104 matches found
CVE-2012-2546
The CVE-2012-2546 entry concerns a memory-use-after-free vulnerability in Microsoft Internet Explorer 9 (IE9) related to the Event Listener use-after-free vulnerability. The underlying issue is a use-after-free in IE9’s event listener handling that can allow remote attackers to execute arbitrary ...
Microsoft Internet Explorer Remote Code Execution Vulnerability (2757760)
This host is missing a critical security update according to Microsoft Bulletin MS12-063. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Debian: Security Advisory (DSA-2546-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2546-1 : freeradius - stack-based buffer overflows
Timo Warns discovered that the EAP-TLS handling of FreeRADIUS, a high-performance and highly configurable RADIUS server, is not properly performing length checks on user-supplied input before copying to a local stack buffer. As a result, an unauthenticated attacker can exploit this flaw to crash...
CVE-2011-2546
The CVE-2011-2546 issue affects Cisco SA 500 Series Security Appliances prior to firmware 2.1.19. The vulnerability is a SQL Injection in the web-based management interface that could allow an unauthenticated, remote attacker to execute arbitrary SQL commands and potentially obtain usernames and ...
USN-995-1: libMikMod vulnerabilities
It was discovered that libMikMod incorrectly handled songs with different channel counts. If a user were tricked into opening a crafted song file, an attacker could cause a denial of service. CVE-2007-6720 It was discovered that libMikMod incorrectly handled certain malformed XM files. If a user...
Debian: Security Advisory (DSA-2081-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2081-1 (libmikmod)
The remote host is missing an update to libmikmod announced via advisory DSA 2081-1. OpenVAS Vulnerability Test $Id: deb20811.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2081-1 libmikmod Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
[SECURITY] [DSA 2081-1] New libmikmod packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2081-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 01, 2010 http://www.debian.org/security/faq -...
CVE-2010-2546
Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...
Design/Logic Flaw
loaders/loadit.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of nameenv relative to nametick and namenode, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to...
CVE-2010-2546
Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...
CVE-2010-2546
The CVE-2010-2546 issue affects the libmikmod library, specifically multiple heap-based buffer overflows in loaders/load_it.c (likely in 3.1.12) that could allow remote attackers to execute arbitrary code via crafted Impulse Tracker files or instrument definitions, related to panpts, pitpts, and ...
CVE-2010-2546
Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...
CVE-2010-2971
CVE-2010-2971 concerns the libmikmod loader load_it.c, where a mismatch in handling name##env versus name##tick/name##node can cause a buffer over-read when processing Impulse Tracker files. The issue is a follow-up to CVE-2009-3995, with the CVE details noting a remote attacker could trigger the...
CVE-2010-2546
Multiple heap-based buffer overflows in loaders/loadit.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via 1 crafted samples or 2 crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and ITProcessEnvelope. NOTE: some of thes...
Debian DSA-2081-1 : libmikmod - buffer overflow
Tomas Hoger discovered that the upstream fix for CVE-2009-3995 was insufficient. This update provides a corrected package. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2081. The text...
CVE-2009-2546
Directory traversal in Advanced Electron Forum (AEF) 1.x allows remote attackers to determine whether arbitrary files exist via the avatargalfile parameter when changing an avatar, causing information disclosure through error messages. No patch or remediation is stated in the provided documents.
CVE-2008-2546
CVE-2008-2546 is a reservation duplicate of CVE-2008-1805 and is not a separate active entry; the connected records identify the real vulnerability as CVE-2008-1805. CVE-2008-1805 describes an incomplete blacklist vulnerability in Skype 3.6.0.248 and earlier before 3.8.0.139 that lets user-assist...