CVE-2017-2899

CVE-2017-2899 affects Blender, specifically the TIFF loading path that can overflow an integer and trigger a buffer overflow in Blender 2.78c when processing a crafted TIFF file via the sequencer. The vulnerability could allow code execution in the application's context. Public details identify t...

Ubuntu 14.04 LTS : LibreOffice vulnerabilities (USN-2899-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2899-1 advisory. It was discovered that LibreOffice incorrectly handled LWP document files. If a user were tricked into opening a specially crafted LWP document, a remote...

Ubuntu: Security Advisory (USN-2899-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2899

Heap-based buffer overflow in the QualifierList retrievequalifierlist function in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a long list name in a packet on port 8190...

CVE-2015-2899

Medicomp MEDCIN Engine before 2.22.20153.226 is affected by a heap-based buffer overflow in QualifierList retrieve_qualifier_list that can allow remote code execution via a long list name in a packet on port 8190. Vulnerable versions are before 2.22.20153.226. Impact includes partial confidential...

Medicomp MEDCIN Engine contains multiple vulnerabilities

Overview Medicomp's MEDCIN Engine provide electronic health records EHR tools and information to medical professionals. MEDCIN Engine versions before version 2.22.20153.226 are vulnerable to several buffer overflows. Description Medicomp MEDCIN Engine prior to version 2.22.20153.226 is vulnerable...

SUSE: Security Advisory for Linux (SUSE-SU-2014:1693-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : kernel (SUSE-SU-2015:0481-1)

The SUSE Linux Enterprise 11 Service Pack 2 LTSS kernel has been updated to fix security issues on kernels on the x8664 architecture. The following security bugs have been fixed : - CVE-2012-4398: The requestmodule function in kernel/kmod.c in the Linux kernel before 3.4 did not set a certain...

Fedora Update for kernel FEDORA-2014-8487

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : python-cupshelpers (openSUSE-SU-2011:1331-1)

system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. system-config-printer did not properly quote shell meta characters in SMB server or workgroup names when passing...

openSUSE Security Update : python-cupshelpers (openSUSE-SU-2011:1331-2)

This update fixes a typo from the previous update : system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. system-config-printer did not properly quote shell meta...

openSUSE Security Update : python-cupshelpers (openSUSE-SU-2011:1331-1)

system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. system-config-printer did not properly quote shell meta characters in SMB server or workgroup names when passing...

openSUSE Security Update : python-cupshelpers (openSUSE-SU-2011:1331-2)

This update fixes a typo from the previous update : system-config-printer used an unauthenticated connection when downloading printer drivers from openprinting.org CVE-2011-4405. This update disables the printer driver download feature. system-config-printer did not properly quote shell meta...

openSUSE Security Update : system-config-printer (openSUSE-2011-89)

Add system-config-printer-subprocess-no-shell.patch: avoid escaping issues when running commands. Fix bnc735322. - Add system-config-printer-no-openprinting.patch: this disables the feature where PPD drivers can be downloaded from OpenPrinting.org. See discussion in bnc733542. As a side-effect,...

CVE-2014-2899

CVE-2014-2899 affects CyaSSL (wolfSSL) prior to 2.9.4. The issue enables remote denial of service via a NULL pointer dereference in two paths: (1) a certificate parsing failure when processing the peer certificate, and (2) a client_key_exchange path when the ephemeral key is not found. The NVD en...

Debian DSA-2899-1 : openafs - security update

Michael Meffie discovered that in OpenAFS, a distributed filesystem, an attacker with the ability to connect to an OpenAFS fileserver can trigger a buffer overflow, crashing the fileserver, and potentially permitting the execution of arbitrary code. In addition, this update addresses a minor deni...

Fedora Update for kernel FEDORA-2014-4360

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kernel FEDORA-2014-0684

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2899

Summary: CVE-2012-2899 affects Google Chrome on iOS prior to 21.0.1180.82. The issue arises from incorrect calls to WebView methods that enable an applewebdata: URL, bypassing the Same Origin Policy and enabling Universal XSS (UXSS) via document.write. Impact: SOP bypass and UXSS risk on affected...

Fedora Update for kernel FEDORA-2013-21807

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...