107 matches found
openSUSE Security Update : typo3 (openSUSE-2016-959)
Important security fixes for vulnerabilities in typo3 which can be used for Cross-Site Scripting or Denial of Service attacks or for authentication bypassing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
openSUSE: Security Advisory for vlc (openSUSE-SU-2016:1651-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : vlc (openSUSE-2016-755)
This update for vlc to version 2.1.6 fixes the following issues : These CVE were fixed : - CVE-2016-5108: Reject invalid QuickTime IMA files boo984382. - CVE-2016-3941: Heap overflow in processing wav files boo973354. These security issues without were fixed : - Fix heap overflow in decomp stream...
Security update for vlc (important)
This update for vlc to version 2.1.6 fixes the following issues: These CVE were fixed: - CVE-2016-5108: Reject invalid QuickTime IMA files boo984382. - CVE-2016-3941: Heap overflow in processing wav files boo973354. These security issues without were fixed: - Fix heap overflow in decomp stream...
CVE-2016-3941
CVE-2016-3941 affects VideoLAN VLC media player prior to 2.2.0. The issue is a buffer/heap overflow in the AStreamPeekStream function (input/stream.c) that can be triggered by a crafted WAV file, enabling a denial of service (crash) via a seek across EOF. OpenSUSE advisories indicate the CVE was ...
KLA10791 Buffer overflow vulnerability in VLC media player
Buffer overflow vulnerability was found in VLC media player. By exploiting this vulnerability malicious users can cause a denial of service crash. This vulnerability can be exploited remotely via a crafted wav file. Technical details This vulnerability is in the AStreamPeekStream function in...
VLC Media Player < 2.2.0 Multiple Vulnerabilities
Binary data 9266.prm...
openSUSE Security Update : typo3-cms-4_5 (openSUSE-SU-2014:0813-1)
typo3-cms-45 was updated to version 4.5.34 to fix eight security vulnerabilities and several other bugs. These security problems where fixed : - Add trusted HTTPHOST configuration CVE-2014-3941 - XSS in old extension manager information function CVE-2014-3943 - XSS in new content element wizard...
Multiple Vulnerabilities in TYPO3 CMS
It has been discovered that TYPO3 CMS is vulnerable to Cross-Site Scripting, Insecure Unserialize, Improper Session Invalidation, Authentication Bypass, Information Disclosure and Host Spoofing. Component Type: TYPO3 CMS Vulnerability Types: Cross-Site Scripting, Insecure Unserialize, Improper...
XnView 2.x < 2.13 Multiple Buffer Overflows
The version of XnView 2.x installed on the remote Windows host is earlier than 2.13. It is, therefore, reportedly affected by the following buffer overflow vulnerabilities: - A remote, heap-based buffer overflow vulnerability exists due to an error in the 'xnview.exe' file when processing BMP...
CVE-2011-3941
The decodemb function in libavcodec/errorresilience.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via vectors related to an uninitialized block index, which triggers an out-of-bounds write...
CVE-2011-3941
FFmpeg vulnerability CVE-2011-3941: The decode_mb function in libavcodec/error_resilience.c enables an out-of-bounds write due to an uninitialized block index in FFmpeg before version 0.10. The issue is triggered by processing certain streams, with the CVE description noting an unspecified impact...
Cisco WebEx WRF Player Multiple Buffer Overflows (cisco-sa-20121010-webex)
The version of Cisco WebEx WRF Player installed on the remote host has multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a malicious WRF file, resulting in arbitrary code execution. C Tenable Network Security, Inc...
CVE-2012-3941
CVE-2012-3941 concerns the Cisco WebEx Recording Format (WRF) Player. The advisory and CVE records describe heap/buffer overflow vulnerabilities in the WRF Player, exploitable via a crafted WRF file to achieve remote code execution. Affected versions include WebEx WRF Player on T27 prior to LD SP...
SuSE 11.1 Security Update : dbus (SAT Patch Number 3941)
Local users could crash the D-Bus daemon by sending a specially crafted message. CVE-2010-4352 Also RPM requirements were adjusted to make appliance installations work better. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...
Microsoft Windows "Win32k.sys" 驱动程序多个安全漏洞(MS10-098)
CVE ID: CVE-2010-3943,CVE-2010-3944,CVE-2010-3939,CVE-2010-3940,CVE-2010-3941,CVE-2010-3942 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows在实现上存在多个漏洞，本地攻击者可利用这些漏洞导致拒绝服务或提升自己的权限。 此漏洞源于： 1）"win32k.sys"驱动程序在从用户模式复制数据时存在内存分配错误，导致在内核中执行任意代码； 2）"win32k.sys"驱动程序在处理PFE对象时存在双重释放错误，导致在内核中执行任意代码；...
Microsoft Windows "Win32k.sys" 双重释放本地权限提升漏洞(MS10-098)
BUGTRAQ ID: 45287 CVE ID: CVE-2010-3941 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的Win32k.sys驱动实现上存在双重释放漏洞，本地攻击者可利用此漏洞以内核级别的权限执行任意代码，从而完全控制受影响的计算机。 Microsoft Windows XP Microsoft Vista Microsoft Server 2008 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-098）以及相应补丁:...
CVE-2010-3941
Summary (CVE-2010-3941) : A local privilege-escalation in Windows is caused by a double-free in the kernel-mode driver win32k.sys. Affects multiple Windows editions: XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2, and Windows 7. The flaw enables local users to gain full privileg...
CVE-2009-3941
Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the 1 subject's Common Name or 2 Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted...