72 matches found
CVE-2010-2062
Integer underflow in the realgetrdtchunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447, allows remote attackers to execute arbitrary code via a crafted length value in an RDT chunk header...
CVE-2009-5027
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-2062. Reason: This candidate is a reservation duplicate of CVE-2010-2062. Notes: All CVE users should reference CVE-2010-2062 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2010-2062
CVE-2010-2062 describes an integer underflow in the real_get_rdt_chunk function (real.c) used by VLC media player and MPlayer. The vulnerability affects VLC before 1.0.1 and MPlayer before r29447, where a crafted length value in an RDT chunk header can cause a remote attacker to execute arbitrary...
CVE-2009-5027
CVE-2009-5027 is rejected/not used; reference CVE-2010-2062 instead.
Amazon Linux AMI : libX11 / libXcursor,libXfixes,libXi,libXrandr,libXrender,libXres,libXt,libXv,libXvMC,libXxf86dga,libXxf86vm,libdmx,xorg-x11-proto-devel (ALAS-2014-452)
Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially...
CentOS 6 : libX11 / libXcursor / libXext / libXfixes / libXi / libXinerama / libXp / libXrandr / etc (CESA-2014:1436)
Updated X11 client libraries packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...
CVE-2014-2062
CVE-2014-2062 affects Jenkins before 1.551 and the LTS release before 1.532.2. The vulnerability is that deleting a user does not invalidate their API token, allowing remote authenticated users to retain access via the token. The consolidated data set confirms the affected versions and the token-...
Ubuntu: Security Advisory (USN-2062-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for libXp FEDORA-2013-12083
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : libXp-1.0.2-1.fc19 (2013-12083)
Update to 1.0.2 which gives us a few years of general packaging cleanups but more importantly the fixes for CVE-2013-2062. There are virtually no code changes other than that. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...
SuSE 11.2 / 11.3 Security Update : xorg-x11-libXp (SAT Patch Numbers 7844 / 7938)
This update of xorg-x11-libXp fixes several integer overflow issues. Bug 815451/821668 CVE-2013-2062 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...
Ubuntu: Security Advisory (USN-1861-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 12.04 LTS / 12.10 / 13.04 : libxp vulnerability (USN-1861-1)
Ilja van Sprundel discovered multiple security issues in various X.org libraries and components. An attacker could use these issues to cause applications to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding...
Debian DSA-2685-1 : libxp - several vulnerabilities
Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to...
[SECURITY] [DSA 2685-1] libxp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2685-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2685-1 (libxp - several vulnerabilities)
Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to...
CVE-2012-2062
CVE-2012-2062 refers to an open redirect vulnerability in the Drupal module Redirecting click bouncer . The connected Drupal advisory confirms the root cause: the module does not validate or constrain the URL to redirect to, enabling an open redirect that could be abused for phishing or user redi...
Mandriva Update for cacti MDVSA-2012:010 (cacti)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Debian: Security Advisory (DSA-2062-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
