Lucene search
+L

141 matches found

Tenable Nessus
Tenable Nessus
added 2011/09/12 12:00 a.m.22 views

Fedora 14 : cups-1.4.8-2.fc14 (2011-11221)

This update avoids a GIF reader loop CVE-2011-2896. The new upstream release fixes a number of scheduler, driver, and backend issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

5.1CVSS7.2AI score0.11993EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2011/09/09 12:00 a.m.40 views

Fedora 15 : pl-5.10.2-5.fc15 (2011-11305)

Fix bugs in GIF image decoder Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

5.1CVSS7.2AI score0.11993EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2011/09/09 12:00 a.m.28 views

Fedora 14 : pl-5.7.11-7.fc14 (2011-11318)

Fix bugs in GIF image decoder Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

5.1CVSS7.2AI score0.11993EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2011/08/31 12:00 a.m.35 views

Fedora 16 : cups-1.5.0-6.fc16 (2011-11173)

This update avoids a GIF reader loop CVE-2011-2896. This update enables CUPS by default. This update re-introduces support for Avahi. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

5.1CVSS7.2AI score0.11993EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2011/08/29 12:00 a.m.25 views

Fedora 15 : cups-1.4.8-2.fc15 (2011-11197)

This update avoids a GIF reader loop CVE-2011-2896. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

5.1CVSS7.2AI score0.11993EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2011/08/24 12:00 a.m.35 views

Fedora Update for gimp FEDORA-2011-10788

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.3CVSS7.9AI score0.16273EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2011/08/23 12:00 a.m.21 views

Fedora 16 : gimp-2.6.11-21.fc16 (2011-10761)

This update adds checks to avoid heap corruption and buffer overflows when loading GIF image files CVE-2011-2896. Additionally, it fixes a bug which caused GIMP to print an unnecessary warning to the command line on startup. Note that Tenable Network Security has extracted the preceding descripti...

5.1CVSS7.6AI score0.11993EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2011/08/20 12:00 a.m.37 views

Fedora 15 : gimp-2.6.11-21.fc15 (2011-10788)

This update adds checks to avoid heap corruption and buffer overflows when loading GIF image files CVE-2011-2896. Additionally, it fixes a bug which caused GIMP to print an unnecessary warning to the command line on startup. Note that Tenable Network Security has extracted the preceding descripti...

5.1CVSS7.6AI score0.11993EPSS
SaveExploits0References3
OSV
OSV
added 2011/08/19 5:55 p.m.11 views

CVE-2011-2896

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gifreadlzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte functio...

7.5AI score
SaveExploits0References42
CVE
CVE
added 2011/08/19 5:00 p.m.177 views

CVE-2011-2896

CVE-2011-2896 is a heap-based buffer overflow in the GIF LZW decompression path (LZWReadByte) affecting the GIF plug-in implementations in GIMP (and related GIF handling in CUPS/PBMPLUS and others). The vulnerability can crash the affected application or, potentially, allow code execution via a c...

5.1CVSS7.3AI score0.11993EPSS
SaveExploits0References32Affected Software1
UbuntuCve
UbuntuCve
added 2011/08/19 12:00 a.m.42 views

CVE-2011-2896

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gifreadlzw function in filter/image-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins/common/file-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte functio...

5.1CVSS7.4AI score0.11993EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2011/08/11 9:28 p.m.12 views

BSD compress LZW decoder buffer overflow

The LZW decompressor in 1 the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and 2 compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products,...

9.3CVSS7.6AI score0.08355EPSS
SaveExploits0References4
CVE
CVE
added 2010/07/28 7:32 p.m.55 views

CVE-2010-2896

CVE-2010-2896 affects IBM FileNet Content Manager (CM) versions 4.0.0, 4.0.1, 4.5.0, and 4.5.1 prior to FP4. The root cause is improper handling of the InheritParentPermissions setting during an upgrade from 3.x, which may allow an attacker to bypass intended folder permissions via unspecified ve...

4.3CVSS6.5AI score0.00907EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2009/08/20 5:00 p.m.64 views

CVE-2009-2896

The CVE-2009-2896 entry affects KMPlayer up to version 2.9.4.1433 (and earlier); the underlying issue is a buffer overflow triggered by a long string in a subtitle (.srt) playlist file. This can cause a denial of service (application crash) and may allow arbitrary code execution. The provided doc...

9.3CVSS8.2AI score0.05586EPSS
SaveExploits2References4Affected Software1
Circl
Circl
added 2009/07/20 12:00 a.m.11 views

CVE-2009-2896

creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9220...

9.3CVSS5.8AI score0.05586EPSS
SaveExploits2References1
CVE
CVE
added 2008/06/27 6:00 p.m.52 views

CVE-2008-2896

CVE-2008-2896 affects FireAnt 1.3. The vulnerability is a directory traversal in index.php where the page parameter can be manipulated with .. to include and execute arbitrary local files. The NVD entry assigns a HIGH base score (7.5) with network access and low attack complexity. Connected docum...

7.5CVSS7.1AI score0.02286EPSS
SaveExploits2References3Affected Software1
Circl
Circl
added 2008/06/20 12:00 a.m.10 views

CVE-2008-2896

creationtimestamp| type| source ---|---|--- 2008-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5871...

7.5CVSS5.8AI score0.02286EPSS
SaveExploits2References1
NVD
NVD
added 2007/05/30 1:30 a.m.19 views

CVE-2007-2896

Race condition in the Symantec Enterprise Security Manager ESM 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service CPU consumption and application hang via certain network scans to ESM ports...

4.3CVSS6.6AI score0.01563EPSS
SaveExploits0References8
CVE
CVE
added 2007/05/30 1:00 a.m.57 views

CVE-2007-2896

CVE-2007-2896 affects Symantec Enterprise Security Manager (ESM) 6.5.3 on Windows prior to 20070524. The issue is a race condition that allows remote attackers to cause denial of service via certain network scans directed at ESM ports, leading to CPU consumption and application hang. Descriptions...

4.3CVSS6.7AI score0.01563EPSS
SaveExploits0References8Affected Software1
CVE
CVE
added 2006/06/07 10:00 a.m.52 views

CVE-2006-2896

CVE-2006-2896: FunkBoard CF0.71 suffers from a vulnerability in profile.php where a remote attacker can change arbitrary passwords by tampering with a hidden uid field in the Edit Profile action. Affected component is the profile handling in FunkBoard CF0.71; root cause is the inability to valida...

5CVSS6.8AI score0.09364EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder