CVE-2010-2193

CA PSFormX and WebScan ActiveX controls are affected by CVE-2010-2193, with multiple reported remote code execution vulnerabilities caused by input verification weaknesses. The CVE is associated with CA Global Advisor-distributed controls, which CA retired in May 2009. OpenVAS/NESSUS entries desc...

CA20100608-01: Security Notice for CA PSFormX and WebScan ActiveX Controls

-----BEGIN PGP SIGNED MESSAGE----- CA20100608-01: Security Notice for CA PSFormX and WebScan ActiveX Controls Issued: June 8, 2010 CA Technologies support is alerting users to multiple security risks with the PSFormX and WebScan ActiveX controls previously available from the CA Global Security...

Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003

The remote host is missing Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

ACD Systems ACDSee Products XPM File Handling Buffer Overflow (CVE-2007-2193)

ACDSee is an image viewer software for Windows developed by ACD Systems. Besides the usual thumbnail viewing of folders and file type conversion, key features of ACDSee include slideshow presentations, CD/DVD burning, HTML gallery creation, image folder syncing and editing/indexing of image...

ACDSee XPM File Section Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ACDSee XPM File...

CVE-2009-2193

CVE-2009-2193 is the Apple Mac OS X kernel buffer overflow in AppleTalk handling that can allow remote code execution or system crash via a crafted AppleTalk response packet. OpenVAS/Nessus entries for Mac OS X 10.5.8 Update / Security Update 2009-003 document the patching of this and related fla...

Mac OS X 10.5.x < 10.5.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.8. Mac OS X 10.5.8 contains security fixes for the following products : - bzip2 - CFNetwork - ColorSync - CoreTypes - Dock - Image RAW - ImageIO - Kernel - launchd - Login Window - MobileMe - Networking - XQuery C Tenab...

RedHat Update for libtiff RHSA-2008:0848-01

Check for the Version of libtiff OpenVAS Vulnerability Test RedHat Update for libtiff RHSA-2008:0848-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

ACDSee XPM File Section Buffer Overflow

This module exploits a buffer overflow in ACDSee 9.0. When viewing a malicious XPM file with the ACDSee product, a remote attacker could overflow a buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Gentoo Security Advisory GLSA 200607-03 (tiff)

The remote host is missing updates announced in advisory GLSA 200607-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

libtiff security update

CentOS Errata and Security Advisory CESA-2008:0848 Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages conta...

RHEL 4 : libtiff (RHSA-2008:0848)

Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged...

CVE-2008-2193

CVE-2008-2193 describes a PHP remote file inclusion vulnerability in the ScorpNews 2.0 project, specifically affecting the example.php script. The underlying issue is that the site parameter can be supplied by an attacker to include and execute arbitrary PHP code from a remote location, enabling ...

CVE-2008-2193

creationtimestamp| type| source ---|---|--- 2008-05-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5539...

Fedora Core 5 : libtiff-3.8.2-1.fc5 (2006-952)

Tue Sep 5 2006 Jindrich Novy - 3.8.2-1 - update to 3.8.2 - fix CVE-2006-2193, tiff2pdf buffer overflow 194362 - fix typo in man page for tiffset 186297 - use %?dist, fix Requires, BuildRoot - Mon Jul 24 2006 Matthias Clasen - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462...

CVE-2006-2193

CVE-2006-2193 concerns a buffer overflow in the t2p_write_pdf_string function of libtiff (versions

[SECURITY] [DSA 1091-1] New TIFF packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1091-1 [email protected] http://www.debian.org/security/ Martin Schulze June 8th, 2006 http://www.debian.org/security/faq -...

CVE-2002-2193

CVE-2002-2193 describes a cross-site scripting (XSS) vulnerability in Mojo Mail 2.7, specifically in the mojo.cgi component. The flaw allows remote attackers to inject arbitrary web script via the email parameter. Documented impact is limited to partial integrity impact and does not indicate user...

CVE-2005-2193

SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being...

CVE-2005-2193

CVE-2005-2193 affects PunBB up to version 1.2.5, where the profile.php:temp parameter is not initialized/sanitized before being used in a database query, enabling remote SQL injection. The root cause is improper handling of the temp array, allowing attacker-controlled input to influence SQL state...