Debian: Security Advisory (DSA-4248-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-2907

An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

Oracle Linux 7 : wpa_supplicant (ELSA-2017-2907)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-2907 advisory. 1:2.6-5.1 - avoid key reinstallation CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,...

Virtuozzo Linux Errata and Security Advisory 2017:2907 Important

Upstream security update. Follow RHSA-2017:2907 for details...

Ubuntu: Security Advisory (USN-2907-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201412-47

Gentoo Linux Local Security Checks GLSA 201412-47 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-2907

Mobile Devices aka MDI C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, have hardcoded SSH credentials, which makes it easier for remote attackers to obtain access by leveraging knowledge of the required username and password...

CVE-2015-2907

CVE-2015-2907 concerns the Mobile Devices (MDI) C4 OBD-II dongle family (firmware 2.x–3.4.x). The root cause is hard-coded SSH credentials (username/password) that enable remote attackers to gain access to affected devices. Impact described across sources includes unauthorized remote access; CERT...

Oracle Solaris Third-Party Patch Update : wireshark (cve_2014_2907_denial_of)

The remote Solaris system is missing necessary patches to address security updates : - The srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denia...

GLSA-201412-47 : TORQUE Resource Manager: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-47 TORQUE Resource Manager: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TORQUE Resource Manager. Please review the CVE identifiers referenced below for details. Impact : A context-dependent...

Joomla Component com_huruhelpdesk SQL Injection (CVE-2010-2907)

An SQL injection vulnerability has been reported in Joomla Com Huruhelpdesk. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

GLSA-201406-33 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-33 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact : A remote attacker can cause arbitrary code executio...

openSUSE Security Update : chromium (openSUSE-SU-2013:1556-1)

Update to Chromium 30.0.1599.66 : - Easier searching by image - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance - Security fixes : + CVE-2013-2906: Races in Web Audio + CVE-2013-2907: Out of bounds read in Window.prototype object + CVE-2013-2908:...

openSUSE Security Update : wireshark (openSUSE-SU-2014:0612-1)

This wireshark update to version 1.10.7 fixes the following security issue : - bnc874760: Fixed RTP dissector vulnerabilities CVE-2014-2907. - Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-1.10.7 .html %NASLMINLEVEL 70300 C Tenable...

Wireshark RTP Dissector Denial of Service Vulnerability-01 (May 2014) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark RTP Dissector Denial of Service Vulnerability-01 (May 2014) - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Updated wireshark package fixes CVE-2014-2907

Updated wireshark packages fix security vulnerabilities: The RTP dissector could crash CVE-2014-2907. This update provides Wireshark version 1.10.7, which fixes this security issue, as well as several other bugs...

CVE-2014-2907

The srtpaddaddress function in epan/dissectors/packet-rtp.c in the RTP dissector in Wireshark 1.10.x before 1.10.7 does not properly update SRTP conversation data, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2014-2907

Wireshark 1.10.x before 1.10.7 is affected. The srtp_add_address function in epan/dissectors/packet-rtp.c does not properly update SRTP conversation data, allowing remote attackers to cause a denial of service (application crash) via a crafted RTP packet. Remediation: upgrade to Wireshark 1.10.7 ...

SuSE Update for chromium openSUSE-SU-2013:1556-1 (chromium)

Check for the Version of chromium OpenVAS Vulnerability Test $Id: gbsuse201315561.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for chromium openSUSE-SU-2013:1556-1 chromium Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This...