Google Chrome Multiple Vulnerabilities - Sep12 (Mac OS X-01)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep12macosx01.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - Sep12 Mac OS X-01 Authors: Madhuri D Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities - Sep12 (Windows-01)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep12win01.nasl 5888 2017-04-07 09:01:53Z teissa $ Google Chrome Multiple Vulnerabilities - Sep12 Windows-01 Authors: Madhuri D Copyright: Copyright c 2012...

FreeBSD : chromium -- multiple vulnerabilities (5bae2ab4-0820-11e2-be5f-00262d5ed8ee)

Google Chrome Releases reports : 143439 High CVE-2012-2889: UXSS in frame handling. Credit to Sergey Glazunov. 143437 High CVE-2012-2886: UXSS in v8 bindings. Credit to Sergey Glazunov. 139814 High CVE-2012-2881: DOM tree corruption with plug-ins. Credit to Chamal de Silva. 135432 High...

CVE-2012-2882

CVE-2012-2882 concerns FFmpeg used by Google Chrome prior to 22.0.1229.79 failing to handle OGG containers, enabling remote denial of service (via a wild pointer) and possibly other unspecified impacts. Public references indicate Chromium/Chromium-based browser updates fixed multiple security fla...

Citrix Access Gateway NESPA ActiveX Control

Added: 09/13/2011 CVE: CVE-2011-2882 BID: 48676 OSVDB: 74191 Background Citrix Access Gateway is an application remote-access solution. Problem The Citrix Access Gateway installs an ActiveX plug-in on the user's browser. Plug-in versions 8.1-67.7, 9.0-70.5, and 9.1-96.4 are vulnerable to a stack...

CVE-2011-2882

creationtimestamp| type| source ---|---|--- 2011-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17762 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/citrixgatewayactx.rb 2025-02-06 03:13:40+00:00|...

Citrix Gateway ActiveX Control Stack Based Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits $Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information o...

Citrix Gateway - ActiveX Control Stack Buffer Overflow (Metasploit)

$Id: citrixgatewayactx.rb 13670 2011-08-31 00:15:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2011-2882

Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allows remote attackers to execute arbitrary code via crafted HTTP header data...

CVE-2011-2882

CVE-2011-2882 pertains to a stack-based buffer overflow in the Citrix Access Gateway Plug-in for Windows ActiveX control (nsepa.ocx). Affected plug-in versions: 8.1-67.7, 9.0-70.5, and 9.1-96.4. The vulnerability occurs when processing certain HTTP header data, allowing remote code execution in t...

Fedora 14 : drupal-cck-6.x.2.8-1.fc14 (2010-15665)

Contains fix for DRUPAL-SA-CONTRIB-2010-088. http://drupal.org/node/880736 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...

CVE-2010-2882

Summary of CVE-2010-2882 (Adobe Shockwave Player) : Affected software is Shockwave Player for Windows and macOS (versions 11.5.7.609 and older). The vulnerability stems from how DIRAPI.dll parses .dir media files, leading to a memory corruption condition that can cause remote denial of service or...

Security update available for Shockwave Player

Security update available for Shockwave Player Release date: August 24, 2010 Vulnerability identifier: APSB10-20 CVE number:CVE-2010-2863, CVE-2010-2864, CVE-2010-2865, CVE-2010-2866, CVE-2010-2867, CVE-2010-2868, CVE-2010-2869, CVE-2010-2870, CVE-2010-2871, CVE-2010-2872, CVE-2010-2873,...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2882

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2882...

CVE-2009-2882

Multiple cross-site scripting XSS vulnerabilities in PG MatchMaking allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 browseladies.php and 2 browsemen.php, the 3 gender parameter to search.php, and the 4 id parameter to services.php...

CVE-2009-2882

CVE-2009-2882 affects PG MatchMaking with multiple XSS flaws allowing remote injection via parameters: show on browse_ladies.php and browse_men.php; gender on search.php; id on services.php. These are documented as cross-site scripting vulnerabilities with a base CVSS v2 score of 4.3 (Medium). Th...

CVE-2009-2882

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33106 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33108 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33107 2009-06-24...

CVE-2008-2882

upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified other impact via a direct request...

CVE-2008-2882

CVE-2008-2882 affects the web application component upgrade.asp in sHibby sHop 2.2 and earlier . The vulnerability arises because the upgrade action does not require administrative authentication, enabling a remote attacker to update a file (via a direct request) and potentially cause other impac...

Solaris 9 (x86) : 117468-20

SunOS 5.9x86: NFS patch. Date this patch was last updated by Sun : Mar/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...