Debian Security Advisory DSA 3129-1 (rpm - security update)

Two vulnerabilities have been discovered in the RPM package manager. CVE-2013-6435 Florian Weimer discovered a race condition in package signature validation. CVE-2014-8118 Florian Weimer discovered an integer overflow in parsing CPIO headers which might result in the execution of arbitrary code...

Debian: Security Advisory (DSA-3129-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS Excel Malformed FEATHEADER Record Exploit (MS09-067)

No description provided by source. MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Vulnerble application MS office 2003/2007 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Sean Larsson - Original Discovery !/usr/bin/python import sys import zlib Allwin WinExec...

CVE-2014-3129

CVE-2014-3129 relates to SAP NetWeaver’s Software Lifecycle Manager (SLM) Java Server Pages, where the JSP component handles a crafted request that can lead to information disclosure. Affected product area is SAP Solution Manager 7.1. The description in the connected sources confirms an informati...

Microsoft Silverlight Remote Code Execution Vulnerabilities (2861561) - Mac OS X

This host is missing a critical security update according to Microsoft Bulletin MS13-052. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Visual Studio .NET Remote Code Execution Vulnerability (2848295)

This host is missing a critical security update according to Microsoft Bulletin MS13-054. OpenVAS Vulnerability Test $Id: secpodmsvisualstudiodotnetms13-054.nasl 6115 2017-05-12 09:03:25Z teissa $ Microsoft Visual Studio .NET Remote Code Execution Vulnerability 2848295 Authors: Antu Sanadi...

CVE-2013-3129

Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows ...

CVE-2013-3129

CVE-2013-3129 concerns a TrueType Font (TTF) parsing vulnerability that allows remote code execution. Affected products include Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5; Silverlight 5 prior to 5.1.20513.0; and GDI+, DirectWrite, Journal in various Windows versions (XP through Windows ...

Microsoft Windows Journal Remote Code Execution Vulnerabilities (2848295)

This host is missing a critical security update according to Microsoft Bulletin MS13-054. OpenVAS Vulnerability Test $Id: secpodjournalms13-054.nasl 30599 2013-07-10 14:18:13Z Jul$ Microsoft Windows Journal Remote Code Execution Vulnerabilities 2848295 Authors: Antu Sanadi Copyright: Copyright c...

Microsoft Lync Remote Code Execution Vulnerability (2848295)

This host is missing an important security update according to Microsoft Bulletin MS13-054. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft .NET Framework Multiple Vulnerabilities (2861561)

This host is missing an important security update according to Microsoft Bulletin MS13-052. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Remote Code Execution Vulnerability (2848295)

This host is missing a critical security update according to Microsoft Bulletin MS13-054. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Remote Code Execution Vulnerability (2848295)

This host is missing a critical security update according to Microsoft Bulletin MS13-054. OpenVAS Vulnerability Test $Id: secpodmsofficems13-054.nasl 6093 2017-05-10 09:03:18Z teissa $ Microsoft Office Remote Code Execution Vulnerability 2848295 Authors: Antu Sanadi Copyright: Copyright c 2013...

MS13-054: Vulnerability in GDI+ Could Allow Remote Code Execution (2848295)

The version of Microsoft's GDI+ subsystem installed on the remote host has an unspecified code execution vulnerability. Specially crafted TrueType font files are not processed properly. A remote, unauthenticated attacker could exploit this vulnerability by getting a user to view content that...

CVE-2012-3129

CVE-2012-3129 is linked to Solaris 10 (x86 and SPARC) via the Gnome PDF viewer component. The connected Nessus plugins describe the vulnerability as affecting Solaris 10 and indicate it can be exploited over the network by unauthenticated attackers, with potential impacts including unauthorized u...

CVE-2011-3129

The CVE refers to WordPress “file upload functionality” in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, with unknown impact and attack vectors (possibly related to dangerous filenames). Connected documents corroborate multiple CVEs in WordPress, including CVE-2011-3129, and indicate that Deb...

CVE-2011-3129

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames...

CVE-2009-3129

creationtimestamp| type| source ---|---|--- 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16625 2013-09-09 12:51:06+00:00| seen| MISP/522dbc07-2e20-4aaf-8936-39d4ac1d4fa4 2015-06-02 07:10:00+00:00| seen| MISP/5566caa6-0590-4956-81bf-4179950d210b 2016-01-26...

Microsoft Excel - Malformed FEATHEADER Record (MS09-067) (Metasploit)

$Id: ms09067excelfeatheader.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-3129

CVE-2010-3129 affects uTorrent versions 2.0.3 and earlier, with an untrusted search path vulnerability that allows DLL hijacking via a Trojan horse DLL placed in the same folder as a .torrent or .btsearch file. The issue can enable arbitrary code execution for local users and possibly remote atta...