CVE-2015-3735

CVE-2015-3735 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8; 7.x before 7.1.8; 8.x before 8.0.8). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption leading to an app crash. C...

CVE-2014-3735

ir4132.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service crash via a crafted .avi file...

CVE-2014-3735

ir4132.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service crash via a crafted .avi file...

CVE-2014-3735

CVE-2014-3735 affects ir41_32.ax 4.51.16.3 in Intel Indeo Video 4.5; it is a memory corruption triggered by a crafted .avi file, enabling remote crash/DoS. The Packet Storm page provides exploit details for this vulnerability. No patch/version remediation or vendor details are documented in the p...

Intel Ideo Video 4.5 Memory Corruption

Exploit Title: Intel Ideo video 4.5 ir4132.ax version 4.51.16.3 Memory Corruption Date: 2014/05/12 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.microsoft.com Software Link: http://www.dll4you.com/files/ir4132.ax.html Version:...

Oracle Linux 4 : thunderbird (ELSA-2007-0723)

From Red Hat Security Advisory 2007:0723 : Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone...

CVE-2013-3735

The CVE-2013-3735 issue affects the Zend Engine in PHP prior to 5.4.16 RC1 and 5.5.0 prior to RC2. The bug stems from the engine not reliably determining whether a parser error occurred, allowing context-dependent attackers to trigger a denial of service via a crafted function definition in share...

CVE-2013-3735

The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly determine whether a parser error occurred, which allows context-dependent attackers to cause a denial of service memory consumption and application crash via a crafted function definition, as demonstrated by an atta...

CVE-2012-3735

CVE-2012-3735 affects Apple iOS prior to 6, where the Passcode Lock display logic on the lock screen can reveal the most recently used third‑party app when the user interacts with the Slide to Power Off control. Root cause: a logic issue in lock state management. Impact: a physically proximate at...

Scientific Linux Security Update : seamonkey on SL4.x, SL3.x i386/x86_64

Several flaws were found in the way SeaMonkey processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause SeaMonkey to crash or potentially execute arbitrary code as the user running SeaMonkey. CVE-2007-3734, CVE-2007-3735, CVE-2007-3737, CVE-2007-3738...

Scientific Linux Security Update : firefox on SL5.x, SL4.x, SL3.x i386/x86_64

Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox. CVE-2007-3734, CVE-2007-3735, CVE-2007-3737, CVE-2007-3738 Sever...

CVE-2012-2970

The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service device hang via network traffic to port 1 1641, 2 3734, or 3 3735...

CVE-2011-3735

CVE-2011-3735 affects Escort Agency CMS (escort-agency-cms). The vulnerability allows remote attackers to obtain sensitive information by sending crafted array parameters to a PHP file, causing an error message that reveals the installation path (as demonstrated by makethumb.php and related files...

CVE-2010-3735

CVE-2010-3735 affects IBM DB2 UDB 9.5 before FP6a. The vulnerability lies in the Query Compiler, Rewrite, Optimizer component, where remote authenticated users can cause a denial of service by sending a crafted query involving certain UNION ALL views, resulting in an indefinitely large amount of ...

CVE-2009-3735

The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote...

CVE-2009-3735

The CVE-2009-3735 entry concerns Panda ActiveScan: the ActiveScan Installer ActiveX control in as2stubie.dll (prior to v1.3.3.0) downloads as2guiie.cab from an arbitrary URL and does not verify the downloaded archive’s digital signature before installation, enabling remote code execution via a UR...

Mandriva Update for mozilla-firefox MDKSA-2007:152 (mozilla-firefox)

Check for the Version of mozilla-firefox OpenVAS Vulnerability Test Mandriva Update for mozilla-firefox MDKSA-2007:152 mozilla-firefox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Mandriva Update for mozilla-thunderbird MDVSA-2007:047 (mozilla-thunderbird)

Check for the Version of mozilla-thunderbird OpenVAS Vulnerability Test Mandriva Update for mozilla-thunderbird MDVSA-2007:047 mozilla-thunderbird Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Ubuntu: Security Advisory (USN-503-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-490-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...