CVE-2018-3666

Intel Smart Sound Technology driver vulnerable to local privilege escalation (CVE-2018-3666) due to non-paged pool overflow, with variants affecting additional issues (buffer overflow and system calls) in versions prior to 9.21.00.3541. The Intel advisory and related Lenovo/HP documents confirm t...

Ubuntu 16.04 LTS : Oslo middleware vulnerability (USN-3666-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3666-1 advisory. Divya K Konoor discovered Oslo middleware was vulnerable to an information disclosure. A local attacker could exploit this flaw to obtain sensitive information fr...

Debian DSA-3666-1 : mysql-5.5 - security update

Dawid Golunski discovered that the mysqldsafe wrapper provided by the MySQL database server insufficiently restricted the load path for custom malloc implementations, which could result in privilege escalation. The vulnerability was addressed by upgrading MySQL to the new upstream version 5.5.52,...

Debian Security Advisory DSA 3666-1 (mysql-5.5 - security update)

Dawid Golunski discovered that the mysqldsafe wrapper provided by the MySQL database server insufficiently restricted the load path for custom malloc implementations, which could result in privilege escalation. The vulnerability was addressed by upgrading MySQL to the new upstream version 5.5.52,...

Debian: Security Advisory (DSA-3666-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple QuickTime < 7.7.7 Multiple Vulnerabilities

Binary data 9304.prm...

Jenkins Multiple Vulnerabilities (Oct 2014) - Windows

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...

APPLE-SA-2015-06-30-5 QuickTime 7.7.7

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-06-30-5 QuickTime 7.7.7 QuickTime 7.7.7 is now available and addresses the following: QT Media Foundation Available for: Windows 7 and Windows Vista Impact: Processing a maliciously crafted file may lead to an unexpected application...

CVE-2015-3666

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663,...

Memory corruption

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file, a different vulnerability than CVE-2015-3662, CVE-2015-3663, CVE-2015-3666,...

Memory corruption

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663,...

CVE-2015-3666

CVE-2015-3666 affects Apple QuickTime’s QT Media Foundation prior to 7.7.7 (on OS X

KLA10621 Multiple vulnerabilities in Apple QuickTime

Memory corruption vulnerabilities were found in Apple QuickTime. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed file. Original advisories Apple advisory Exploitatio...

com.amazonaws:codedeploy (1.15), com.aspectsecurity.automationservices.plugins.jenkins:ibm-security-appscansource-scanner (>=1.0.3, <=1.0.5) +332 more potentially affected by CVE-2014-3666 via org.jenkins-ci.main:jenkins-core (>=1.566, <=1.582)

org.jenkins-ci.main:jenkins-core MAVEN version =1.566, =1.0.3, =1.0.0, =2.2.0, =2.0, =8.5.0, =1.2, =1.29, =1.0, =1.0, =1.00, =1.2 and more Source cves: CVE-2014-3666 Source advisory: MEND:CVE-2014-3666...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), biz.neustar.jenkins.plugins:packer (>=1.0, <=1.4) +1013 more potentially affected by CVE-2014-3666 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.565.2)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0, =0.0.1, =0.9, =1.3, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =2.0.6 - com.cisco.step.jenkins.plugins:jenkow-parent 0.1 and more Source cves: CVE-2014-3666 Source advisory: MEND:CVE-2014-3666...

CVE-2014-3666

CVE-2014-3666 affects Jenkins and Jenkins Enterprise via the CLI channel. The vulnerability allows remote code execution when handling a crafted packet sent over the CLI, applicable to Jenkins before 1.583 and LTS before 1.565.3. The NVD entry cites a base score of 7.5 (HIGH) with network attack ...

FreeBSD : jenkins -- remote execution, privilege escalation, XSS, password exposure, ACL hole, DoS (549a2771-49cc-11e4-ae2c-c80aa9043978)

Jenkins Security Advisory : Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution an...

jenkins: multiple issues

SECURITY-87/CVE-2014-3661 anonymous DoS attack through CLI handshake This vulnerability allows unauthenticated users with access to Jenkins' HTTP/HTTPS port to mount a DoS attack on Jenkins through thread exhaustion. - SECURITY-110/CVE-2014-3662 User name discovery Anonymous users can test if the...

CVE-2013-3666

CVE-2013-3666 affects LG’s Hidden Menu component on Android for the LG Optimus G E973. The vulnerability allows physically proximate attackers to execute shell commands by entering USB Debugging mode and using adb to establish a USB connection, dialing 3845#*973#, navigating to WLAN Test &gt; Wi‑...

SMS Extortion Trojan Targeting Apple Machines

In yet another blow to the tenuous false sense of security among Apple users, the Russian antivirus firm Dr. Web has uncovered what it claims is a first-of-its-kind fake installer Trojan targeting Mac machines and extorting their users with SMS fraud. Trojan.SMSSend.3666 is the Mac variant within...