[SECURITY] [DSA 3929-1] libsoup2.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3929-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 10, 2017 https://www.debian.org/security/faq -...

CVE-2017-2885

A stack-based buffer overflow flaw was discovered within the HTTP processing of libsoup. A remote attacker could exploit this flaw to cause a crash or, potentially, execute arbitrary code by sending a specially crafted HTTP request to a server using the libsoup HTTP server functionality or by...

SUSE-SU-2017:2130-1 Security update for libsoup

This update for libsoup fixes the following issues: - A bug in the HTTP Chunked Encoding code has been fixed that could have been exploited by attackers to cause a stack-based buffer overflow in client or server code running libsoup bsc1052916, CVE-2017-2885...

[ASA-201708-5] libsoup: arbitrary code execution

Arch Linux Security Advisory ASA-201708-5 ========================================= Severity: Critical Date : 2017-08-10 CVE-ID : CVE-2017-2885 Package : libsoup Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-376 Summary ======= The package libsoup before...

CVE-2015-2885

Lens Peek-a-View has a password of 2601hx for the backdoor admin account, a password of user for the backdoor user account, and a password of guest for the backdoor guest account...

CVE-2015-2885

Lens Peek-a-View is affected by an elevation of privilege / backdoor access vulnerability due to hard-coded backdoor credentials: admin (password 2601hx), user (password user), and guest (password guest). This condition potentially allows unauthorized access to the device, depending on how backdo...

Google Chrome Security Updates (stable-channel-update_30-2013-07) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Ubuntu 12.04 LTS : openjdk-6 vulnerabilities (USN-2885-1)

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code. CVE-2016-0483, CVE-2016-0494 A...

CVE-2015-5424

Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2885...

CVE-2015-5424

Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2885...

CVE-2015-5424

HP KeyView (affected: v10.24 and earlier; v10.23.0.1 and v10.24.0.1 fixed) contains an unspecified vulnerability (CVE-2015-5424) enabling remote code execution. ZDI-15-398 details a DOCX parsing/use-after-free flaw that can be triggered by opening a malicious file/page, leading to arbitrary code ...

Debian DSA-2885-1 : libyaml-libyaml-perl - security update

Ivan Fratric of the Google Security Team discovered a heap-based buffer overflow vulnerability in LibYAML, a fast YAML 1.1 parser and emitter library. A remote attacker could provide a specially crafted YAML document that, when parsed by an application using libyaml, would cause the application t...

Debian: Security Advisory (DSA-2885-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2732-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2732-1 [email protected] http://www.debian.org/security/ Michael Gilbert July 31, 2013 http://www.debian.org/security/faq -...

Debian DSA-2732-1 : chromium-browser - several vulnerabilities

Several vulnerabilities have been discovered in the Chromium web browser. - CVE-2013-2881 Karthik Bhargavan discovered a way to bypass the Same Origin Policy in frame handling. - CVE-2013-2882 Cloudfuzzer discovered a type confusion issue in the V8 JavaScript library. - CVE-2013-2883 Cloudfuzzer...

Google Chrome释放后重用远程代码执行漏洞(CVE-2013-2885)

BUGTRAQ ID: 61552 CVECAN ID: CVE-2013-2885 Google Chrome是由Google开发的一款设计简单、高效的Web浏览工具。 Chrome 28.0.1500.95在存在多个字段输出类型时处理JS事件的方式上存在释放后重用，远程攻击者可利用此漏洞造成拒绝服务等其他攻击。 0 Google Chrome 28.0.1500.95 厂商补丁： Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2013-2885

CVE-2013-2885 affects Google Chrome (Chromium-based) prior to 28.0.1500.95. It is a use-after-free in input handling related to focus during processing of JavaScript events with a multiple-fields input type, enabling remote denial of service and possibly other impact. Public advisories (Debian/Ma...

CVE-2013-2885

Removed by vendor...

SuSE Update for update openSUSE-SU-2012:1376-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201213761.nasl 8352 2018-01-10 07:01:57Z teissa $ SuSE Update for update openSUSE-SU-2012:1376-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Google Chrome Multiple Vulnerabilities - Sep12 (Windows-01)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep12win01.nasl 5888 2017-04-07 09:01:53Z teissa $ Google Chrome Multiple Vulnerabilities - Sep12 Windows-01 Authors: Madhuri D Copyright: Copyright c 2012...