97 matches found
SOL14138 - XML External Entity Injection (XXE) from authenticated source vulnerability CVE-2012-2997
Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column. Acknowledgements F5 would like to acknowledge SEC Consult Vulnerability Lab for bringing this issue to our attention, and for following the...
Scientific Linux Security Update : HelixPlayer on SL4.x i386/x86_64
Multiple security flaws were discovered in RealPlayer. Helix Player and RealPlayer share a common source code base; therefore, some of the flaws discovered in RealPlayer may also affect Helix Player. Some of these flaws could, when opening, viewing, or playing a malicious media file or stream, le...
FreeBSD Ports: firefox
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Mozilla Products Browser Engine Multiple Unspecified Vulnerabilities (MAC OS X)
The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsbrowserenginemultvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products Browser Engine Multiple Unspecified Vulnerabilities MAC OS ...
Ubuntu: Security Advisory (USN-1222-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MozillaThunderbird: Update to Mozilla Thunderbird 3.1.14 (important)
Mozilla Thunderbird was updated to version 3.1.14, fixing various bugs and security issues. MFSA 2011-36: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory...
Mozilla Foundation Security Advisory 2011-36
Mozilla Foundation Security Advisory 2011-36 Title: Miscellaneous memory safety hazards rv:7.0 / rv:1.9.2.23 Impact: Critical Announced: September 27, 2011 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 7.0 Firefox 3.6.23 Thunderbird 7.0...
Ubuntu: Security Advisory (USN-1222-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox < 7.0 Multiple Vulnerabilities
Binary data 6028.prm...
Mozilla Firefox远程内存破坏漏洞(CVE-2011-2997)
BUGTRAQ ID: 49812 CVE ID: CVE-2011-2997 Firefox是一款非常流行的开源WEB浏览器。 Firefox的浏览器引擎在实现上存在几个内存安全Bug，由于脚本在Thunderbird和SeaMonkey中被禁用，所以这些漏洞无法通过电子邮件利用，但可能有潜在风险。Firefox在解析特制文件时可在受影响应用程序中执行任意代码，造成拒绝服务。 Mozilla Firefox 6 厂商补丁： Mozilla ------- Mozilla已经为此发布了一个安全公告（mfsa2011-36）以及相应补丁: mfsa2011-36：Miscellaneous...
CVE-2011-2997
CVE-2011-2997 affects Mozilla Firefox (browser engine) versions on Windows/Linux/macOS as Firefox 6, Thunderbird before 7.0, and SeaMonkey before 2.4. Root cause: memory corruption in the browser engine that can cause denial of service or potentially allow arbitrary code execution via unknown vec...
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6583)
Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6584)
Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6585)
Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6582)
Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...
RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Dec10
This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayermultvulnwin03dec10.nasl 5373 2017-02-20 16:27:48Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Dec10 Authors: Sooraj KS Updated By: Sooraj KS on...
RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Linux
RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-2997
CVE-2010-2997 is tied to multiple advisories (RHSA-2010:0981, CESA-2010:0981) and OpenVAS/Nessus entries describing multiple security flaws in RealPlayer/HelixPlayer, potentially enabling arbitrary code execution via crafted media/stream content. Remediation across affected platforms centers on r...
RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities
According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...