196 matches found
RHEL 6 : qemu-kvm-rhev (RHSA-2015:1001)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1001 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the...
Check Point response to CVE-2015-3456 (VENOM)
Symptoms - A vulnerability in the virtual floppy drive code was discovered CVE-2015-3456. Solution The relevant fix for Threat Emulation gateway is already available and has been integrated in Threat Emulation engine version 24.990000010 refer to sk95235. Any Threat Emulation engine version that ...
qemu-kvm security update
1.5.3-86.el71.2 - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch bz1219269 - Resolves: bz1219269 EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw rhel-7.1.z...
SUSE-SU-2015:0896-1 Security update for qemu
qemu / kvm was updated to fix a security issue and some bugs. Security issue fixed: CVE-2015-3456: Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host. CVE-2015-1779: Fixed insufficient resource...
qemu, xen and VirtualBox OSE -- possible VM escape and code execution ("VENOM")
Jason Geffner, CrowdStrike Senior Security Researcher reports: VENOM, CVE-2015-3456, is a security vulnerability in the virtual floppy drive code used by many computer virtualization platforms. This vulnerability may allow an attacker to escape from the confines of an affected virtual machine VM...
CVE-2014-3456
CVE-2014-3456 is a cross-site scripting (XSS) vulnerability in GitLab Enterprise Edition (EE) 6.6.0, fixed in 6.6.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected sources confirm the affected product/version and the availability of...
Gentoo Security Advisory GLSA 201209-10 (calligra)
The remote host is missing updates announced in advisory GLSA 201209-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Fedora Update for calligra-l10n FEDORA-2012-11566
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
FreeBSD Ports: koffice
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Fedora Update for calligra FEDORA-2012-11566
Check for the Version of calligra OpenVAS Vulnerability Test Fedora Update for calligra FEDORA-2012-11566 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
FreeBSD Ports: koffice
The remote host is missing an update to the system as announced in the referenced advisory. VID aa4d3d73-ef17-11e1-b593-00269ef07d24 OpenVAS Vulnerability Test $ Description: Auto generated from VID aa4d3d73-ef17-11e1-b593-00269ef07d24 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD : Calligra, KOffice -- input validation failure (aa4d3d73-ef17-11e1-b593-00269ef07d24)
KDE Security Advisory reports : A flaw has been found which can allow malicious code to take advantage of an input validation failure in the Microsoft import filter in Calligra and KOffice. Exploitation can allow the attacker to gain control of the running process and execute code on its behalf...
Fedora 17 : calligra-2.5.0-2.fc17 / calligra-l10n-2.5.0-2.fc17 (2012-11566)
New stable release, which includes security fix for msword-odf import filter. See also: http://www.calligra.org/news/calligra-2-5-released/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Heap overflow
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...
CVE-2012-3456
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...
CVE-2012-3456
CVE-2012-3456 describes a heap-based buffer overflow in the read() path of styles.cpp within Calligra/KOffice's MS Word ODF import filter. A crafted ODF style could crash the application and potentially allow remote code execution. Affected version: Calligra 2.4.3 and earlier (same codebase as CV...
CVE-2012-3456
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...
CVE-2012-3456
creationtimestamp| type| source ---|---|--- 2012-08-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37576...
CVE-2010-3456
CVE-2010-3456 identifies a directory traversal vulnerability in EnergyScripts (ES) Simple Download 1.0. The issue occurs in download.php where a crafted file parameter containing .. can cause reading of arbitrary files, potentially exposing sensitive data. Multiple sources corroborate the descrip...