[USN-1705-1] Libav vulnerabilities

========================================================================== Ubuntu Security Notice USN-1705-1 January 28, 2013 libav vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu Update for libav USN-1705-1

Check for the Version of libav OpenVAS Vulnerability Test $Id: gbubuntuUSN17051.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for libav USN-1705-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

CVE-2012-2783

CVE-2012-2783 is listed among Libav/FFmpeg vulnerabilities (Libav/FFmpeg components). The CVE entry itself notes an unspecified impact related to freeing the returned frame in libavcodec/vp56.c for FFmpeg before 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5. Connected sources describe ...

Google Chrome Multiple Vulnerabilities - August11 (MacOSX)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnaug11macosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Google Chrome Multiple Vulnerabilities - August11 MacOSX Authors: Rachana Shetty Copyright: Copyright c 2011...

CVE-2011-2783

Google Chrome (

Google Fixes 30 Bugs in Chrome, Pays $17K in Bounties

Google has fixed 30 bugs in version 13.0.782.107, the latest build of its Chrome browser, pushed to the stable channel for Windows, Mac and Linux today. 14 of the bugs are deemed high-risk, including cross-origin script injection, HTML range handling and URI handling issues. Nine of the bugs are...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0553-1)

icedtea included in java-160-openjdk was updated to version 1.8.1 which fixes two security issues : CVE-2010-2783: IcedTea 'Extended JNLP Services' arbitrary file access CVE-2010-2548: IcedTea Incomplete property access check for unsigned applications The new version also fixes many non-security...

Ubuntu: Security Advisory (USN-971-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 9.04 / 9.10 / 10.04 LTS : openjdk-6 vulnerabilities (USN-971-1)

It was discovered that the IcedTea plugin did not correctly check certain accesses. If a user or automated system were tricked into running a specially crafted Java applet, a remote attacker could read arbitrary files with user privileges, leading to a loss of privacy. CVE-2010-2548, CVE-2010-278...

CVE-2009-2783

creationtimestamp| type| source ---|---|--- 2009-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33131...

Gentoo Security Advisory GLSA 200606-21 (mozilla-thunderbird)

The remote host is missing updates announced in advisory GLSA 200606-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-2783

Multiple cross-site scripting XSS vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbitrary web script or HTML via the timestamp parameter to 1 week.php, 2 workweek.php, and 3 day.php; and 4 the horde parameter in the PATHINFO to the...

CVE-2008-2783

CVE-2008-2783 describes multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, including Groupware Webmail Edition and Kronolith. The flaws allow remote attackers to inject arbitrary script or HTML via the timestamp parameter to week.php, workweek.php, and day.php, and via the ho...

CVE-2008-2783

Multiple cross-site scripting XSS vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow remote attackers to inject arbitrary web script or HTML via the timestamp parameter to 1 week.php, 2 workweek.php, and 3 day.php; and 4 the horde parameter in the PATHINFO to the...

CVE-2008-2783

creationtimestamp| type| source ---|---|--- 2008-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31839 2008-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31840 2008-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31838...

Debian Security Advisory DSA 1134-1 (mozilla-thunderbird)

The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 1134-1. Several security related problems have been discovered in Mozilla which are also present in Mozilla Thunderbird. For details, please visit the referenced security advisories. OpenVAS Vulnerability Test...

Debian Security Advisory DSA 1120-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 1120-1. For details on the issues addressed with this update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb11201.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...

Debian: Security Advisory (DSA-1118)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 5.04 / 5.10 : mozilla-thunderbird vulnerabilities (USN-297-3)

USN-297-1 fixed several vulnerabilities in Thunderbird for the Ubuntu 6.06 LTS release. This update provides the corresponding fixes for Ubuntu 5.04 and Ubuntu 5.10. For reference, these are the details of the original USN : Jonas Sicking discovered that under some circumstances persisted XUL...

Ubuntu 5.04 / 5.10 : mozilla vulnerabilities (USN-323-1)

Jonas Sicking discovered that under some circumstances persisted XUL attributes are associated with the wrong URL. A malicious website could exploit this to execute arbitrary code with the privileges of the user. MFSA 2006-35, CVE-2006-2775 Paul Nickerson discovered that content-defined setters o...