Ubuntu: Security Advisory (USN-3078-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-3078

CVE-2016-3078 affects the PHP zip extension (php_zip.c). A crafted ZIP file can trigger an integer overflow in getFromIndex/getFromName within ZipArchive, leading to a heap-based overflow and plausible denial of service or other impact. Affects PHP versions prior to 7.0.6; patched in 7.0.6+ (and ...

Fedora 23 : php-pecl-zip (2016-4f3c77ef90)

Version 1.13.3 - Fixed bug php71923 integer overflow in ZipArchive::getFrom. CVE-2016-3078 Stas - Fixed bug php72258 ZipArchive converts filenames to unrecoverable form. Anatol - Fixed bug php72434 ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize. Dmitry Note th...

SOL56138200 - PHP vulnerability CVE-2016-3078

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

PHP ZIP Archive Heap Overflow (CVE-2016-3078)

A heap overflow vulnerability exists in PHP, due to an integer overflow when reading ZIP files. A remote attacker can exploit this vulnerability by sending a crafted ZIP archive to a web application running a vulnerable version of PHP. A successful attack can result in remote code execution under...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2015-3078)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3078 advisory. - sctp: fix ASCONF list handling Marcelo Ricardo Leitner Orabug: 21842668 CVE-2015-3212 Tenable has extracted the preceding description block...

Adobe AIR < 17.0.0.172 Multiple Vulnerabilities (APSB15-09)

Binary data 8812.prm...

openSUSE Security Update : flash-player (openSUSE-2015-372)

The Adobe flash-player package was updated to version 11.2.202.460 to fix several security issues. The following vulnerabilities were fixed bsc930677 : - APSB15-09, CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-308...

Adobe Flash Player Multiple Vulnerabilities - 01 (May 2015) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt44

3:11-alt44 built May 15, 2015 Sergey V Turchin in task 144380 May 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086,...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt44

3:11-alt44 built May 15, 2015 Sergey V Turchin in task 144379 May 14, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086,...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

CVE-2015-3078

Adobe Flash Player ShaderJob Buffer Overflow CVE-2015-3078 is described in exploits as a memory-corruption flaw occurring when applying a Shader and reusing the same Bitmap object as src and destination; changing the ShaderJob width after the job starts allows a buffer overflow, enabling control ...

RHEL 5 / 6 : flash-plugin (RHSA-2015:1005)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1005 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0613-1)

Chromium version 20.0.1128 fixes several security issues : - CVE-2011-3078: Use after free in floats handling. - CVE-2012-1521: Use after free in xml parser. - CVE-2011-3079: IPC validation failure. - CVE-2011-3080: Race condition in sandbox IPC - CVE-2011-3081: Use after free in floats handling...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID 94c0ac4f-9388-11e1-b242-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID 94c0ac4f-9388-11e1-b242-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Chrome Multiple Denial of Service Vulnerabilities - May 12 (Mac OS X)

The host is installed with Google Chrome and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmay12macosx.nasl 5940 2017-04-12 09:02:05Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - May 12 Mac OS X Authors:...

CVE-2011-3078

CVE-2011-3078 is a use-after-free vulnerability in the handling of floated elements in Google Chrome/Chromium prior to version 18.0.1025.168. Exploitation could lead to a denial of service or potentially unspecified impact. Connected advisories confirm the issue as part of multiple Chrome/Chromiu...

Stable Channel Update

The Chrome Stable channel has been updated to 18.0.1025.168 on Windows, Mac, Linux and Chrome Frame. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. 1064...