Debian DSA-2741-1 : chromium-browser - several vulnerabilities

Several vulnerabilities have been discovered in the Chromium web browser. - CVE-2013-2887 The chrome 29 development team found various issues from internal fuzzing, audits, and other studies. - CVE-2013-2900 Krystian Bigaj discovered a file handling path sanitization issue. - CVE-2013-2901 Alex...

Debian: Security Advisory (DSA-2741-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2741

The CVE-2013-2741 issue affects the WordPress BackupBuddy plugin (importbuddy.php) in versions including 1.3.4, 2.1.4, 2.2.25, 2.2.28 and 2.2.4. The vulnerability arises because importbuddy.php does not require authentication, enabling remote attackers to obtain sensitive information or to overwr...

CVE-2013-2741

importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enabled, which allows remote attackers to obtain sensitive information, or overwrite or delete files, via vectors involving a 1 direct request, 2 step=1 request,...

CVE-2012-2741

CVE-2012-2741 affects phplist (phpList) before version 2.10.18, where a Cross-site Scripting (XSS) vulnerability exists in public_html/lists/admin/ via the num parameter in a reconcileusers action. The underlying issue is unsanitized input that allows arbitrary HTML/script injection. This could e...

CVE-2011-2741

CVE-2011-2741 affects EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP1 Patch 2/3, SP2/SP2 Patch1, and SP3. The issue concerns Device Recovery and Device Identification, where certain data elements from end-user devices may allow bypassing security restrictions for both previously non...

Microsoft Windows OTF格式驱动多个本地权限提升漏洞（MS10-078）

BUGTRAQ ID: 43778,43779 CVE ID: CVE-2010-2740,CVE-2010-2741 Microsoft Windows是微软发布的非常流行的操作系统。 在处理特制OpenType字体时，OTF格式驱动未正确执行整数计算，且未能正确的分配内存。本地登录的用户可以通过运行特制的应用程序来利用这些漏洞，导致执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP Pro x64版SP2 Microsoft Windows Server 2003 SP2 厂商补丁： Microsoft ---------...

CVE-2010-2741

CVE-2010-2741 is a local elevation-of-privilege vulnerability in the Windows OpenType Font (OTF) format driver. OpenType fonts processed by the OTF driver could trigger improper integer calculations during parsing, enabling kernel-mode code execution when a specially crafted font is opened locall...

MS10-078: Vulnerabilities in the OpenType Font (OTF) Format Driver Could Allow Elevation of Privilege (2279986)

The remote Windows host contains a version of the OpenType Font OTF Format Driver that is affected by two vulnerabilities : - The driver does not properly allocate memory when parsing a specially crafted font, which could allow a local attacker to run arbitrary code in kernel mode. CVE-2010-2740 ...

OpenType Font (OTF) Format Driver Privilege Elevation Vulnerabilities (2279986)

This host is missing a critical security update according to Microsoft Bulletin MS10-078. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows OpenType Font (OTF) Format Driver CVE-2010-2741 Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Attackers may exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts...

SLES10: Security update for liblcms,liblcms-devel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for liblcms, liblcms-devel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES9: Security update for liblcms, liblcms-devel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021001...

SuSE9 Security Update : liblcms,liblcms-devel (YOU Patch Number 11955)

Various security issues in liblcms have been found that occur while parsing ICC profiles in JPEG images. A remote attacker can exploit these bugs to execute arbitrary commands or cause denial-of-service by tricking the user to view a specially crafted JPEG image. This issue has been tracked by...

CVE-2009-2741

The CVE-2009-2741 entry concerns IBM WebSphere Business Events 6.1 and 6.2 with an unspecified vulnerability in the wberuntimeear application’s test servlet that allows remote code execution via unknown vectors. The public records do not disclose the exact vulnerable component, root cause, exploi...

Buffer overflow

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...

CVE-2008-5316

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...

SuSE 10 Security Update : liblcms,liblcms-devel (ZYPP Patch Number 4626)

This update addresses security bugs in liblcms that occurred while parsing ICC profiles in JPEG images. CVE-2007-2741 Remote attackers can exploit this bug to execute arbitrary commands or cause denial-of-service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

openSUSE 10 Security Update : liblcms (liblcms-4629)

This update addresses security bugs in liblcms that occurred while parsing ICC profiles in JPEG images. CVE-2007-2741 Remote attackers can exploit this bug to execute arbitrary commands or cause denial-of-service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...