CVE-2015-3126

CVE-2015-3126 is an Adobe Flash Player issue (APSB15-16) described in connected advisories as a NULL pointer dereference. The vulnerability contributes to denial of service and possible other impacts; it’s part of a set of Flash vulnerabilities addressed in SUSE advisories and other sources. Affe...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47

3:11-alt47 built July 8, 2015 Sergey V Turchin in task 146142 July 8, 2015 Sergey V Turchin - new version - security fixes: CVE-2014-0578, CVE-2015-3097, CVE-2015-3114, CVE-2015-3115, CVE-2015-3116, CVE-2015-3117, CVE-2015-3118, CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122,...

Adobe Flash Player Use-After-Free Vulnerability (Jul 2015) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Debian DSA-3126-1 : php5 - security update

It was discovered that libmagic as used by PHP, would trigger an out of bounds memory access when trying to identify a crafted file. Additionally, this updates fixes a potential dependency loop in dpkg trigger handling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2013-3126

CVE-2013-3126 corresponds to a memory handling vulnerability in Microsoft Internet Explorer (IE) 9/10 when script debugging is enabled, enabling remote code execution via a crafted web page. The issue stems from improper handling of memory objects during script processing, allowing an attacker to...

VulnCheck KEV: CVE-2009-3126

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3,...

CVE-2012-3126

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Products Suite 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Apache Tomcat Agent...

CVE-2012-3126

CVE-2012-3126 affects the Solaris Cluster component of Oracle Sun Products Suite 3.3, with vulnerability arising from an unspecified flaw related to the Apache Tomcat Agent. The impact is stated as affecting confidentiality, integrity, and availability via unknown vectors; local access is implied...

CVE-2011-3126

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects...

CVE-2011-3126

The CVE-2011-3126 entry applies to WordPress core: versions 3.1 prior to 3.1.3 and 3.2 prior to Beta 2 allow remote attackers to determine usernames of non-authors via canonical redirects. The concrete impact is information disclosure (usernames) without authentication. Public details consistentl...

CVE-2010-3126

This CVE affects Avast! Free Antivirus up to version 5.0.594, where an insecure library loading/untrusted search path vulnerability allows local (and possibly remote) attackers to hijack DLLs by placing a Trojan mfc90loc.dll beside the avast license file (mfc90loc.dll in the same folder as .avast...

KLA10413 ACE vulnerability in Avast! Free Antivirus

An untrusted path vulnerability was found in Avast! Free Antivirus. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a library hijack. Original advisories - Exploitation Public exploits exist for this vulnerability...

Microsoft Windows GDI+ PNG Processing Integer Overflow (MS09-062; CVE-2009-3126)

The Windows Graphics Rendering Engine is implemented via the Graphics Device Interface GDI subsystem. GDI is a Microsoft standard for representing graphical objects and outputting these representations to devices such as monitors and printers. GDI is capable of representing vector graphics, drawi...

CVE-2009-3126

CVE-2009-3126 corresponds to the GDI+ PNG Integer Overflow vulnerability described in MS09-062. The issue arises from an integer overflow in GDI+ when processing PNG images, which could allow remote code execution if a user opens a specially crafted image. The vulnerability affects a wide range o...

Gentoo Security Advisory GLSA 200610-05 (capi4hylafax)

The remote host is missing updates announced in advisory GLSA 200610-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3126

Multiple stack-based buffer overflows in the ServerView web interface SnmpGetMibValues.exe in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL...

CVE-2008-3126

The CVE-2008-3126 issue affects Fujitsu Siemens Computers ServerView (04.60.07 and earlier), specifically the ServerView web interface component SnmpGetMibValues.exe. The root cause is multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code via a craf...

Debian Security Advisory DSA 945-1 (antiword)

The remote host is missing an update to antiword announced via advisory DSA 945-1. Javier Fernandez-Sanguino Pena from the Debian Security Audit project discovered that two scripts in antiword, utilities to convert Word files to text and Postscript, create a temporary file in an insecure fashion...

Debian: Security Advisory (DSA-945-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : capi4hylafax (ZYPP Patch Number 2378)

By using shell meta characters in the sender number remote attackers could execute arbitrary commands. CVE-2006-3126 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...