Virtuozzo Linux Errata and Bugfix Advisory 2017:3201

Upstream security update. Follow RHBA-2017:3201 for details...

Ubuntu 14.04 LTS / 16.04 LTS : Bind vulnerabilities (USN-3201-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3201-1 advisory. It was discovered that Bind incorrectly handled rewriting certain query responses when using both DNS64 and RPZ. A remote attacker could possibly use...

CVE-2016-3201

CVE-2016-3201 affects Microsoft Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (Gold/1511), and Microsoft Edge, enabling remote attackers to read sensitive data from a process’s memory via a crafted PDF document (Windows PDF Information Disclosure Vulnerability). Connected MSKB entries co...

CVE-2016-3201

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than...

Microsoft Windows PDF Library Multiple Vulnerabilities (3164302)

This host is missing an important security update according to Microsoft Bulletin MS16-080 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Oracle: Security Advisory (ELSA-2013-0516)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for thermostat FEDORA-2015-8919

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 21 : thermostat-1.0.6-2.fc21 (2015-8919)

Security fix for CVE-2015-3201 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2015-3201

Thermostat web application stores database credentials in a world-readable configuration file (web.xml), enabling a local user to read credentials and potentially access/modify monitored JVM data or control connected JVMs. Red Hat RHSA-2015:1052 and Fedora advisories/ Nessus entries document the ...

Debian: Security Advisory (DSA-3201-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3201

core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar...

CVE-2014-3201

The CVE-2014-3201 issue affects Blink in Google Chrome for Android prior to 38.0.2125.102, where core/rendering/compositing/RenderLayerCompositor.cpp does not properly handle a specific IFRAME overflow condition. This can allow remote attackers to spoof content by presenting a crafted web site th...

CVE-2014-3201

Removed by vendor...

Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3201)(MS13-069)

BUGTRAQ ID: 62187 CVECAN ID: CVE-2013-3201 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器 当 Internet Explorer 不正确地访问内存中的对象时，存在远程执行代码漏洞。这些漏洞可能以一种攻击者可以在当前用户的上下文中执行任意代码的方式损坏内存 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本 将 Internet...

CVE-2013-3201

Microsoft Internet Explorer 9–10 memory corruption vulnerability (CVE-2013-3201/3203/3206/3207/3209) can allow remote code execution or memory corruption via a crafted web site. Seebug entries for CVE-2013-3201/3207 describe exploitation across IE versions 6–10 with remote code execution in the c...

Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (2870699)

This host is missing a critical security update according to Microsoft Bulletin MS13-069. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CentOS Update for evolution CESA-2013:0516 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-3201

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...

CVE-2011-3201

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email...

CVE-2011-3201

CVE-2011-3201 affects GNOME Evolution prior to 3.2.3. The vulnerability allows a user-assisted remote attacker to read arbitrary files by injecting a crafted attachment parameter into a mailto: URL, causing the file to be attached to a new message. Exploitation details are described in Red Hat/Ce...