Google Chrome Multiple Vulnerabilities - February 12 (MAC OS X)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnfeb12macosx.nasl 6521 2017-07-04 14:51:10Z cfischer $ Google Chrome Multiple Vulnerabilities - February 12 MAC OS X Authors: Madhuri D Copyright: Copyright c 20...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID fe1976c2-5317-11e1-9e99-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID fe1976c2-5317-11e1-9e99-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD : chromium -- multiple vulnerabilities (fe1976c2-5317-11e1-9e99-00262d5ed8ee)

Google Chrome Releases reports : 73478 Low CVE-2011-3953: Avoid clipboard monitoring after paste event. Credit to Daniel Cheng of the Chromium development community. 92550 Low CVE-2011-3954: Crash with excessive database usage. Credit to Collin Payne. 93106 High CVE-2011-3955: Crash aborting an...

CVE-2011-3955

CVE-2011-3955 affects Google Chrome/Chromium up to version 17.0.963.46, where an attacker could trigger an IndexedDB transaction abort, causing the application to crash or potentially other impact. The vulnerability is discussed in multiple advisories (e.g., Gentoo GLSA-201202-01) with explicit r...

Stable Channel Update

The Chrome team is excited to announce the release of Chrome 17 to the Stable Channel for Windows, Mac, Linux and Chrome Frame. 17.0.963.46 contains a number of new features including: New Extensions APIs Updated Omnibox Prerendering Download Scanning Protection Many other small changes Security...

Zabbix < 1.8.7 Information Disclosure Vulnerability

Zabbix is prone to an information disclosure vulnerability because it fails to sufficiently validate user-supplied data. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SuSE 10 Security Update : acroread (ZYPP Patch Number 6802)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324 Acrobat reader was updated to version 9.3 to fix thos...

CVE-2010-3955

CVE-2010-3955 concerns a memory corruption in Microsoft Publisher 2002 SP3 caused by an array indexing error in pubconv.dll (Publisher Converter DLL). A crafted Publisher file can trigger this vulnerability, enabling remote code execution on the affected system. Microsoft addressed this with secu...

Microsoft Publisher Remote Code Execution Vulnerability (2292970)

This host is missing a critical security update according to Microsoft Bulletin MS10-103. OpenVAS Vulnerability Test $Id: secpodms10-103.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Publisher Remote Code Execution Vulnerability 2292970 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...

SuSE 11 Security Update : acroread_ja (SAT Patch Number 1881)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE Security Update : acroread (acroread-1849)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3956, CVE-2009-3957, CVE-2009-3958, CVE-2009-3959, CVE-2009-4324. Acrobat reader was updated to version 9.3 to fix those...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1850)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324 Acrobat reader was updated to version 9.3 to fix thos...

iDefense Security Advisory 01.12.10: Adobe Reader and Acrobat JpxDecode Memory Corruption Vulnerability

iDefense Security Advisory 01.12.10 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 12, 2010 I. BACKGROUND Adobe Reader and Acrobat are Portable Document Format PDF reader and processors. For more information, please visit following pages: http://www.adobe.com/products/reader/...

CVE-2009-3955

CVE-2009-3955 affects Adobe Reader and Acrobat 9.x prior to 9.3 and 8.x prior to 8.2 on Windows and macOS. The vulnerability is in the Jp2c/JPXDecode stream handling (JPC_MS_RGN marker) where an integer sign extension bypasses a sanity check, causing memory corruption that could allow remote code...

CVE-2008-3955

The provided connected records contain concrete details for CVE-2008-3955: an SQL injection vulnerability in index.php of Masir Camp E-Shop Module 3.0 and earlier. The flaw is exploitable via the ordercode parameter on the veiworderstatus page, enabling remote attackers to execute arbitrary SQL c...

CVE-2008-3955

SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ordercode parameter in a veiworderstatus page...

CVE-2008-3955

creationtimestamp| type| source ---|---|--- 2008-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6395...

LinkedIn Toolbar IEContextMenu Buffer Overflow (CVE-2007-3955)

A buffer overflow vulnerability exists in LinkedIn Internet Explorer Toolbar. LinkedIn is a popular business-oriented networking site. This vulnerability is due to errors in the LinkedIn Internet Explorer Toolbar IEContextMenu ActiveX Control when handling overly long arguments sent to the search...

CVE-2007-3955

The CVE-2007-3955 issue is a buffer overflow in the LinkedIn Toolbar’s IEToolbar.IEContextMenu.1 ActiveX control (LinkedInIEToolbar.dll in LinkedIn Toolbar 3.0.2.1098). The flaw occurs when a very long second argument (varBrowser argument) is passed to the search method, allowing remote code exec...

CVE-2006-3955

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 news.php, 2 search.php, or 3 whosOnline.php...