CVE-2013-2027

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors...

CVE-2013-2027

CVE-2013-2027 affects Jython 2.2.1, where class cache files are created with permissions from the current umask, allowing local attackers to bypass access restrictions. The IBM advisory notes potential arbitrary code execution or information disclosure and recommends upgrading to jython-standalon...

openSUSE Security Update : jython (openSUSE-2015-139)

jython was updated to fix one security issue. This security issue was fixed : - CVE-2013-2027: Creates executables class files with wrong permissions %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

OracleVM 2.1 : elinks (OVMSA-2009-0030)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix 235411 - CVE-2007-2027 - elinks tries to load .po files from non-absolute path - fix 523258 - CVE-2008-7224 - entitycache static array buffer overflow %NASLMINLEVEL 70300 C Tenable Network Securit...

Adobe Photoshop Tiff File RLE Compression Buffer Overflow - Ver2 (CVE-2012-2027)

A buffer overflow vulnerability has been reported in Adobe Photoshop. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Updated egroupware package fixes security vulnerability

eGroupware prior to 1.8.006.20140217 is vulnerable to remote file deletion and possible remote code execution due to user input being passed to PHP's unserialize method CVE-2014-2027...

Oracle Linux 5 : elinks (ELSA-2009-1471)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-1471 advisory. - fix 235411 - CVE-2007-2027 - elinks tries to load .po files from non-absolute path Tenable has extracted the preceding description block directly fro...

Scientific Linux Security Update : elinks on SL4.x, SL5.x i386/x86_64

CVE-2007-2027 elinks tries to load .po files from a non-absolute path CVE-2008-7224 elinks: entitycache static array buffer overflow off-by-one An off-by-one buffer overflow flaw was discovered in the way ELinks handled its internal cache of string representations for HTML special entities. A...

Adobe Photoshop < CS5 / CS5.1 Multiple Arbitrary Code Execution Vulnerabilities (APSB12-11)

The version of Adobe Photoshop installed on the remote Windows host is prior to CS5 12.0.5 or CS5.1 12.1.1. It is, therefore, multiple arbitrary code execution vulnerabilities : - Multiple heap-based buffer overflow conditions exist due to a failure to properly sanitize user-supplied input when...

CVE-2012-2027

CVE-2012-2027 concerns Adobe Photoshop CS5/CS5.1 where the TIFF image handling contains use-after-free and related buffer overflow weaknesses. The vulnerable components are in the TIFF processing paths (and related image handling routines) that could be triggered by opening a specially crafted TI...

CentOS Update for elinks CESA-2009:1471 centos4 i386

Check for the Version of elinks OpenVAS Vulnerability Test CentOS Update for elinks CESA-2009:1471 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CVE-2010-2027

Mathematica 7, when running on Linux, allows local users to overwrite arbitrary files via a symlink attack on 1 files within /tmp/MathLink/ or 2 /tmp/fonts$$.conf...

CVE-2010-2027

CVE-2010-2027 affects Mathematica 7 on Linux. The issue is a local vulnerability where a symlink attack can cause arbitrary file overwriting via targets under /tmp/MathLink/ or /tmp/fonts$$.conf, enabling a local attacker to modify files with potentially partial integrity impact and no confidenti...

Debian Security Advisory DSA 2027-1 (xulrunner)

The remote host is missing an update to xulrunner announced via advisory DSA 2027-1. OpenVAS Vulnerability Test $Id: deb20271.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2027-1 xulrunner Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2027-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firefox nsTreeSelection实现释放后使用漏洞

CVE ID: CVE-2010-0175 Firefox是一款流行的开源WEB浏览器。 Firefox处理nsTreeSelection元素的特殊事件时存在释放后使用漏洞。在执行select事件时，Firefox未经检查元素之前是否已被释放便进行了访问，这可能导致执行任意代码。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x Mozilla Thunderbird 3.0.4 Mozilla SeaMonkey 2.0.4 临时解决方法： 禁用JavaScript。 厂商补丁： Debian ------...

RHEL 4 / 5 : elinks (RHSA-2009:1471)

An updated elinks package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. ELinks is a text-based Web browser. ELinks does not display any images, but it does...

Apple Safari Multiple Vulnerabilities June-09 (Windows) - I

This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun091.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Multiple Vulnerabilities June-09 Windows - I Authors: Sharath S Copyright: Copyright c...

CVE-2009-2027

Summary (CVE-2009-2027): Apple Safari on Windows before version 4.0 contains a local-privilege-escalation flaw in the Windows installer. Checking a box that triggers immediate application launch after installation (related to an unspecified compression method) can allow local users to gain privil...

Gentoo Security Advisory GLSA 200706-03 (elinks)

The remote host is missing updates announced in advisory GLSA 200706-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...