CVE-2014-3967

The CVE-2014-3967 vulnerability affects Xen 4.2.x, 4.3.x and 4.4.x. The root cause is that HVMOP_inject_msi does not properly validate the IRQ setup return value, enabling a local HVM guest administrator to trigger a denial of service via a NULL pointer dereference and crash. No explicit exploit ...

SuSE Update for MozillaFirefox openSUSE-SU-2012:1065-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201210651.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for MozillaFirefox openSUSE-SU-2012:1065-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH,...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2012:1065-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE Update for MozillaFirefox openSUSE-SU-2012:1064-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201210641.nasl 8285 2018-01-04 06:29:16Z teissa $ SuSE Update for MozillaFirefox openSUSE-SU-2012:1064-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

MozillaFirefox: Update to version 15 (critical)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1 975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE- 2012-3959...

CVE-2012-3967

CVE-2012-3967 is a Firefox/WebGL vulnerability on Linux where the WebGL implementation fails to interact correctly with Mesa drivers when a large number of sampler uniforms are used. This can let remote attackers execute arbitrary code or cause a denial of service (stack memory corruption) via a ...

Google Chrome Multiple Vulnerabilities - February 12 (MAC OS X)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnfeb12macosx.nasl 6521 2017-07-04 14:51:10Z cfischer $ Google Chrome Multiple Vulnerabilities - February 12 MAC OS X Authors: Madhuri D Copyright: Copyright c 20...

FreeBSD : chromium -- multiple vulnerabilities (fe1976c2-5317-11e1-9e99-00262d5ed8ee)

Google Chrome Releases reports : 73478 Low CVE-2011-3953: Avoid clipboard monitoring after paste event. Credit to Daniel Cheng of the Chromium development community. 92550 Low CVE-2011-3954: Crash with excessive database usage. Credit to Collin Payne. 93106 High CVE-2011-3955: Crash aborting an...

CVE-2011-3967

CVE-2011-3967 is associated with Google Chrome/Chromium vulnerabilities described in the GLSA/Gentoo advisories as part of a set titled Chromium: Multiple vulnerabilities. The public records indicate affected Chrome/Chromium versions prior to 17.0.963.46 and recommend upgrading to Chromium 17.0.9...

CVE-2010-3967

CVE-2010-3967 describes an Untrusted Search Path/Insecure Library Loading vulnerability in Microsoft Windows Movie Maker 2.6. A Trojan DLL placed in the current working directory (e.g., a directory containing an MSWMM file) can be loaded by WMM, allowing local users to gain privileges. The issue ...

Microsoft Windows Movie Maker Insecure Library Loading (MS10-093; CVE-2010-3967)

Windows Movie Maker is an application that allows users to create, edit, and add special effects to home movies. A remote code execution vulnerability has been reported in the way that Windows Movie Maker handles the loading of DLL files. The vulnerability is caused when the Windows Movie Maker...

CVE-2009-3967

The CVE-2009-3967 issue affects Ed Charkow SuperCharged Linking, specifically in browse.php where the id parameter is vulnerable to SQL injection. The underlying root cause is improper sanitization/execution of SQL, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is...

Fedora Core 10 FEDORA-2009-3967 (lcms)

The remote host is missing an update to lcms announced via advisory FEDORA-2009-3967. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2008-3967

The CVE-2008-3967 entry concerns MyBB (MyBulletinBoard) moderation.php prior to version 1.4.1, where moderator privilege checks are not performed correctly. The description notes unknown impact and remote attack vectors. Public references corroborate the version boundary (before 1.4.1) but do not...

CVE-2007-3967

CVE-2007-3967 describes a directory traversal in PHP Directory Lister (dirLIST) prior to 0.1.1. The flaw, triggered by a .. in the folder parameter of index.php, allows remote attackers to list contents of a parent directory. Documented references (NVD, Red Hat, CVE List, PRION, etc.) confirm the...

CVE-2007-3967

Directory traversal vulnerability in index.php in PHP Directory Lister dirLIST before 0.1.1 allows remote attackers to list the contents of a parent directory via a .. dot dot in the folder parameter...

CVE-2006-3967

PHP remote file inclusion vulnerability in component/option,commoskool/Itemid,34/admin.moskool.php in MamboXChange Moskool 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3967

The CVE-2006-3967 entry documents a PHP remote file inclusion vulnerability in MamboXChange Moskool 1.5, exploitable via a URL in the mosConfig_absolute_path parameter to admin.moskool.php. Affected component: component/option,com_moskool/Itemid,34/admin.moskool.php. The underlying issue is abili...

CVE-2006-3967

PHP remote file inclusion vulnerability in component/option,commoskool/Itemid,34/admin.moskool.php in MamboXChange Moskool 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2005-3994

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3967. Reason: This candidate is a duplicate of CVE-2005-3967. Notes: All CVE users should reference CVE-2005-3967 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...