Scientific Linux Security Update : libvorbis on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-2663 libvorbis: Improper codec headers processing DoS, ACE An insufficient input validation flaw was found in the way libvorbis processes the codec file headers static mode headers and encoding books of the Ogg Vorbis audio file format Ogg. A remote attacker could provide a specially...

Linux kernel 2.6.x iptables '--syn'规则安全绕过漏洞

Bugtraq ID: 53733 CVE ID：CVE-2012-2663 Linux是一款开源的操作系统。 Linux Kernel iptables在某些情况下不正确处理SYN+FIN，攻击者可以发送SYN/FIN绕过所有包含--syn的访问规则，未授权创建连接。 0 Linux kernel 2.6.x 厂商解决方案 Linux ----- 用户可参考如下供应商提供的安全公告获得补丁信息：...

CVE-2011-2663

Array index error in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message...

CVE-2011-2663

CVE-2011-2663 affects Novell GroupWise Internet Agent (GWIA) in GroupWise 8.0 before HP3. A vulnerability in the calendar processing code occurs when parsing a malformed yearly RRULE in a VCALENDAR attachment, causing an array indexing/memory corruption that could allow remote code execution. Pub...

GroupWise Internet Agent < 8.0.2 HP3 Multiple Vulnerabilities

The version of Novell GroupWise Internet Agent running on the remote host is earlier than 8.0.2 HP3. Such versions are potentially affected by multiple issues : - Multiple denial of service issues exist because the application does not adequately verify user-supplied inputs. CVE-2011-2218,...

iDefense Security Advisory 09.26.11: Novell GroupWise iCal Date Invalid Array Indexing Vulnerability

iDefense Security Advisory 09.26.11 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 26, 2011 I. BACKGROUND GroupWise is Novell's messaging platform, and includes support for email, calendaring, and instant messaging. More information is available at the following website:...

CentOS Update for libvorbis CESA-2009:1219 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libvorbis CESA-2009:1219 centos5 i386

Check for the Version of libvorbis OpenVAS Vulnerability Test CentOS Update for libvorbis CESA-2009:1219 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

SuSE 11 / 11.1 Security Update : libvorbis (SAT Patch Numbers 2486 / 2487)

This update of libvorbis fixes a memory corruption while parsing OGG files. The bug is exploitable by remote attackers to cause an application crash and could probably be exploited to execute arbitrary code. The issue has been tracked as CVE-2009-2663. %NASLMINLEVEL 70300 C Tenable Network...

SuSE 10 Security Update : libvorbis (ZYPP Patch Number 7057)

This update of libvorbis fixes a memory corruption while parsing OGG files. The bug is exploitable by remote attackers to cause an application crash and could probably be exploited to execute arbitrary code. The issue has been tracked as CVE-2009-2663. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2010-2663

CVE-2010-2663 affects the Opera web browser prior to 10.60. An ended event handler that changes the SRC attribute of an AUDIO element can trigger a denial of service (application hang). The OpenVAS/Gentoo entries corroborate Opera-focused vulnerabilities with this vector and point to upgrading to...

SuSE9 Security Update : libvorbis (YOU Patch Number 12620)

This update of libvorbis fixes a memory corruption while parsing OGG files. The bug is exploitable by remote attackers to cause an application crash and could probably be exploited to execute arbitrary code. The issue has been tracked as CVE-2009-2663. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE Security Update : libvorbis (openSUSE-SU-2010:0351-1)

This update of libvorbis fixes a memory corruption while parsing OGG files. This bug was exploitable by remote attackers to cause an application crash and could probably be exploited to execute arbitrary code. CVE-2009-2663: CVSS v2 Base Score: 6.8 important AV:N/AC:M/Au:N/C:P/I:P/A:P: Resource...

openSUSE Security Update : libvorbis (openSUSE-SU-2010:0351-1)

This update of libvorbis fixes a memory corruption while parsing OGG files. This bug was exploitable by remote attackers to cause an application crash and could probably be exploited to execute arbitrary code. CVE-2009-2663: CVSS v2 Base Score: 6.8 important AV:N/AC:M/Au:N/C:P/I:P/A:P: Resource...

Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004

The remote host is missing Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004. One or more of the following components are affected: Alias Manager CoreTypes c++filt Dock Launch Services Net-SNMP Ruby SMB File Server System Configuration Tomcat VPN WebKit OpenVAS Vulnerability Test Mac OS ...

[SECURITY] [DSA 1939-1] New libvorbis packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1939-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano November 24, 2009 http://www.debian.org/security/faq -...

Code injection

Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via unknown vectors. NOTE: this might overlap CVE-2009-2663...

SUSE: Security Advisory for MozillaFirefox (SUSE-SA:2009:048)

The remote host is missing updates announced in advisory SUSE-SA:2009:048. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

SLES11: Security update for Mozilla Firefox

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: MozillaFirefox MozillaFirefox-translations gconf2 libidl mozilla-xulrunner190 mozilla-xulrunner190-gnomevfs mozilla-xulrunner190-translations orbit2 More...

Gentoo Security Advisory GLSA 200909-02 (libvorbis)

The remote host is missing updates announced in advisory GLSA 200909-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...