Adobe Acrobat and Reader CVE-2011-2097 Remote Buffer Overflow Vulnerability

Description Adobe Acrobat and Reader are prone to a remote buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Adobe Reader and Acrobat versions prior to 10.1 are affected. Technologies Affected Ado...

SuSE 11 / 11.1 Security Update : Apache 2 (SAT Patch Numbers 2880 / 2881)

PHP was updated to version 5.2.14 to fix serveral security issues : - CVE-2010-1860 - CVE-2010-1862 - CVE-2010-1864 - CVE-2010-1914 - CVE-2010-1915 - CVE-2010-1917 - CVE-2010-2093 - CVE-2010-2094 - CVE-2010-2097 - CVE-2010-2100 - CVE-2010-2101 - CVE-2010-2190 - CVE-2010-2191 - CVE-2010-2225 -...

Debian: Security Advisory (DSA-2097-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2097-1 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 2097-1. OpenVAS Vulnerability Test $Id: deb20971.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2097-1 phpmyadmin Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0678-1)

PHP was updated to version 5.2.14 to fix several security issues : - CVE-2010-1860 - CVE-2010-1862 - CVE-2010-1864 - CVE-2010-1914 - CVE-2010-1915 - CVE-2010-1917 - CVE-2010-2093 - CVE-2010-2094 - CVE-2010-2097 - CVE-2010-2100 - CVE-2010-2101 - CVE-2010-2190 - CVE-2010-2191 - CVE-2010-2225 -...

openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0599-1)

PHP was updated to version 5.3.3 to fix serveral security issues. CVE-2010-0397, CVE-2010-1860, CVE-2010-1862, CVE-2010-1864, CVE-2010-1866, CVE-2010-1914, CVE-2010-1915, CVE-2010-1917, CVE-2010-2093, CVE-2010-2094, CVE-2010-2097, CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191,...

PHP 5.2 < 5.2.14 Multiple Vulnerabilities

According to its banner, the version of PHP 5.2 installed on the remote host is older than 5.2.14. Such versions may be affected by several security issues : - An error exists when processing invalid XML-RPC requests that can lead to a NULL pointer dereference. bug 51288 CVE-2010-0397 - An error...

CVE-2010-2097

The 1 iconvmimedecode, 2 iconvsubstr, and 3 iconvmimeencode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the call time pass by...

CVE-2010-2097

CVE-2010-2097 affects PHP 5.2.x (up to 5.2.13) and 5.3.x (up to 5.3.2). The vulnerability involves context-dependent information disclosure via iconv_mime_decode, iconv_substr, and iconv_mime_encode, tied to the call-time pass-by-reference behavior, enabling memory contents leakage. Affected comp...

CVE-2009-2097

CVE-2009-2097 describes an SQL injection in Zoki Soft Zoki Catalog (aka Smart Catalog). The vulnerability affects the PHP file system/application/controllers/catalog.php, where unsafely handled input in the search_text parameter enables remote attackers to execute arbitrary SQL commands. This is ...

Gentoo Security Advisory GLSA 200508-08 (xpdf kpdf gpdf)

The remote host is missing updates announced in advisory GLSA 200508-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-2097

CVE-2008-2097 is a buffer overflow/privilege-escalation issue in the OpenWSMan management service used by VMware ESX/ESXi 3.5. The OpenWSMan component on ESX/ESXi 3.5 is vulnerable to privilege escalation via an invalid Content-Length, requiring local login credentials (non-privileged ESX/Virtual...

openSUSE 10 Security Update : openwsman (openwsman-5241)

This update provides a fix for the included shttpd web-server to patch a buffer overflow vulnerability in the HTTP request parser. This bug can only be exploited by authenticated users to execute arbitrary code with the privileges of the openwsman/shttp daemon. CVE-2008-2097 %NASLMINLEVEL 70300 C...

CVE-2007-2097

OpenConcept Back-End CMS 0.4.7 is affected by CVE-2007-2097, a set of PHP remote file inclusion vulnerabilities. The flaw allows an attacker to execute arbitrary PHP code by providing a URL in the includes_path parameter to multiple PHP files in htdocs/site-admin/ (and related files in htdocs/). ...

[SECURITY] [DSA 1136-1] New gpdf packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1136-1 [email protected] http://www.debian.org/security/ Martin Schulze August 2nd, 2006 http://www.debian.org/security/faq -...

CentOS 4 : kdegraphics (CESA-2005:671)

Updated kdegraphics packages that resolve a security issue in kpdf are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment including kpdf, a pdf file viewer....

CVE-2006-2097

CVE-2006-2097 concerns Invision Power Board (IPB) 2.1.4, where SQL injection is possible in func_msg.php via the from_contact field in a private message. The vulnerability could allow remote attackers to modify or extract data by injecting SQL commands. Documentation confirms the affected compone...

[SECURITY] [DSA 936-1] New libextractor packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 936-1 [email protected] http://www.debian.org/security/ Martin Schulze January 11th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 936-1] New libextractor packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 936-1 [email protected] http://www.debian.org/security/ Martin Schulze January 11th, 2006 http://www.debian.org/security/faq -...

Fedora Core 4 : cups-1.1.23-15.1 (2005-732)

These updated packages fix a problem handling PDF files that could have security implications CVE-2005-2097. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...