CVE-2011-3895

Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream...

CVE-2011-3895

CVE-2011-3895 is a heap-based buffer overflow in FFmpeg’s Vorbis decoder (libavcodec) that can be triggered by a crafted input stream, potentially causing a denial of service or other unspecified impact. The connected documents indicate FFmpeg vulnerabilities across multiple CVEs, including this ...

Stable Channel Update

The Stable channel has been updated to 15.0.874.120 for Windows, Mac, Linux and Chrome Frame platforms All Updated V8 - 3.5.10.23 Fix small print sizing issues issues: 102186, 82472, 102154 This new build also contains a new version of Flash which contains security fixes. Release Notes Mac Fixed...

CVE-2010-3895

esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitrary command name as the first argument...

CVE-2010-3895

esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitrary command name as the first argument...

IBM OmniFind - Local Privilege Escalation

Privilege escalation in two applications CVE-2010-3895 Root SUID bits are set for the applications »esRunCommand« and »estaskwrapper«. ------------------------------------------------------------------------- -rwsr-xr-x 1 root users ... /opt/IBM/es/bin/esRunCommand -rwsr-xr-x 1 root users...

BELL-CVE-2009-3895 CVE-2009-3895 does not affect BellSoft software

Bulletin has no description...

CVE-2009-3895

Heap-based buffer overflow in the exifentryfix function aka the tag fixup routine in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image. NOTE: some of these details are obtained from third party...

CVE-2009-3895

CVE-2009-3895 affects libexif 0.6.18, specifically the heap-based buffer overflow in the exif_entry_fix function (the tag fixup routine) in libexif/exif-entry.c. An attacker could exploit an invalid EXIF image to trigger a denial of service or potentially execute arbitrary code. The vulnerability...

CVE-2008-3895

LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3895

LILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

CVE-2008-3895

Removed by vendor...

CVE-2008-3895

CVE-2008-3895 affects the LILO boot loader (22.6.1 and earlier). The vulnerability arises because pre-boot authentication passwords are stored in the BIOS Keyboard buffer and this buffer is not cleared before/after use, allowing local users to read the physical memory locations and recover sensit...

Debian Security Advisory DSA 973-1 (otrs)

The remote host is missing an update to otrs announced via advisory DSA 973-1. Several vulnerabilities have been discovered in otrs, the Open Ticket Request System, that can be exploited remotely. The Common vulnerabilities and Exposures Project identifies the following problems: CVE-2005-3893...

SuSE 10 Security Update : gd (ZYPP Patch Number 3895)

This update fixes multiple integer overflows in the gd library. Specially crafted files could leverage them to at least crash gd based applications. CVE-2007-3472 / CVE-2007-3475 / CVE-2007-3476 / CVE-2007-3477 / CVE-2007-3478 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

CVE-2007-3895

CVE-2007-3895 describes a buffer overflow in Microsoft DirectShow (part of DirectX) across Windows DirectX 7.0–10.0. A remote attacker could trigger code execution by convincing a user to open a specially crafted WAV or AVI file. The issue arises from improper parsing within DirectX libraries han...

CVE-2005-3895

Open Ticket Request System OTRS 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail attachments as HTML in the browser when the queue moderator attempts to download the attachment, which allows remote attackers to execute arbitrary w...

CVE-2005-3895

OTRS vulnerability CVE-2005-3895 affects Open Ticket Request System versions 1.0.0–1.3.2 and 2.0.0–2.0.3. When AttachmentDownloadType is inline, text/html email attachments are rendered as HTML in the browser by the queue moderator during download, enabling remote execution of script/HTML (XSS). ...