Fedora 22 : mingw-LibRaw-0.16.2-1.fc22 (2015-8444)

Update to version 0.16.2, see http://www.libraw.org/downloadchangelog for details. Update to version 0.16.1, see http://www.libraw.org/downloadchangelog for details. Security fix for CVE-2015-3885. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 20 : mingw-LibRaw-0.15.4-5.fc20 (2015-8266)

Security fix for CVE-2015-3885 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 22 : mingw-LibRaw-0.16.1-1.fc22 (2015-8085)

Update to version 0.16.1, see http://www.libraw.org/downloadchangelog for details. Security fix for CVE-2015-3885. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

openSUSE Security Update : libraw (openSUSE-2015-378)

The libraw library was updated to fix one security issue. The following vulnerability was fixed : - boo930683: CVE-2015-3885: dcraw/libraw: input sanitization errors %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2015-3885

Integer overflow in the ljpegstart function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service crash via a crafted image, which triggers a buffer overflow, related to the len variable...

CVE-2015-3885

Integer overflow in the ljpegstart function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service crash via a crafted image, which triggers a buffer overflow, related to the len variable...

CVE-2015-3885

CVE-2015-3885 affects dcraw/libraw: integer overflow in ljpeg_start (len) causing DoS via crafted image. Documented in multiple advisories (Ubuntu USN-3492-1; SUSE/SLES updates; Red Hat dcraw advisories). Affected components include dcraw and LibRaw; remediation typically via vendor security upda...

CVE-2015-3885

Integer overflow in the ljpegstart function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service crash via a crafted image, which triggers a buffer overflow, related to the len variable...

Updated darktable packages fix CVE-2015-3885

Updated darktable package fixes security vulnerability The dcraw tool bundled in darktable's libraw copy suffers from an integer overflow condition which leads to a buffer overflow. A maliciously crafted raw image file can be used to trigger the vulnerability, causing a Denial of Service conditio...

Updated rawtherapee packages fix CVE-2015-3885

Updated rawtherapee package fixes security vulnerability: The dcraw tool suffers from an integer overflow condition which lead to a buffer overflow. The vulnerability concerns the 'len' variable, parsed without validation from opened images, used in the ljpegstart function. A maliciously crafted...

Updated ufraw & dcraw packages fix CVE-2015-3885

Updated dcraw and ufraw packages fix security vulnerability: The dcraw tool suffers from an integer overflow condition which lead to a buffer overflow. The vulnerability concerns the 'len' variable, parsed without validation from opened images, used in the ljpegstart function. A maliciously craft...

CVE-2014-3885

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-3885

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-3885

CVE-2014-3885 is an XSS vulnerability in Webmin prior to 1.690. It affects authenticated users who can inject arbitrary web script or HTML via unspecified vectors. The issue is tied to Webmin versions

CVE-2013-3885

CVE-2013-3885 affects Microsoft Internet Explorer 10 and is described as a memory corruption vulnerability that enables remote code execution or a denial of service when a user visits a crafted web site. It is part of a family of IE10 memory-corruption CVEs (CVE-2013-3872, -3873, -3882, -3885) wi...

Microsoft Internet Explorer Memory Corruption (MS13-080; CVE-2013-3885)

A remote code execution vulnerability has been reported in Internet Explorer...

Microsoft Internet Explorer CVE-2013-3885 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Internet Explorer 10 is affected...

CVE-2012-3885

CVE-2012-3885 relates to AirDroid 1.0.4 beta where the default configuration uses a four-character alphanumeric password, enabling brute-force access via the web interface. The vulnerability is reflected in multiple sources (NVD entry, Red Hat advisory, and SecurityVulns records) with a high impa...

Apple Safari Webkit Multiple Vulnerabilities - March12 (Windows)

The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafariwebkitmultvulnmar12win.nasl 5888 2017-04-07 09:01:53Z teissa $ Apple Safari Webkit Multiple Vulnerabilities - March12 Windows Authors: Rachana Shetty Copyrigh...

Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...