. The initial description notes a PDF handling issue in Chrome prior to 16.0.912.63 and an out-of-bounds read; monitor for updates.

CVE-2011-3915

Technical details for CVE-2011-3915 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds.

CVE-2011-3908

CVE-2011-3908 (Google Chrome) affects Chrome versions before 16.0.912.63. The vulnerability arises from improper parsing of SVG documents, enabling a remote attacker to trigger an out-of-bounds read and cause a denial of service via unspecified vectors. According to the description, the issue is ...

CVE-2011-3913

Technical details about CVE-2011-3913 are not publicly provided in the supplied connected documents. The entries reference it among others but do not describe affected product, version, exploit, or remediation.

CVE-2011-3905

CVE-2011-3905 is a libxml2 out-of-bounds memory read vulnerability. It affects libxml2 used by Chrome before 16.0.912.63 and can be triggered by processing crafted XML, potentially crashing the application or enabling arbitrary code execution. Mitigations documented in multiple advisories (e.g., ...