Google Chrome Multiple Vulnerabilities - Sep12 (Mac OS X-01)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep12macosx01.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - Sep12 Mac OS X-01 Authors: Madhuri D Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities - Sep12 (Windows-01)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep12win01.nasl 5888 2017-04-07 09:01:53Z teissa $ Google Chrome Multiple Vulnerabilities - Sep12 Windows-01 Authors: Madhuri D Copyright: Copyright c 2012...

FreeBSD : chromium -- multiple vulnerabilities (5bae2ab4-0820-11e2-be5f-00262d5ed8ee)

Google Chrome Releases reports : 143439 High CVE-2012-2889: UXSS in frame handling. Credit to Sergey Glazunov. 143437 High CVE-2012-2886: UXSS in v8 bindings. Credit to Sergey Glazunov. 139814 High CVE-2012-2881: DOM tree corruption with plug-ins. Credit to Chamal de Silva. 135432 High...

CVE-2012-2879

CVE-2012-2879 affects Chromium/Google Chrome prior to version 22.0.1229.79, where crafting a document could trigger DOM topology corruption leading to a crash/DoS. Connected sources reference Chromium/openSUSE advisories noting multiple vulnerabilities and confirm a patch/upstream fix in the Chro...

CVE-2011-2879

Google Chrome before 14.0.835.202 does not properly consider object lifetimes and thread safety during the handling of audio nodes, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2011-2879

Removed by vendor...

CVE-2011-2879

CVE-2011-2879 affects Google Chrome older than 14.0.835.202. The root cause is improper handling of object lifetimes and thread safety during audio node processing, allowing remote attackers to cause a denial of service or potentially other unspecified impact via unknown vectors. Public reference...

SuSE 11.1 Security Update : iSCSI (SAT Patch Number 2879)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

CVE-2010-2879

Multiple integer overflows in the allocator in the TextXtra.x32 module in Adobe Shockwave Player before 11.5.8.612 allow remote attackers to cause a denial of service heap memory corruption or execute arbitrary code via a crafted 1 element count or 2 element size value in a file...

CVE-2010-2879

Adobe Shockwave Player contains a CVE-2010-2879 vulnerability: an integer overflow in the TextXtra.x32 allocator can cause heap memory corruption, enabling remote code execution or a denial of service. Affected product/version: Shockwave Player before 11.5.8.612. Root cause: faulty heap allocatio...

Security update available for Shockwave Player

Security update available for Shockwave Player Release date: August 24, 2010 Vulnerability identifier: APSB10-20 CVE number:CVE-2010-2863, CVE-2010-2864, CVE-2010-2865, CVE-2010-2866, CVE-2010-2867, CVE-2010-2868, CVE-2010-2869, CVE-2010-2870, CVE-2010-2871, CVE-2010-2872, CVE-2010-2873,...

CVE-2009-2879

CVE-2009-2879 describes a heap-based buffer overflow in atas32.dll used by the Cisco WebEx WRF Player. Affected versions include Windows 26.x before 26.49.32 (T26SP49EP32) and 27.x before 27.10.x (T27SP10); macOS/Linux 26.x before 26.49.35 and 27.x before 27.11.8. The vulnerability allows remote ...

CVE-2008-2879

Benja CMS 0.1 is affected by an authentication bypass vulnerability: remote attackers can access the admin/ area without credentials and add or delete a menu. The issue is that admin access does not require authentication, enabling modification of menu items. Root cause is insufficient access con...

CVE-2007-2879

Cross-site scripting XSS vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter...

CVE-2007-2879

Cross-site scripting XSS vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter...

CVE-2007-2879

CVE-2007-2879 is an XSS vulnerability in the GNUTurk Portal System 3G (mods.php) that allows remote attackers to inject arbitrary web script or HTML through the month parameter. The underlying issue is unsanitized input in mods.php, enabling script execution in a victim’s browser and partial inte...

CVE-2006-2879

The CVE-2006-2879 entry concerns Alex News-Engine (≤1.5.0): a SQL injection in newscomments.php exploitable via the newsid parameter. This allows remote attackers to run arbitrary SQL commands. No remediation details are provided in the connected documents; risk and exploit specifics are not elab...