CVE-2014-2441

CVE-2014-2441 affects Oracle VM VirtualBox (Graphics Driver WDDM) on Windows guests. Affected versions are VirtualBox before 4.1.32, 4.2.24, and 4.3.10. Local privilege escalation could impact confidentiality, integrity, and availability. Remediation per the entry is to upgrade to the fixed relea...

CVE-2013-2441

Technical details about CVE-2013-2441 are not publicly available in the provided documents. Monitor for updates from Oracle CPU advisories and CVE references.

Debian Security Advisory DSA 2441-1 (gnutls26)

The remote host is missing an update to gnutls26 announced via advisory DSA 2441-1. OpenVAS Vulnerability Test $Id: deb24411.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2441-1 gnutls26 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-2441

CVE-2012-2441 affects RuggedCom Rugged Operating System (ROS) versions prior to 3.3. A factory account password is derived from the MAC Address in the device banner, enabling remote attackers to gain access by authenticating via SSH or HTTPS. Related entry CVE-2012-1803 covers similar behavior en...

CVE-2012-2441

RuggedCom Rugged Operating System ROS before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 SSH or 2 HTTPS session, a...

Debian DSA-2441-1 : gnutls26 - missing bounds check

Matthew Hall discovered that GNUTLS does not properly handle truncated GenericBlockCipher structures nested inside TLS records, leading to crashes in applications using the GNUTLS library. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Gentoo Security Advisory GLSA 201201-19 (acroread)

The remote host is missing updates announced in advisory GLSA 201201-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7833)

Acrobat reader was updated to version 9.4.6 to fix several security issues. CVE-2011-1353 / CVE-2011-2431 / CVE-2011-2432 / CVE-2011-2433 / CVE-2011-2434 / CVE-2011-2435 / CVE-2011-2436 / CVE-2011-2437 / CVE-2011-2438 / CVE-2011-2439 / CVE-2011-2440 / CVE-2011-2441 / CVE-2011-2442 %NASLMINLEVEL...

SuSE Update for acroread SUSE-SA:2011:044

Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2011:044 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

acroread (critical)

acrobat reader was updated to version 9.4.6 to fix several security issues CVE-2011-1353, CVE-2011-2431, CVE-2011-2432, CVE-2011-2433, CVE-2011-2434, CVE-2011-2435, CVE-2011-2436, CVE-2011-2437, CVE-2011-2438, CVE-2011-2439, CVE-2011-2440, CVE-2011-2441, CVE-2011-2442...

CVE-2011-2441

Multiple stack-based buffer overflows in CoolType.dll in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2441

CVE-2011-2441 affects Adobe Reader/Acrobat: multiple stack-based buffer overflows in CoolType.dll allow remote code execution via unspecified vectors. Affected products include Adobe Reader/Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1. Public sources in connected docs confir...

SuSE 11.1 Security Update : webkit (SAT Patch Number 4765)

Webkit version 1.2.7 fixes several security issues. CVE-2010-2441 / CVE-2010-2901 / CVE-2010-4042 / CVE-2010-4492 / CVE-2010-4493 / CVE-2010-4578 / CVE-2011-0482 / CVE-2011-0778 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : libwebkit (openSUSE-SU-2011:0482-1)

This version upgrade of webkit to 1.2.7 fixes the following bugs : - CVE-2010-2441: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N: Permissions, Privileges, and Access Control CWE-264 - CVE-2010-2901: CVSS v2 Base Score: 3.7 AV:L/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 - CVE-2010-4042:...

CVE-2010-2441

WebKit does not properly restrict focus changes, which allows remote attackers to read keystrokes via "cross-domain IFRAME gadgets," a different vulnerability than CVE-2010-1126, CVE-2010-1422, and CVE-2010-2295...

CVE-2010-2441

CVE-2010-2441 in WebKit: improper restrictions on focus changes enables reading keystrokes via cross-domain IFRAME gadgets. The issue is addressed by openSUSE/libwebkit updates to WebKit 1.2.7 (examples: openSUSE-SU-2011:0024/0458-1 patches for libwebkit) which list CVE-2010-2441 among fixed bugs...

CVE-2009-2441

The CVE-2009-2441 entry describes a Cross-site Scripting (XSS) vulnerability in Online Guestbook Pro 5.1, specifically in the ogp_show.php script, where an attacker can inject arbitrary web script or HTML via the entry parameter. The affected software is Online Guestbook Pro 5.1; the vulnerable c...

CVE-2009-2441

creationtimestamp| type| source ---|---|--- 2009-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34803...

CVE-2008-2441

CVE-2008-2441 affects Cisco Secure ACS (CS ACS) for Windows and related ACS products. The vulnerability is triggered by specially crafted EAP-Response packets where the length field exceeds the actual packet length, causing memory/processing errors in CSRadius and CSAuth. This can lead to denial ...

CVE-2007-2441

CVE-2007-2441 affects Caucho Resin Professional 3.1.0 and earlier for Windows. The vulnerability allows remote attackers to obtain the system path via specific URLs related to deploying web applications or displaying .xtp files, i.e., a path-disclosure/vector issue in Resin 3.1.x. The connected s...