Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3381-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3381-1 advisory. Peter Pi discovered that the colormap handling for frame buffer devices in the Linux kernel contained an integer overflow. A local attacker could use thi...

CVE-2017-3381

The CVE-2017-3381 entry describes a vulnerability in Oracle E-Business Suite’s Oracle Advanced Outbound Telephony component (UI subcomponent). Affected versions are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. The flaw enables an unauthenticated attacker with network access via HTTP...

CVE-2016-3381

Microsoft Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, Office Compatibility Pack SP3, and Excel Viewer are affected by CVE-2016-3381, a memory-corruption vulnerability in Office components that allows remote code execution via a crafted document. The CNVD entry corroborates a remote att...

Microsoft Windows Excel Viewer Remote Code Execution Vulnerabilities (3185852)

This host is missing a critical security update according to Microsoft Bulletin MS16-107. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-107: Security Update for Microsoft Office (3185852)

The Microsoft Office application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the the Click-to-Run C2R components due to improper handling of objects in memory. An...

Microsoft Office Memory Corruption (MS16-107: CVE-2016-3381)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

[SECURITY] [DSA 3381-2] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3381-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 1, 2015 https://www.debian.org/security/faq -...

Debian DSA-3381-1 : openjdk-7 - security update

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

[SECURITY] [DSA 3381-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3381-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 27, 2015 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3381-1 (openjdk-7 - security update)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, or denial of service. OpenVAS Vulnerability Test $Id: deb3381.nasl 6609 2017-07-07 12:05:59Z...

Debian: Security Advisory (DSA-3381-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3381

Cross-site scripting XSS vulnerability in the Node basket module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3381

CVE-2015-3381 (Drupal Node basket module) describes a cross-site scripting (XSS) flaw in the Node basket module for Drupal. The vulnerability permits remote authenticated users to inject arbitrary web script or HTML via unspecified vectors due to insufficient input sanitization. Affected versions...

Cisco Email Security Appliance ZIP File Filter Bypass

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by a security bypass vulnerability in which the ZIP inspection engine of AsyncOS does not properly analyze files, thus allowing a remote, unauthenticated attacker to...

CVE-2014-3381

CVE-2014-3381 affects Cisco AsyncOS ZIP filtering on Cisco Email Security Appliance (ESA) version 8.5 and earlier, where the ZIP inspection engine does not properly analyze ZIP archives, enabling a remote attacker to bypass malware filtering by delivering a crafted ZIP file. The root cause is imp...

Oracle Linux 5 : Moderate: / gdm (ELSA-2007-0777)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-0777 advisory. 2.16.0-31.0.1 - CVE-2007-3381 Resolves: 247659 2.16.0-31 - change 200d character to 200c character in ml.po Tenable has extracted the preceding description bloc...

CVE-2013-3381

Cisco Hosted Collaboration Mediation is affected by CVE-2013-3381. The vulnerability allows an unauthenticated, remote attacker to cause excessive CPU utilization by sending malformed UDP packets to UDP port 162. The underlying issue is insufficient optimization of resources when flooded with mal...

CVE-2012-3381

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2012-3381

sfcb in sblim-sfcb places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2012-3381

The CVE-2012-3381 issue affects the sblim-sfcb component, where sfcb places a zero-length directory name in LD_LIBRARY_PATH, enabling local privilege escalation via a Trojan horse shared library in the current working directory. Documented impact is local userPrivilege elevation with partial conf...