Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-1880-1)

An information leak was discovered in the Linux kernel when inotify is used to monitor the /dev/ptmx device. A local user could exploit this flaw to discover keystroke timing and potentially discover sensitive information like password length. CVE-2013-0160 An information leak was discovered in t...

Debian DSA-2669-1 : linux - privilege escalation/denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-0160 vladz reported a timing leak with the /dev/ptmx...

DSA-2669-1 linux - several

Bulletin has no description...

Debian Security Advisory DSA 2669-1 (linux - privilege escalation/denial of service/information leak)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-0160 vladz reported a timing leak with the /dev/ptmx...

Fedora Update for kernel FEDORA-2013-6999

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-6999 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for kernel FEDORA-2013-6999

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 17 : kernel-3.8.11-100.fc17 (2013-6999)

Update to latest upstream stable release, Linux v3.8.11. A variety of fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2013-3234

The vulnerability CVE-2013-3234 affects the Linux kernel’s rose_recvmsg function (net/rose/af_rose.c) prior to 3.9-rc7. It does not initialize a certain data structure, allowing local attackers to read sensitive information from kernel stack memory via crafted recvmsg/recvfrom calls. The issue im...

CVE-2013-3234

The roserecvmsg function in net/rose/afrose.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

RealNetworks RealPlayer Multiple Vulnerabilities - Sep12 (Mac OS X)

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayermultvulnsep12macosx.nasl 6022 2017-04-25 12:51:04Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities - Sep12 Mac OS X Authors: Rachana Shetty Copyright: Copyright...

CVE-2012-3234

Affected software: RealNetworks RealPlayer products prior to 15.0.6.14 (Windows/macOS RealPlayer SP up to 1.1.5; Mac RealPlayer before 12.0.1.1750) are vulnerable. Root cause: improper handling of codec frame sizes in RealAudio files, enabling a remote attacker to trigger a divide-by-zero error t...

RealPlayer for Windows < 15.0.6.14 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 15.0.6.14. As such, it is affected by multiple vulnerabilities : - A buffer overflow error exists related to 'AAC' handling, specifically unpacking of the stream data. CVE-2012-2407 - A...

Real Networks RealPlayer < 15.0.6.14 Multiple Vulnerabilities

Binary data 6574.prm...

APPLE-SA-2011-10-12-4 Safari 5.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...

Google Chrome < 14.0.835.163 Multiple Vulnerabilities (Sep 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3234

CVE-2011-3234 affects Google Chrome prior to 14.0.835.163. The issue arises from how Chrome handles boxes, allowing remote attackers to trigger an out-of-bounds read and potentially cause a denial of service. The description notes remote exploitation via unspecified vectors. No vendor/version-spe...

VUPEN Security Research - Microsoft Office Excel Formula Substream Memory Corruption &#40;CVE-2010-3234&#41;

VUPEN Security Research - Microsoft Office Excel Formula Substream Memory Corruption CVE-2010-3234 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Excel is a powerful tool you can use to create and format spreadsheets, and analyze and share informati...

CVE-2010-3234

The CVE-2010-3234 vulnerability is a Formula Substream Memory Corruption flaw in Microsoft Office Excel. It arises when Excel parses Formula Substream records, leading to a memory corruption condition that could allow a remote attacker to execute arbitrary code by convincing a user to open a spec...

Microsoft Excel Formula Substream (CVE-2010-3234) Memory Corruption Vulnerability

Description Microsoft Excel is prone to a memory corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Linux Kernel perf_counter_open()函数本地溢出漏洞

BUGTRAQ ID: 36423 CVECAN ID: CVE-2009-3234 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的kernel/perfcounter.c文件中的perfcopyattr函数存在缓冲区溢出漏洞。本地攻击者可以通过向perfcounteropen系统调用传送特制数据触发这个溢出，导致内核崩溃。 Linux kernel 2.6.31 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...