DEBIAN-CVE-2013-3235

net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

CVE-2013-3235

net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

BELL-CVE-2013-3235 CVE-2013-3235 does not affect BellSoft software

Bulletin has no description...

CVE-2013-3235

Mitigation-ready summary for CVE-2013-3235: In the Linux kernel, net/tipc/socket.c prior to 3.9-rc7 does not initialize a certain data structure and a length variable, enabling local attackers to read sensitive data from kernel stack memory via crafted recvmsg/recvfrom. Affected scenario is local...

CVE-2013-3235

net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call...

Winamp 'AVI' File Multiple Heap-based Buffer Overflow Vulnerabilities

Winamp is prone to heap-based buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealPlayer Plus 14.0.4.53 RealAudio Integer Division

Exploit for windows platform in category local exploits Title : RealPlayer Plus 14.0.4.53 RealAudio Integer Division By Zero CVE : 2012-3235 References : http://service.real.com/realplayer/security/06292012player/en/ Auther : Senator of Pirates E-Mail : email protected FaceBook :...

APPLE-SA-2011-10-12-4 Safari 5.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...

CVE-2011-3235

CVE-2011-3235 affects WebKit as used by Apple iTunes prior to 10.5. The vulnerability allows man-in-the-middle attackers to trigger memory corruption and an application crash, potentially enabling arbitrary code execution via iTunes Store browsing vectors. The description notes a single, distinct...

CentOS Update for cyrus-imapd CESA-2009:1459 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-3235

CVE-2010-3235 (Formula Biff Record Vulnerability) is a remote-code-execution flaw in Excel’s handling of formula information. The Microsoft Excel Formula Biff Record parsing path can be corrupted by specially crafted Excel files, enabling arbitrary code execution when opened by a user. Affected p...

Microsoft Excel Biff Record PtgName Entries Code Execution (MS10-080; CVE-2010-3235)

Microsoft Excel is a popular spreadsheet application. A memory corruption vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly validate formula information upon opening a specially crafted Excel file. A remote...

SuSE 10 Security Update : Cyrus IMAPD (ZYPP Patch Number 6521)

This update fixes another buffer overflow in the Sieve code CVE-2009-3235. This can be exploited by users allowed to use their own sieve scripts to execute arbitrary code remotely. Additionally the handling of long headers was improved. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The tex...

Mandriva Linux Security Advisory : dovecot (MDVSA-2010:196)

A vulnerability was discovered and corrected in dovecot : Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary...

SLES10: Security update for Cyrus IMAPD

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cyrus-imapd cyrus-imapd-devel perl-Cyrus-IMAP perl-Cyrus-SIEVE-managesieve More details may also be found by searching for the SuSE Enterprise Server 10 patc...

SLES9: Security update for Cyrus IMAPD

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cyrus-imapd cyrus-imapd-devel perl-Cyrus-IMAP perl-Cyrus-SIEVE-managesieve For more information, please visit the referenced security advisories. More detail...

SuSE Security Summary SUSE-SR:2009:018

The remote host is missing updates announced in advisory SUSE-SR:2009:018. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

SLES11: Security update for Cyrus IMAPD

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cyrus-imapd perl-Cyrus-IMAP perl-Cyrus-SIEVE-managesieve More details may also be found by searching for the SuSE Enterprise Server 11 patch database located...

openSUSE Security Update : dovecot (dovecot-1366)

This update of dovecot fixes two buffer overflows in the sieve plug-in CVE-2009-2632, CVE-2009-3235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-1366. The text description of this...

openSUSE 10 Security Update : dovecot (dovecot-6539)

This update of dovecot fixes two buffer overflows in the sieve plug-in CVE-2009-2632, CVE-2009-3235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-6539. The text description of this...