SuSE 10 Security Update : gimp (ZYPP Patch Number 8251)

This update of The Gimp fixes a heap overflow that could have been exploited by attackers to cause a Denial of Service application crash or even to potentially execute arbitrary code. CVE-2012-3402 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...

RedHat Update for gimp RHSA-2012:1181-01

Check for the Version of gimp OpenVAS Vulnerability Test RedHat Update for gimp RHSA-2012:1181-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CentOS 5 : gimp (CESA-2012:1181)

Updated gimp packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Scientific Linux Security Update : gimp on SL5.x i386/x86_64 (20120820)

The GIMP GNU Image Manipulation Program is an image composition and editing program. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the GIMP's Adobe Photoshop PSD image file plug-in. An attacker could create a specially crafted PSD image file that, when...

Microsoft Silverlight Code Execution Vulnerabilities - 2681578 (Mac OS X)

This host is missing a critical security update according to Microsoft Bulletin MS12-034. OpenVAS Vulnerability Test $Id: secpodms12-034macosx.nasl 5940 2017-04-12 09:02:05Z teissa $ Microsoft Silverlight Code Execution Vulnerabilities - 2681578 Mac OS X Authors: Rachana Shetty Copyright: Copyrig...

Microsoft Security Update For Microsoft Office, .NET Framework, and Silverlight (2681578)

This host is missing a critical security update according to Microsoft Bulletin MS12-034. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-034: Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight (2681578)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the Win32k TrueType font parsing engine that allows an unauthenticated, remote attacker to execute arbitrary code by convincing a user to open a Word document containi...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2567053)

This host is missing a critical security update according to Microsoft Bulletin MS11-087. OpenVAS Vulnerability Test $Id: secpodms11-087.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Remote Code Execution Vulnerability 2639417 Authors: Madhuri D Copyright: Copyright c 2011...

MS11-087: Vulnerability in Windows kernel-mode drivers could allow remote code execution: December 13, 2011

None None...

MS11-087: Vulnerability in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2639417)

The remote host is running a version of the Windows kernel that is affected by a remote code execution vulnerability. Specially crafted TrueType fonts are not properly handled, which could allow arbitrary code execution in kernel mode. A remote attacker could exploit this vulnerability by trickin...

Windows Gather Forensics Duqu Registry Check

This module searches for CVE-2011-3402 Duqu related registry artifacts. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Forensics Duqu Registry Check', 'Description' = %q This...

Microsoft Windows TrueType Font File Parsing Code Execution (CVE-2011-3402)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper bounds checking when parsing specially crafted TrueType Font TTF files. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted TTF...

Stars Attack on Iran Was Early Version of Duqu

A few months after the hysteria around Stuxnet had died down, officials in Iran announced in April that some sensitive systems in the government’s networks had been attacked by a new piece of malware, known then as Stars. It now appears that attack was, in fact, the first appearance of an early...

CVE-2011-3402

Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary...

CVE-2011-3402

CVE-2011-3402 is a Windows kernel‑mode vulnerability in the TrueType font parsing engine of win32k.sys that allows remote code execution via crafted font data in Word/web content. The issue affects multiple Windows versions (XP/Server 2003, Vista/Server 2008, Windows 7 and Windows 7/Server 2008 R...

Microsoft Windows TrueType font parsing vulnerability

Overview A vulnerability in the Microsoft Windows TrueType font parsing component could allow an attacker to run arbitrary code in kernel mode. This vulnerability is reportedly being exploited by malicious software in the wild known as Duqu. Description The Microsoft Windows kernel includes a...

CVE-2010-3402

CVE-2010-3402 affects IDM Computer Solutions UltraEdit (notably v16.20.0.1009 and v16.10.0.1036). The vulnerability stems from an untrusted search path that enables DLL hijacking via a Trojan horse dwmapi.dll placed in the same folder as a bin, cpp, css, c, dat, hpp, html, h, ini, java, log, mak,...

KLA10376 ACE vulnerability in UltraEdit

An untrusted path vulnerability was found in UltraEdit. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally and possibly remotely via a library hijack. Original advisories - Related products UltraEdit CVE list CVE-2010-3402...

CVE-2009-3402

CVE-2009-3402 affects the Oracle Applications Framework in Oracle E-Business Suite, specifically versions 11.5.10.2, 12.0.6, and 12.1.1. The description notes an unspecified vulnerability that could allow remote authenticated users to affect confidentiality via unknown vectors. Oracle’s Oct 2009 ...

CVE-2008-3402

CVE-2008-3402 affects HIOX Browser Statistics (HBS) 2.0. It uses PHP remote file inclusion via a URL in the hm parameter to hioxupdate.php and hioxstats.php, enabling remote code execution. The NVD/NVD-derived entry shows a CVSSv2 base score of 7.5 (HIGH) with NETWORK attack vector and LOW attack...