xdelta: User-assisted execution of arbitrary code

Background Xdelta is a C library and command-line tool for delta compression using VCDIFF/RFC 3284 streams. Description A buffer overflow can be triggered within xdelta when ran against a malicious input file. Impact A remote attacker could coerce the victim to run xdelta against a malicious inpu...

CVE-2016-3284

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...

CVE-2016-3284

CVE-2016-3284 affects Microsoft Excel components across numerous products (Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016; Excel for Mac 2011/2016; Office Compatibility Pack SP3; Excel Viewer). Root cause is memory corruption when processing crafted Office documents, enabling remote code e...

Microsoft Windows Excel Viewer Remote Code Execution Vulnerability (3170008)

This host is missing an important security update according to Microsoft Bulletin MS16-088. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Memory Corruption (MS16-088: CVE-2016-3284)

A memory corruption vulnerability exists in Microsoft Office Excel. The vulnerability is due to an error in the way Microsoft Office Excel improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially...

CVE-2015-3284

pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands...

CVE-2015-3284

OpenAFS 1.6.x before 1.6.13 is affected by CVE-2015-3284 where local users can read kernel memory via crafted pioctls. Root cause: vulnerability in pioctls handling exposes kernel memory. Public references note this CVE alongside related issues in the same OpenAFS update set (CVE-2015-3282/3283/3...

[SECURITY] [DSA 3320-1] openafs security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...

Scientific Linux Security Update : openafs on SL5.x, SL6.x, SL7.x i386/x86_64 (20150730)

All server platforms Fix for CVE-2015-3282: vos leaks stack data onto the wire in the clear when creating vldb entries Workaround for CVE-2015-3283: bos commands can be spoofed, including some which alter server state Disabled searching the VLDB by volume name regular expression to avoid possible...

[SECURITY] [DSA 3320-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3320-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...

Cisco IOS XE PPPoE Packet DoS (CSCuo55180)

According to its self-reported version, the remote IOS device is affected by a denial of service vulnerability. The issue is due to improper processing of malformed PPPoE packets. A remote attacker, with a specially crafted PPPoE packet, could cause the device to reboot. TRUSTED...

CVE-2014-3284

Cisco IOS XE on ASR1000 devices with PPPoE termination enabled is vulnerable to a DoS via malformed PPPoE packets, causing a device reload. The issue stems from improper PPPoE processing and can be triggered remotely by an attacker in the same broadcast/collision domain. Multiple sources confirm ...

CVE-2014-3284

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service device reload via a malformed PPPoE packet, aka Bug ID CSCuo55180...

CVE-2013-3284

CVE-2013-3284 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2013-3284

...

HP LeftHand Virtual SAN Appliance Hydra Login Code Execution (CVE-2012-3284)

A Code Execution vulnerability has been reported in HP LeftHand Virtual SAN Appliance...

CVE-2012-3284

HP LeftHand Virtual SAN Appliance Hydra SNMP Remote Code Execution (CVE-2012-3284) affects hydra service prior to version 10.0. The vulnerability exists in the SNMP processing path (snmp.module!OnSet) listening on TCP 13838, allowing unauthenticated remote code execution with root privileges by s...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3276 / 3280 / 3284)

This SUSE Linux Enterprise 11 Service Pack 1 kernel contains various security fixes and lots of other bugfixes. The following security issues were fixed : - local users could crash the system by causing a NULL deref in the keyctlsessiontoparent function. CVE-2010-2960 - local users could crash th...

[security bulletin] HPSBMA02578 SSRT100069 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02514929 Version: 1 HPSBMA02578 SSRT100069 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote Information Disclosure NOTICE: The information in this Security Bulletin should ...