103 matches found
CVE-2011-2873
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...
CVE-2011-2873
WebKit (as used in Apple iOS before 5.1 and iTunes before 10.6) is vulnerable to remote code execution or memory corruption via a crafted web site. The issue, described for CVE-2011-2873, is a WebKit memory-corruption/DoS vulnerability distinct from other WebKit issues. Connected documents do not...
CVE-2010-2873
Adobe Shockwave Player is affected by CVE-2010-2873 and related CVEs due to improper validation of offset values in rcsL RIFF chunks within Director files (.DIR/.DCR). This leads to heap memory corruption and can allow remote code execution or a denial of service when a crafted movie is processed...
Security update available for Shockwave Player
Security update available for Shockwave Player Release date: August 24, 2010 Vulnerability identifier: APSB10-20 CVE number:CVE-2010-2863, CVE-2010-2864, CVE-2010-2865, CVE-2010-2866, CVE-2010-2867, CVE-2010-2868, CVE-2010-2869, CVE-2010-2870, CVE-2010-2871, CVE-2010-2872, CVE-2010-2873,...
ZDI-10-162: Adobe Shockwave Director rcsL Chunk Remote Code Execution Vulnerability
ZDI-10-162: Adobe Shockwave Director rcsL Chunk Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-162 August 24, 2010 -- CVE ID: CVE-2010-2873 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player --...
CVE-2009-2873
Cisco IOS Software CVE-2009-2873 affects IOS 12.0–12.4 when IP-based tunnels and Cisco Express Forwarding are enabled. Malformed packets can trigger a DoS, causing a device reload. Root cause: processing of certain tunnel/CEF traffic leads to reload; attack vector is remote. Remediation: Cisco-id...
Fedora Core 9 FEDORA-2009-2873 (drupal-cck)
The remote host is missing an update to drupal-cck announced via advisory FEDORA-2009-2873. OpenVAS Vulnerability Test $Id: fcore20092873.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2873 drupal-cck Authors: Thomas Reinke Copyright: Copyright c...
Fedora Core 9 FEDORA-2009-2873 (drupal-cck)
The remote host is missing an update to drupal-cck announced via advisory FEDORA-2009-2873. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Fedora 9 : drupal-cck-6.x.2.2-1.fc9 (2009-2873)
Fixes DRUPAL-SA-CONTRIB-2009-013 - XSS issue: http://drupal.org/node/406520 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...
CVE-2008-2873
The CVE-2008-2873 issue affects sHibby sHop versions 2.2 and earlier. The vulnerability arises from storing sensitive data under the web root with insufficient access control, enabling remote attackers to retrieve the database via a direct request to Db/urun.mdb. Documents consistently describe t...
CentOS 4 / 5 : spamassassin (CESA-2007:0492)
Updated spamassassin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SpamAssassin provides a way to reduce unsolicited commercial email spam from incomin...
[Full-disclosure] rPSA-2007-0119-1 spamassassin
rPath Security Advisory: 2007-0119-1 Published: 2007-06-13 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Denial of Service Updated Versions: spamassassin=/conary.rpath.com@rpl:devel//1/3.2.1-0.1-1 References: https://vulners.com/cve/CVE-2007-2873...
Fedora Core 5 : spamassassin-3.1.9-1.fc5.1 (2007-584)
Local symlink vulnerability. Fedora is not vulnerable in any default or common configurations. Read upstream's announcement for details. http://spamassassin.apache.org/advisories/CVE-2007-2873.txt Note that Tenable Network Security has extracted the preceding description block directly from the...
Moderate: spamassassin security update
3.1.9-1 - 3.1.9 CVE-2007-2873...
CVE-2007-2873
SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service corrupt arbitrary files via a symlink attack on a file that is used by spamd...
CVE-2007-2873
CVE-2007-2873 arises in SpamAssassin 3.1.x, 3.2.0, and 3.2.1 (before 20070611) when SpamAssassin runs as root in unusual configurations using vpopmail or virtual users. A local attacker can exploit a symlink to cause a denial of service by corrupting arbitrary files used by spamd. The available c...
CVE-2006-2873
Cross-site scripting XSS vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML via the il parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2873
CVE-2006-2873 describes a Cross‑site Scripting (XSS) vulnerability in the Enigma Haber 4.2 web application, specifically in the file hava.asp, exploitable via the il parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The description notes that provenance ...
[Full-disclosure] MDKSA-2005:235 - Updated kernel packages fix numerous vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:235 http://www.mandriva.com/security/ Package : kernel Date : December 21, 2005 Affected: 2006.0 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in th...
CVE-2005-2873
Technical details for CVE-2005-2873 are not provided in the connected documents. Available sources reference related CVEs and kernel updates but do not specify affected product/version, root cause, or remediation for this CVE.