77 matches found
Fedora 24 : imlib2 (2016-ad6005ba92)
A new upstream update fixing several vulnerabilities. See the bug list for more information. ---- Rebase to the new upstream bugfix-only version. Add security fixes for the referenced bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Fedora 22 : imlib2 (2016-b4212484d5)
A new upstream update fixing several vulnerabilities. See the bug list for more information. ---- Rebase to the new upstream bugfix-only version. Add security fixes for the referenced bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
openSUSE Security Update : imlib2 (openSUSE-2016-600)
This imlib2 update to version 1.4.9 fixes the following issues : Security issues fixed : - CVE-2011-5326: divide by 0 when drawing an ellipse of height 1 boo974202 - CVE-2014-9762: segmentation fault on images without colormap boo963796 - CVE-2014-9764: segmentation fault when opening specificall...
CVE-2016-3993
Off-by-one error in the imlibMergeUpdate function in lib/updates.c in imlib2 before 1.4.9 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted coordinates...
CVE-2016-3993
Off-by-one error in the imlibMergeUpdate function in lib/updates.c in imlib2 before 1.4.9 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted coordinates...
CVE-2016-3993
CVE-2016-3993 affects the Imlib2 library (imlib2) due to an off-by-one error in the __imlib_MergeUpdate function (lib/updates.c) present before version 1.4.9. This results in an out-of-bounds read and can cause a denial of service (application crash) when processing crafted coordinates. Connected...
imlib2: multiple issues
CVE-2011-5326 denial of service Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. - CVE-2016-3993 information leakage Yuriy M. Kaminskiy discovered that drawing using coordinates from an untrusted source could lead to an out-of-bound memory...
Debian DSA-3555-1 : imlib2 - security update
Several vulnerabilities were discovered in imlib2, an image manipulation library. - CVE-2011-5326 Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. - CVE-2014-9771 It was discovered that an integer overflow could lead to invalid memory reads a...
[SECURITY] [DSA 3555-1] imlib2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3555-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini April 23, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3555-1 (imlib2 - security update)
Several vulnerabilities were discovered in imlib2, an image manipulation library. CVE-2011-5326 Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. CVE-2014-9771 It was discovered that an integer overflow could lead to invalid memory reads and...
CVE-2013-3993
creationtimestamp| type| source ---|---|--- 2015-10-15 22:49:07+00:00| seen| MISP/56201e1d-f4dc-4ddd-8049-4f2e950d210b 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:31:38+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971597 2025-02-14...
CVE-2015-3993
Actian Matrix vulnerable versions: 5.1.x (up to 5.1.2.4) and 5.2.x (up to 5.2.0.1). Affected component/function allows remote authenticated users to bypass write-access restrictions and execute UPDATE statements by referencing a table. Root cause details are not explicitly provided in the connect...
CVE-2013-3993
IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via crafted parameters in unspecified API calls...
CVE-2013-3993
The IBM InfoSphere BigInsights data analysis platform (versions 1.1 through 3.0) contains a vulnerability where certain APIs accept input parameters without proper validation. This lack of parameter validation allows remote authenticated users to bypass intended file and directory restrictions, p...
Firefox 5.0 - 15.0.1 - __exposedProps__ XCS Code Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::BrowserExploitServer...
TSEP colorswitch.php tsep_configabsPath Parameter PHP Code Execution - Ver2 (CVE-2006-3993)
A code execution vulnerability has been reported in Olaf Noehring The Search Engine Project TSEP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
TSEP colorswitch.php tsep_configabsPath Parameter PHP Code Execution - Ver2 (CVE-2006-3993)
A code execution vulnerability has been reported in Olaf Noehring The Search Engine Project TSEP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Firefox 15.0.1 Code Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Firefox 5.0 - 15.0.1 exposedProps XCS Code Execution', 'Description' = %q On versions of Firefox from 5.0 to 15.0.1, the InstallTrigg...
CVE-2012-3993
creationtimestamp| type| source ---|---|--- 2013-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30474 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefoxprotocrmfrequest.rb 2025-02-06...
openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2012:1345-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...