Adobe Reader 9.3.4 Multiple Memory Corruption - Security Advisory - SOS-10-003

Adobe Reader 9.3.4 Multiple Memory Corruption - Security Advisory - SOS-10-003 Release Date. 6-Oct-2010 Last Update. - Vendor Notification Date. 26-Jul-2010 Product. Adobe Reader Adobe Acrobat Platform. Microsoft Windows Affected versions. 9.3.4 verified and possibly others. Severity Rating. Medi...

CVE-2010-3630

CVE-2010-3630 affects Adobe Reader and Acrobat 9.x prior to 9.4 and 8.x prior to 8.2.5 on Windows and macOS. The vulnerability is described as unspecified with possible denial of service or arbitrary code execution via unknown vectors. Public advisories corroborate that specially crafted PDFs cou...

FreeBSD Ports: typo3

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] [DSA 1926-1] New TYPO3 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1926-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 4, 2009 http://www.debian.org/security/faq -...

CVE-2009-3630

TYPO3 Backend frame hijacking (CVE-2009-3630) affects the Backend subcomponent in TYPO3 up to specific early releases: 4.0.13 and earlier; 4.1.x before 4.1.13; 4.2.x before 4.2.10; and 4.3.x before 4.3beta2. Remote authenticated users could place arbitrary websites into TYPO3 backend framesets vi...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013177 within the Su...

Gentoo Security Advisory GLSA 200607-09 (wireshark ethereal)

The remote host is missing updates announced in advisory GLSA 200607-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200607-09 (wireshark ethereal)

The remote host is missing updates announced in advisory GLSA 200607-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3630

CVE-2008-3630 affects Apple Bonjour (mDNSResponder) for Windows prior to 1.0.5. The issue arises when an application uses the Bonjour API for unicast DNS: DNS transaction IDs and source ports are not randomized, making it easier for a remote attacker to spoof DNS responses. This is described as a...

Debian: Security Advisory (DSA-1127)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : ethereal (ZYPP Patch Number 1930)

This update fixes several security related bugs ranging from crashes to arbitrary code execution. CVE-2006-3627 / CVE-2006-3628 / CVE-2006-3629 / CVE-2006-3630 / CVE-2006-3631 / CVE-2006-3632 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE 10 Security Update : ethereal (ethereal-1932)

This update fixes several security related bugs ranging from crashes to arbitrary code execution. CVE-2006-3627, CVE-2006-3628, CVE-2006-3629, CVE-2006-3630, CVE-2006-3631, CVE-2006-3632 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Sql injection

Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script avtutorial 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 userid parameters, a different issue than CVE-2007-3630...

Debian DSA-1127-1 : ethereal - several vulnerabilities

Several remote vulnerabilities have been discovered in the Ethereal network sniffer, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3628 Ilja van Sprundel discovered that the FW-1 and MQ dissectors...

CentOS 3 / 4 : wireshark (CESA-2006:0602)

New Wireshark packages that fix various security vulnerabilities in Ethereal are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. In May 2006, Ethereal changed its name to...

wireshark security update

CentOS Errata and Security Advisory CESA-2006:0602 New Wireshark packages that fix various security vulnerabilities in Ethereal are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network...

CVE-2006-3630

Multiple off-by-one errors in Wireshark aka Ethereal 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the 1 NCP NMAS and 2 NDPS dissectors...

CVE-2006-3630

CVE-2006-3630 concerns off-by-one errors in Wireshark/Ethereal dissectors (NCP NMAS and NDPS) affecting versions 0.9.7 through 0.99.0. Connected sources corroborate existence of multiple Ethernet dissector flaws in Wireshark/Ethereal history, including off-by-one issues in NCP NMAS/NDPS, and note...

Security fix for the ALT Linux 9 package wireshark version 0.99.2-alt1

July 18, 2006 Sir Raorn 0.99.2-alt1 - 0.99.2 + CVE-2006-3627 + CVE-2006-3628 + CVE-2006-3628 + CVE-2006-3628 + CVE-2006-3628 + CVE-2006-3629 + CVE-2006-3630 + CVE-2006-3628 + CVE-2006-3631 + CVE-2006-3632 - Renaamed from ethereal to wireshark, added Obsoletes - Rediffed all patches - Updated...

CVE-2005-3630

Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives...