CVE-2014-3985

The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service crash via crafted headers that trigger an out-of-bounds read...

CVE-2014-3985

CVE-2014-3985 affects the MiniUPnP library (MiniUPnPc/MiniUPnP 1.9) via the function getHTTPResponse in miniwget.c . A crafted header can trigger an out-of-bounds read, allowing remote attackers to cause a denial of service (crash). Multiple sources confirm the impact as a remote DoS and point to...

openSUSE Security Update : miniupnpc (openSUSE-SU-2014:0815-1)

miniupnpc was updated to 1.9 to fix a potential buffer overrun in miniwget.c CVE-2014-3985. Besides that the following issues were fixed : - added argument remoteHost to UPNPGetSpecificPortMappingEntry - increment APIVERSION to 10 - --help and -h arguments in upnpc.c - define MAXHOSTNAMELEN if no...

CVE-2013-3985

The CVE-2013-3985 entry concerns IBM Lotus Sametime Enterprise Meeting Server 8.5.2 and 8.5.2.1, where insufficient restriction of application cookies allows remote attackers to read session variables via a weak Domain setting. This exposes partial confidentiality (session data) with an adjacent-...

Mozilla Thunderbird Multiple Vulnerabilities (Oct 2012) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 6951)

Mozilla Firefox was updated to the 10.0.9ESR security release which fixes bugs and security issues : - Security researchers Thai Duong and Juliano Rizzo reported that SPDY's request header compression leads to information leakage, which can allow the extraction of private data such as session...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2012:1345-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MozillaFirefox: update to Firefox 16.0.1 (important)

The Mozilla suite received following security updates bnc783533: Mozilla Firefox was updated to 16.0.1. Mozilla Seamonkey was updated to 2.13.1. Mozilla Thunderbird was updated to 16.0.1. Mozilla XULRunner was updated to 16.0.1. MFSA 2012-88/CVE-2012-4191 bmo798045 Miscellaneous memory safety...

Mozilla Firefox Multiple Vulnerabilities - Oct 12 (Windows)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnoct12win.nasl 5931 2017-04-11 09:02:04Z teissa $ Mozilla Firefox Multiple Vulnerabilities - Oct 12 Windows Authors: Madhuri D Copyright: Copyright c 2012...

CVE-2012-3985

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting XSS attacks by leveraging initial-origin access after document.domain has been set...

CVE-2012-3985

CVE-2012-3985 is a vulnerability in Mozilla Firefox, Thunderbird, and SeaMonkey where the HTML5 Same Origin Policy could be violated, allowing initial-origin access after document.domain is set and potentially enabling cross-site scripting (XSS). Affected versions are Firefox/Thunderbird/SeaMonke...

CVE-2011-3985

Cross-site scripting XSS vulnerability in Plume before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3985

Plume CMS before version 1.2.3 is affected by a cross-site scripting (XSS) vulnerability. The CVE-2011-3985 issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, with the impact described as executing script in the browser of a user logged in as administrat...

CentOS Update for firefox CESA-2009:1674 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-3985

Cross-site scripting XSS vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3985

HP Operations Orchestration (pre-9.0) contains an XSS vulnerability when used with Internet Explorer 6. The issue allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Base CVSSv2 score ~4.3 (Medium) with network access, no authentication, and partial integrity impac...

Ubuntu: Security Advisory (USN-878-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for firefox-3.0, xulrunner-1.9 regression USN-877-1

Ubuntu Update for Linux kernel vulnerabilities USN-877-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8771.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for firefox-3.0, xulrunner-1.9 regression USN-877-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-877-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 8.10 / 9.04 : firefox-3.0, xulrunner-1.9 regression (USN-877-1)

USN-873-1 fixed vulnerabilities in Firefox and Xulrunner. The upstream changes introduced a regression when using NTLM authentication. This update fixes the problem and adds additional stability fixes. We apologize for the inconvenience. Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Ol...