CVE-2011-2295

CVE-2011-2295 affects Oracle Solaris 8, 9, 10 and 11 Express. A local user can exploit a flaw in the USB driver by presenting a malformed USB configuration descriptor, triggering a kernel stack overflow in EHCI and potentially enabling arbitrary code execution (as described in the advisory/NGS di...

Gentoo Security Advisory GLSA 201006-02 (camlimages)

The remote host is missing updates announced in advisory GLSA 201006-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201006-02 (camlimages)

The remote host is missing updates announced in advisory GLSA 201006-02. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Google Chrome 'WebKit' Multiple Vulnerabilities (Linux) - Sep 10

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnlin01sep10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome 'WebKit' Multiple Vulnerabilities Linux - Sep 10 Authors: Sooraj KS Copyright: Copyright c...

Google Chrome 'WebKit' Multiple Vulnerabilities (Windows) - June 10

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnwinjun10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome 'WebKit' Multiple Vulnerabilities Windows - June 10 Authors: Madhuri D Updated By: Sooraj KS...

CVE-2010-2295

page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE:...

CVE-2010-2295

page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE:...

CVE-2010-2295

CVE-2010-2295 affects WebKit/WebCore’s EventHandler.cpp in WebKit used by Google Chrome before 5.0.375.70. A change of the focused frame during keydown dispatch could allow a user‑assisted attacker to redirect keystrokes via a crafted HTML document (rdar 7018610). Impact is user‑driven keystroke ...

CVE-2010-2295

Removed by vendor...

CamlImages: User-assisted execution of arbitrary code

Background CamlImages is an image processing library for Objective Caml. Description Tielei Wang reported multiple integer overflows, possibly leading to heap-based buffer overflows in the 1 readpngfile and readpngfileasrgb24 functions, when processing a PNG image CVE-2009-2295 and 2 gifread.c an...

Debian DSA-1832-1 : camlimages - integer overflow

Tielei Wang discovered that CamlImages, an open source image processing library, suffers from several integer overflows which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Apple QuickTime MOV File JVTCompEncodeFrame Heap Overflow (CVE-2007-2295)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the supported video format is the ITU-T H.264 standard, also known as MPEG-4 Part 10 or Advanced Video...

Mandrake Security Advisory MDVSA-2009:286 (ocaml-camlimages)

The remote host is missing an update to ocaml-camlimages announced via advisory MDVSA-2009:286. OpenVAS Vulnerability Test $Id: mdksa2009286.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:286 ocaml-camlimages Authors: Thomas Reinke Copyright:...

Fedora Core 10 FEDORA-2009-7491 (ocaml-camlimages)

The remote host is missing an update to ocaml-camlimages announced via advisory FEDORA-2009-7491. OpenVAS Vulnerability Test $Id: fcore20097491.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7491 ocaml-camlimages Authors: Thomas Reinke Copyright:...

Fedora Core 10 FEDORA-2009-7491 (ocaml-camlimages)

The remote host is missing an update to ocaml-camlimages announced via advisory FEDORA-2009-7491. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

Fedora Core 11 FEDORA-2009-7494 (ocaml-camlimages)

The remote host is missing an update to ocaml-camlimages announced via advisory FEDORA-2009-7494. OpenVAS Vulnerability Test $Id: fcore20097494.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7494 ocaml-camlimages Authors: Thomas Reinke Copyright:...

Integer overflow

Multiple integer overflows in CamlImages 2.2 might allow context-dependent attackers to execute arbitrary code via images containing large width and height values that trigger a heap-based buffer overflow, related to 1 crafted GIF files gifread.c and 2 crafted JPEG files jpegread.c, a different...

Ubuntu USN-801-1 (tiff)

The remote host is missing an update to tiff announced via advisory USN-801-1. OpenVAS Vulnerability Test $Id: ubuntu8011.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8011.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-801-1 tiff Authors: Thomas Reinke...

[SECURITY] [DSA 1832-1] New camlimages packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1832-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 13, 2009 http://www.debian.org/security/faq -...

CVE-2009-2295

Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large width and height values that trigger a heap-based buffer overflow in the 1 readpngfile or 2 readpngfileasrgb24 function...