Updated rxvt-unicode packages fix CVE-2014-3121

Updated rxvt-unicode package fixes security vulnerability: rxvt-unicode aka urxvt before 9.20 is vulnerable to a user-assisted arbitrary commands execution issue. This can be exploited by the unprocessed display of certain escape sequences in a crafted text file or program output. Arbitrary comma...

CVE-2013-3121

Microsoft Internet Explorer 6–10 is affected by a memory corruption vulnerability that allows remote code execution or a denial of service when visiting a crafted website. The issue is documented as CVE-2013-3112/3113/3121/3139/3142 family, with MS13-047 providing the patch (Cumulative Security U...

Internet Explorer Text Element Use After Free (MS13-047; CVE-2013-3121)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

CVE-2012-3121

CVE-2012-3121 applies to Solaris 9/10 (in.tnamed(1M)) with an easily exploitable, unauthenticated remote issue via the NameServer, potentially causing partial denial of service. Nessus entries indicate affected Solaris 10(x86) and Solaris 10(sparc) plugins referencing patch 148626-01 and 148625-0...

SuSE 11 / 11.1 Security Update : bzip2 (SAT Patch Numbers 3121 / 3125)

This update fixes an integer overflow in the BZ2decompress function of bzip2/libbz2. This could have been exploited via a crafted archive to cause a denial of service or even execute arbitrary code. CVE-2010-0405 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

CVE-2010-3121

Buffer overflow in tm-console-bin in the DevonIT thin-client management tool might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2010-3121

Buffer overflow in tm-console-bin in the DevonIT thin-client management tool might allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2009-3121

Cross-site scripting XSS vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3121

The CVE-2009-3121 entry describes a cross-site scripting (XSS) vulnerability in the Drupal Ajax Table module 5.x. The affected component is the Ajax Table module (Drupal) version 5.x; the root cause is not detailed beyond generic XSS in the module. Impact is described as allowing remote attackers...

Gentoo Security Advisory GLSA 200608-23 (heartbeat)

The remote host is missing updates announced in advisory GLSA 200608-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3121

Xerox CentreWare Web (CWW) vulnerable to multiple cross-site scripting (XSS) flaws in versions prior to 4.6.46. Remote authenticated users can inject arbitrary script/HTML via unspecified vectors. Impact is partial integrity; no explicit exploitation details are provided. Remediation: upgrade to ...

openSUSE 10 Security Update : heartbeat (heartbeat-2139)

This update fixes both a local and a remote denial of service attack within heartbeat, as well as numerous other bugs in the messaging and membership layer, GUI, Cluster Resource Manager, Local Resource Manager and Resource Agents. CVE-2006-3815,CVE-2006-3121 %NASLMINLEVEL 70300 C Tenable Network...

CVE-2007-3121

CVE-2007-3121 affects Zapping VBI Library (ZVBI); the vulnerable CCdecode function in contrib/ntsc-cc.c (zvbi-ntsc-cc) before 0.2.25 can cause a denial of service (application crash) and may allow arbitrary code execution when processing long data during a reception error. The documented impact i...

CVE-2006-3121

The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...

CVE-2006-3121

The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...

CVE-2006-3121

CVE-2006-3121 affects the Heartbeat subsystem of High-Availability Linux: the peel_netstring function in cl_netstring.c can be abused by a remote attacker via the length parameter in a heartbeat message to cause a denial of service (crash). Affected products include HA-Linux releases before 1.2.5...

[SECURITY] [DSA 1151-1] New heartbeat packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1151-1 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2006 http://www.debian.org/security/faq -...

Buffer overflow

parser.exe in Océ OCE 3121/3122 Printer allows remote attackers to cause a denial of service crash or reboot via a long request, possibly triggering a buffer overflow...

CVE-2006-2108

parser.exe in Océ OCE 3121/3122 Printer allows remote attackers to cause a denial of service crash or reboot via a long request, possibly triggering a buffer overflow...

CVE-2006-2108

CVE-2006-2108 affects Océ (OCE) 3121/3122 printers. The issue is a denial-of-service via a long request that could trigger a buffer overflow in parser.exe. The NVD data lists CVSSv2 base score 7.8 (Network vector, Low attack complexity, no authentication, availability impact). No remediation or c...