91 matches found
CVE-2015-3087
Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary...
CVE-2015-3087
Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to execute arbitrary...
CVE-2015-3087
CVE-2015-3087 is an integer overflow vulnerability in Adobe Flash Player (Windows/OS X: affected builds before 17.0.0.188; Linux before 11.2.202.460; earlier 13.0.0.289 and 14.x–16.x) and in Adobe AIR before 17.0.0.172 (and AIR SDK/Compiler before 17.0.0.172). The issue allows attackers to execut...
RHEL 5 / 6 : flash-plugin (RHSA-2015:1005)
The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:1005 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...
Debian DSA-3087-1 : qemu - security update
Paolo Bonzini of Red Hat discovered that the blit region checks were insufficient in the Cirrus VGA emulator in qemu, a fast processor emulator. A privileged guest user could use this flaw to write into qemu address space on the host, potentially escalating their privileges to those of the qemu...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3087)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3087 advisory. - net: sctp: fix panic on duplicate ASCONF chunks Daniel Borkmann Orabug: 20010590 CVE-2014-3687 Tenable has extracted the preceding description...
CVE-2014-3087
IBM BPM and WebSphere Lombardi Edition are affected by CVE-2014-3087 due to an XXE flaw in callService.do that allows remote authenticated users to read arbitrary files through crafted XML data. Affected: IBM BPM Express/Standard/Advanced 7.5.x, 8.0.x, 8.5.0, 8.5.5; WebSphere Lombardi Edition 7.2...
openSUSE Security Update : libtiff-devel (openSUSE-SU-2010:0619-1)
specially crafted tiff files could cause a memory corruption in libtiff. Attackers could potentially exploit that to execute arbitrary code in applications that use libtiff for processing tiff files CVE-2010-3087. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...
CVE-2013-3087
Belkin N900 router affected by CVE-2013-3087. Vulnerable components: XSS in web UI via (1) ssid2 parameter to wl_channel.html and (2) guest_psk parameter to wl_guest.html. Exploitation allows remote attackers to inject arbitrary web script/HTML in the browser of an authenticated user (no authenti...
openSUSE: Security Advisory for update (openSUSE-SU-2012:0656-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: chromium
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Google Chrome Multiple Vulnerabilities - May 12 (Mac OS X)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnmay12macosx.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - May 12 Mac OS X Authors: Madhuri D Copyright: Copyright c 2012...
Google Chrome Multiple Vulnerabilities (May 2012) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-3087
Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors...
CVE-2011-3087
Chromium/Chrome impacted by CVE-2011-3087 (Incorrect window navigation). The connected OpenSUSE advisory shows the fix being applied via chromium updates to 21.0.1145, addressing the issue among other CVEs listed (e.g., 2011-3083 to 2011-3102). The root cause is reported as an incorrect window na...
Security fix for the ALT Linux 5 package libtiff version 3.9.5-alt1.M50P.1
Sept. 29, 2011 Gleb Fotengauer-Malinovskiy 3.9.5-alt1.M50P.1 - Backport to p5 branch CVE-2010-3087 CVE-2010-2595 CVE-2011-0192 CVE-2011-1167 - no libtiffxx subpackage...
USN-1085-2: tiff regression
USN-1085-1 fixed vulnerabilities in the system TIFF library. The upstream fixes were incomplete and created problems for certain CCITTFAX4 files. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Sauli Pahlman discovered that the TIFF library incorrectl...
Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : tiff regression (USN-1085-2)
USN-1085-1 fixed vulnerabilities in the system TIFF library. The upstream fixes were incomplete and created problems for certain CCITTFAX4 files. This update fixes the problem. We apologize for the inconvenience. Sauli Pahlman discovered that the TIFF library incorrectly handled invalid...