CVE-2017-2485

CVE-2017-2485 affects multiple Apple platforms via the Security component: a crafted X.509 certificate can cause remote code execution or memory corruption leading to an app crash. Affected products include iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue...

HT-MP3Player 1.0 HT3 File Parsing Buffer Overflow (CVE-2009-2485)

A buffer overflow vulnerability exists in HT-MP3Player 1.0. The vulnerability exists because the affected software fails to perform sufficient boundary checks on user-supplied input when processing .ht3 files. A successful exploitation could lead to execution of arbitrary code on the targeted...

CVE-2016-2485

CVE-2016-2485 affects Android 4.x/5.x/6.x where libstagefright in mediaserver fails to validate OMX buffer sizes for GSM and G711 codecs, enabling privilege escalation via a crafted app (Signature or SignatureOrSystem). Affected Android versions include 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...

CVE-2015-2491

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2485 and CVE-2015-2541...

Memory corruption

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2485 and CVE-2015-2491...

CVE-2015-2485

CVE-2015-2485 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling memory corruption via a crafted web site. The vulnerability is described as a memory corruption issue potentially allowing remote code execution or DoS. Connected data references to MS15-095 (security update) as a...

CVE-2015-2541

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2485 and CVE-2015-2491...

Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2485)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer handle element identifiers since it fails to detect a specific failure case which can be abused to corrupt arbitrary memory. A remote attacker can exploit...

Ubuntu 10.04 LTS / 12.04 LTS : eglibc vulnerability (USN-2485-1) (GHOST)

It was discovered that a buffer overflow existed in the gethostbyname and gethostbyname2 functions in the GNU C Library. An attacker could use this issue to execute arbitrary code or cause an application crash, resulting in a denial of service. Note that Tenable Network Security has extracted the...

CVE-2014-2485

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by multiple vulnerabilities reported in the July 2014 CPU, including issues in the Siebel Travel & Transportation component (Diary) and Siebel UI Framework components (Open_UI and Portal Framework). The Nessus entry indicates these vulnerabilities al...

Oracle Linux 6 : pidgin (ELSA-2012-1102)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1102 advisory. - Add patch for CVE-2011-2485 RH bug 837561. - Add patch for CVE-2012-1178 RH bug 837560. - Add patch for CVE-2012-2318 RH bug 837560. - Add patch for...

Wireshark Multiple Dissector Multiple DoS Vulnerabilities - March 13 (Windows)

This host is installed with Wireshark and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdosvulnmar13win.nasl 6093 2017-05-10 09:03:18Z teissa $ Wireshark Multiple Dissector Multiple DoS Vulnerabilities - March 13 Windows Authors: Arun Kalla...

[ MDVSA-2013:020 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:020 http://www.mandriva.com/en/support/security/ Package : wireshark Date : March 8, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in Wireshark:...

CVE-2013-2485

The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2013-2485

Wireshark CVE-2013-2485 affects the FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6. A malformed packet can cause a denial of service via an infinite loop. Patches exist in the referenced advisories to fix the issue (Wireshark 1.6.14 and 1.8.6).

CVE-2013-2485

The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via a malformed packet...

SuSE 11.1 / 11.2 Security Update : gtk2 (SAT Patch Numbers 6389 / 6390)

The following issue has been fixed : - Specially crafted GIF and XBM files could have crashed gtk2 CVE-2012-2370 / CVE-2011-2485 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

Slackware Advisory SSA:2011-178-01 pidgin

The remote host is missing an update as announced via advisory SSA:2011-178-01. OpenVAS Vulnerability Test $Id: esoftslkssa201117801.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-178-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Gentoo Security Advisory GLSA 201206-11 (Pidgin)

The remote host is missing updates announced in advisory GLSA 201206-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

pidgin security update

2.7.9-5.el6.2 - Add patch for CVE-2011-2485 RH bug 837561. 2.7.9-5.el6.1 - Add patch for CVE-2012-1178 RH bug 837560. - Add patch for CVE-2012-2318 RH bug 837560. - Add patch for CVE-2012-3374 RH bug 837560. 2.7.9-5.el6 - Add patch for CVE-2011-4602 RH bug 766453. 2.7.9-4.el6 - Add patch for...