Debian DSA-3910-1 : knot - security update

Clement Berthaux from Synaktiv discovered a signature forgery vulnerability in knot, an authoritative-only DNS server. This vulnerability allows an attacker to bypass TSIG authentication by sending crafted DNS packets to a server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

Debian Security Advisory DSA 3910-1 (knot - security update)

Clement Berthaux from Synaktiv discovered a signature forgery vulnerability in knot, an authoritative-only DNS server. This vulnerability allows an attacker to bypass TSIG authentication by sending crafted DNS packets to a server. OpenVAS Vulnerability Test $Id: deb3910.nasl 6764 2017-07-20...

Debian: Security Advisory (DSA-3910-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-3910

services/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30148546...

CVE-2016-3910

CVE-2016-3910 affects Android Mediaserver’s SoundTriggerHwService.cpp in the MediaServer component. The issue allows a local attacker to gain privileges by convincing the user to run a crafted application. Affected versions include Android 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, 6.x prior to ...

Google Chrome Multiple Vulnerabilities - 02 - (May 2015) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

USN-2610-1: Oxide vulnerabilities

Several security issues were discovered in the DOM implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to bypass Same Origin Policy restrictions. CVE-2015-1253, CVE-2015-1254 A use-after-free was discovered in the...

CVE-2014-3910

Summary: CVE-2014-3910 affects EmFTP (EmFTP Standard and EmFTP Professional). A flaw in EmFTP’s file-loading process allows an unintended executable to be loaded when attempting to read a file that has no extension, potentially leading to arbitrary code execution with the application’s privileges...

openSUSE Security Update : v8 / chromium (openSUSE-2011-93)

Chromium update to to 18.0.972 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-93. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...

CVE-2013-3910

Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

MS13-088: Cumulative Security Update for Internet Explorer (2888505)

The remote host is missing Internet Explorer IE Security Update 2888505. The installed version of IE is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid7084...

CVE-2013-3910

Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2013-3910

CVE-2013-3910 is an Internet Explorer memory corruption race condition exploited via a Use-After-Free in the CSelectTracker handling. The ZDI-13-264 advisory specifies that adversaries can obtain remote code execution by enticing a user to visit a crafted page that manipulates document elements t...

Microsoft Internet Explorer CVE-2013-3910 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Internet Explorer 6, 7, 8, and 9 are...

Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3910)

A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Gentoo Security Advisory GLSA 201201-03 (chromium v8)

The remote host is missing updates announced in advisory GLSA 201201-03. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Google Chrome Multiple Vulnerabilities - December11 (Linux)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulndec11lin.nasl 7029 2017-08-31 11:51:40Z teissa $ Google Chrome Multiple Vulnerabilities - December11 Linux Authors: Rachana Shetty Copyright: Copyright c 20...

Google Chrome Multiple Vulnerabilities - December11 (Windows)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulndec11win.nasl 7052 2017-09-04 11:50:51Z teissa $ Google Chrome Multiple Vulnerabilities - December11 Windows Authors: Rachana Shetty Copyright: Copyright c...

Google Chrome < 16.0.912.63 Multiple Vulnerabilities

Binary data 6108.pasl...

CVE-2011-3910

CVE-2011-3910 concerns Google Chrome/Chromium prior to 16.0.912.63, where improper handling of YUV video frames could enable a remote attacker to trigger an out-of-bounds read and cause a denial of service. The connected advisories indicate this vulnerability is addressed by updating Chromium to ...