CVE-2015-2779

CVE-2015-2779 affects the Quassel IRC client’s message splitting functionality. A crafted message can trigger unchecked stack growth/recursion, causing remote denial of service due to a stack consumption vulnerability present in versions before the 0.12-rc1 release. Multiple connected advisories ...

CVE-2015-2779

Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service uncontrolled recursion via a crafted massage...

openSUSE Security Update : quassel (openSUSE-2015-294)

The IRC client quassel was updated to fix two security issues. The following vulnerabilities were fixed : - quassel could crash when receiving an overlength CTCP query containing only multibyte characters bnc924930 CVE-2015-2778 - quassel could incorrectly split a message in the middle of a...

CVE-2014-2779

CVE-2014-2779 affects the Microsoft Malware Protection Engine (MMPE) prior to version 1.1.10701.0. A crafted file can cause the MMPE to stop monitoring, leading to a denial of service (system hang). The vulnerability is exploitable remotely over the network. Mitigation is to update MMPE to versio...

Debian DSA-2779-1 : libxml2 - denial of service

Aki Helin of OUSPG discovered many out-of-bounds read issues in libxml2, the GNOME project's XML parser library, which can lead to denial of service issues when handling XML documents that end abruptly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

CVE-2013-2779

CVE-2013-2779 affects Cisco IOS XE on 1000‑series ASR: MLRE flaw that allows remote DoS via fragmented IPv6 MVPN/MVPNv6 packets. Vulnerable in IOS XE 3.4 before 3.4.5S and 3.5–3.7 before 3.7.1S; fix released in 3.4.5S and 3.7.1S/series guidance per advisory. Affected products and specific compone...

DEBIAN-CVE-2012-2779

Unspecified vulnerability in the decodeframe function in libavcodec/indeo5.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an invalid "gop header" and decoding in a "half initialized context."...

CVE-2012-2779

CVE-2012-2779 affects FFmpeg/Libav indeo5 decoding: the issue is in indeo5decode path where decoding could run with a half-initialized context if the GOP header is invalid, leading to potential memory/logic errors. Affected: FFmpeg up to 0.11 and Libav up to 0.8.x prior to their fixes; the docume...

CVE-2011-2779

The CVE-2011-2779 entry concerns HP ArcSight Connector Appliance (Windows Event Log SmartConnector) prior to v6.1, where exported reports can have world-writable permissions. This allows local users to alter or delete log data by modifying the file. The flaw is due to improper file permissions in...

CVE-2010-2779

This CVE (CVE-2010-2779) affects Novell GroupWise 8.x WebAccess prior to 8.0 SP2. The issue is a cross-site scripting (XSS) vulnerability in WebAccess when handling HTML messages, related to “replies.” The underlying flaw allows remote attackers to inject arbitrary client-side script into the use...

CVE-2010-2779

Cross-site scripting XSS vulnerability in WebAccess in Novell GroupWise 8.x before 8.0 SP2 allows remote attackers to inject arbitrary web script or HTML via a crafted message, related to "replies."...

CVE-2009-2779

creationtimestamp| type| source ---|---|--- 2010-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12346...

Mozilla Firefox DOMNodeRemoved Memory Corruption (CVE-2006-2779)

The Firefox web browser is an application designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so forth. The browser is capable of interpreting various HTML specifications, as well as client side scripting models and languages. A memory...

CVE-2009-2779

CVE-2009-2779 affects AJ Matrix DNA, specifically the web entry point in index.php . The vulnerability arises in the productdetail action where an attacker can supply a crafted id parameter to trigger an SQL injection, enabling remote execution of arbitrary SQL commands. The issue is confirmed ac...

Gentoo Security Advisory GLSA 200606-21 (mozilla-thunderbird)

The remote host is missing updates announced in advisory GLSA 200606-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-2779

Technical details for CVE-2008-2779 are not publicly available in the provided documents. No explicit affected products, versions, exploit info, or fixes are given. Monitor for updates.

Debian Security Advisory DSA 1120-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 1120-1. For details on the issues addressed with this update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb11201.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...

Debian Security Advisory DSA 1160-2 (mozilla)

The remote host is missing an update to mozilla announced via advisory DSA 1160-2. The latest security updates of Mozilla introduced a regression that led to a disfunctional attachment panel which warrants a correction to fix this issue. For reference please find below the original advisory text:...

Debian: Security Advisory (DSA-1159-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1118)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...