161 matches found
openSUSE Security Update : kvm (kvm-1547)
This update of QEMU KVM fixes the following bugs : - CVE-2009-3616: CVSS v2 Base Score: 8.5 use-after-free bug in VNC code which might be used to execute code on the host system injected from the guest system - CVE-2009-3638: CVSS v2 Base Score: 7.2 integer overflow in kvmdevioctlgetsupportedcpui...
Fedora Core 10 FEDORA-2009-11038 (kernel)
The remote host is missing an update to kernel announced via advisory FEDORA-2009-11038. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
Fedora Core 11 FEDORA-2009-11032 (kernel)
The remote host is missing an update to kernel announced via advisory FEDORA-2009-11032. OpenVAS Vulnerability Test $Id: fcore200911032.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11032 kernel Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 11 FEDORA-2009-11032 (kernel)
The remote host is missing an update to kernel announced via advisory FEDORA-2009-11032. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
Fedora Core 10 FEDORA-2009-11038 (kernel)
The remote host is missing an update to kernel announced via advisory FEDORA-2009-11038. OpenVAS Vulnerability Test $Id: fcore200911038.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11038 kernel Authors: Thomas Reinke Copyright: Copyright c 2009...
Debian: Security Advisory (DSA-1927-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1927-1] New Linux 2.6.26 packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1927-1 [email protected] http://www.debian.org/security/ dann frazier November 5, 2009 http://www.debian.org/security/faq -...
Fedora 11 : kernel-2.6.30.9-96.fc11 (2009-11032)
Tue Nov 3 2009 Kyle McMartin 2.6.30.9-96 - fs/pipe.c: fix NULL pointer dereference CVE-2009-3547 - Sun Oct 25 2009 Chuck Ebbert 2.6.30.9-95 - Disable the stack protector on functions that don't have onstack arrays. - Thu Oct 22 2009 Chuck Ebbert 2.6.30.9-94 - Fix overflow in KVM cpuid code...
[SECURITY] [DSA 1927-1] New Linux 2.6.26 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1927-1 [email protected] http://www.debian.org/security/ dann frazier November 5, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
DSA-1927-1 linux-2.6 - several vulnerabilities
Bulletin has no description...
CVE-2009-3638
Integer overflow in the kvmdevioctlgetsupportedcpuid function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.31.4 allows local users to have an unspecified impact via a KVMGETSUPPORTEDCPUID request to the kvmarchdevioctl function...
CVE-2009-3638
CVE-2009-3638 affects the Linux kernel KVM subsystem: integer overflow in kvm_dev_ioctl_get_supported_cpuid (arch/x86/kvm/x86.c) allows local users to trigger an unspecified impact via KVM_GET_SUPPORTED_CPUID requests. Affected versions are Linux kernels before 2.6.31.4. Remediation is to upgrade...
Apple Mac OS X Java插件'file://' URL处理远程代码执行漏洞
BUGTRAQ ID: 31380 CVE ID：CVE-2008-3638 CNCVE ID：CNCVE-20083638 Apple Mac OS X是一款商业性质的操作系统。 Apple Mac OS X不正确处理特殊构建的Java Applet，远程攻击者可以利用漏洞以应用程序上下文执行任意可执行程序。 Java插件没有阻止从file:// URL方式启动，构建恶意的Java Applet，诱使用户装载，可导致'file://' URL装载目标系统上的任意文件，导致任意代码执行。 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server...
CVE-2008-3638
The CVE-2008-3638 issue concerns Apple Mac OS X environments where the Java plugin allowed applets to access file:// URLs, enabling remote execution of arbitrary code. Publicly described affected platforms include Mac OS X 10.5.4 and 10.5.5, where the vulnerability stems from Java applet handling...
Buffer overflow
Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry. NOTE: this might overlap CVE-2007-3638...
CVE-2007-3638
CVE-2007-3638 is linked to a Yahoo! Messenger 8.1 buffer overflow issue. Related connected records (CVE-2007-3928) describe a buffer overflow allowing remote code execution via a long e-mail address in an address book entry by user-assisted remote authenticated users; this might overlap CVE-2007-...
CVE-2006-3638
CVE-2006-3638 (COM Object Instantiation Memory Corruption) affects Microsoft Internet Explorer (notably IE 5.01/6) via instantiation of COM objects not intended for IE, leading to remote code execution and potential memory corruption. The vulnerability arises when the browser instantiates certain...
CVE-2005-3638
Affected software: Ekinboard 1.0.3. Vulnerability: Cross-site scripting (XSS) via (1) id parameter in profile.php and (2) post titles. Impact: allows remote attackers to inject arbitrary web script or HTML. Exploitation/Details: Documented in CVE-2005-3638 with confirmed vectors on profile and po...
CVE-2022-3638
Summary of CVE-2022-3638 in connected sources: The CVE-ID entry was withdrawn by the CNA and explicitly notes it is not a security issue. Nevertheless, connected advisories and scanners reference nginx-related issues and package versions; some sources (CBLMariner) list nginx versions affected (e....
