239 matches found
Ubuntu: Security Advisory (USN-1513-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : libexif vulnerabilities (USN-1513-1)
Mateusz Jurczyk discovered that libexif incorrectly parsed certain malformed EXIF tags. If a user or automated system were tricked into processing a specially crafted image file, an attacker could cause libexif to crash, leading to a denial of service, or possibly obtain sensitive information...
SuSE 10 Security Update : libexif (ZYPP Patch Number 8224)
Various overflows and other security related bugs in libexif were found by the Google Security team and fixed by the libexif developers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...
Mandriva Update for libexif MDVSA-2012:106 (libexif)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
BELL-CVE-2012-2814 CVE-2012-2814 does not affect BellSoft software
Bulletin has no description...
CVE-2012-2814
CVE-2012-2814 is a buffer overflow in libexif 0.6.20 (exif_entry_format_value in exif-entry.c) that allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted EXIF tags. Connected advisories confirm this flaw across packages (libexif) and note that fixes w...
APPLE-SA-2011-10-12-4 Safari 5.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...
CVE-2011-2814
CVE-2011-2814 affects WebKit as used in Apple iTunes before 10.5. It allows a man-in-the-middle attacker to cause arbitrary code execution or a denial of service via vectors related to iTunes Store browsing, tied to memory corruption and application crashes. The provided documents do not specify ...
CVE-2010-2814
CVE-2010-2814 affects Cisco ASA 5500 Series (and PIX 500) TLS implementation. A sequence of crafted TLS packets can trigger a denial of service, causing the device to reload (unavailability). Reported as Bug CSCtf37506. Affected software and fixed releases per sources: 7.2.x before 7.2(5) → upgra...
CVE-2010-2814
Unspecified vulnerability in the Transport Layer Security TLS implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.2 before 7.25, 8.0 before 8.05.15, 8.1 before 8.12.44, 8.2 before 8.22.17, and 8.3 before 8.31.6 and Cisco PIX Security Appliances 500 series...
CVE-2009-2814
Cross-site scripting XSS vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing data that does not use UTF-8 encoding...
CVE-2009-2814
CVE-2009-2814 affects Apple Mac OS X 10.5.x Wiki Server: a cross-site scripting vulnerability occurs when the search request contains non-UTF-8 data, allowing remote attackers to inject script/HTML in Wiki Server. Exploitation details are not provided beyond the XSS description in the sources, bu...
CVE-2009-2814
Cross-site scripting XSS vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing data that does not use UTF-8 encoding...
Mac OS X Multiple Vulnerabilities (Security Update 2009-005)
The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...
CVE-2008-2814
CVE-2008-2814 is a documented XSS vulnerability affecting WallCity-Server Shoutcast Admin Panel 2.0. The issue is triggered via the username parameter to the login interface, allowing remote attackers to inject arbitrary web script or HTML into victims’ browsers. The available data confirm the vu...
CVE-2007-2814
The vulnerability CVE-2007-2814 affects the Pegasus ImagN’ ActiveX control IMW32O40.OCX (version 4.00.041). The issue comprises multiple stack-based buffer overflows that could allow remote code execution. Exploitation vectors include a long FileName parameter and several functions such as BeginR...
CVE-2006-2814
CVE-2006-2814 is an iShopCart vulnerability describing multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c. A remote attacker can trigger arbitrary code execution by sending a large amount of data containing the string "Submit" in an sslinvoi...
CVE-2005-2814
The CVE-2005-2814 entry concerns FlatNuke 2.5.6 with a Cross-site scripting (XSS) flaw. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the usr parameter in a vis_reg operation to index.php. Affected component: the vis_reg flow in index.php; root cause: unsani...