About the security content of iCloud for Windows 6.2.1

About the security content of iCloud for Windows 6.2.1 This document describes the security content of iCloud for Windows 6.2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

Debian DSA-3516-1 : wireshark - security update

Multiple vulnerabilities were discovered in the dissectors/parsers for DNP, RSL, LLRP, GSM A-bis OML, ASN 1 BER which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 3516-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3516-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 13, 2016 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3516-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : wireshark (openSUSE-2016-302)

Wireshark was updated to 1.12.10, fixing a number issues in protocol dissectors that could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a capture file, specifically : - CVE-2016-2523: DNP dissector...

Updated wireshark packages fix security vulnerabilities

Updated wireshark packages fix security vulnerabilities: ASN.1 BER dissector crash CVE-2016-2522. DNP dissector infinite loop CVE-2016-2523. X.509AF dissector crash CVE-2016-2524. HTTP/2 dissector crash CVE-2016-2525. HiQnet dissector crash CVE-2016-2526. 3GPP TS 32.423 Trace file parser crash...

CVE-2016-2530

The dissctrslipaccessmsg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 mishandles the case of an unrecognized TLV type, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via...

Out-of-bounds

Off-by-one error in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet that triggers a 0xff tag value, a different...

CVE-2016-2530

Publicly available documents in this set do not reveal further technical details (affected components, root cause, or remediation) for CVE-2016-2530. Monitor for official updates and vendor advisories.

CVE-2015-2530

CVE-2015-2530 affects Windows Journal across Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012, RT, and Windows 10. The vulnerability enables remote code execution via a crafted .jnt file (Windows Journal RCE Vulnerability), a distinct issue from CVE-2015-2513 and CVE-2...

MS15-098: Vulnerabilities in Windows Journal Could Allow Remote Code Execution (3089669)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities in Windows Journal : - Multiple remote code execution vulnerabilities exist in Windows Journal due to improper handling of specially crafted Journal .jnt files. A remote, unauthenticated...

Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2761226)

This host is missing a critical security update according to Microsoft Bulletin MS12-075. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-2530

CVE-2012-2530 is a local privilege-escalation vulnerability in the Windows kernel component win32k.sys (kernel-mode drivers). The issue is described as a use-after-free condition in win32k.sys that affects multiple Windows platforms, including Windows XP SP2/SP3, Windows Server 2003 SP2, Windows ...

Microsoft Windows Kernel 'Win32k.sys' CVE-2012-2530 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a use-after-free error. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete...

Debian Security Advisory DSA 2530-1 (rssh)

The remote host is missing an update to rssh announced via advisory DSA 2530-1. OpenVAS Vulnerability Test $Id: deb25301.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2530-1 rssh Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2530-1 : rssh - shell command injection

Henrik Erkkonen discovered that rssh, a restricted shell for SSH, does not properly restrict shell access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2530. The text itself is copyrigh...

CVE-2011-2530

CVE-2011-2530 affects Rockwell Automation RSLinx Classic prior to 2.58, bundled with the EDS Hardware Installation Tool (RSHWare.exe 1.0.5.1 and earlier). A buffer overflow in RSEds.dll when parsing improperly formatted .eds files allows a user‑assisted remote attacker to crash the application or...

CVE-2010-2530

CVE-2010-2530 is described across multiple sources as multiple integer signedness errors in netsmb’s smb_subr.c (kernel, netsmb module). Affects NetBSD 5.0.2 and earlier, FreeBSD, and Apple macOS. The issue allows local attackers to cause a denial of service (panic) by providing a negative size v...

CVE-2009-2530

CVE-2009-2530 corresponds to an Internet Explorer memory corruption vulnerability (Uninitialized Memory Corruption) that could allow remote code execution when a user views a specially crafted Web page. Connected documents show Microsoft’s MS09-054 cumulative security update for Internet Explorer...

ZDI-09-070: Microsoft Internet Explorer Event Object Type Double-Free Vulnerability

ZDI-09-070: Microsoft Internet Explorer Event Object Type Double-Free Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-070 October 13, 2009 -- CVE ID: CVE-2009-2530 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 6 Microsoft Internet Explorer 7...