ARC PcVue ActiveX Control SCADA Remote Code Execution (CVE-2011-4042; CVE-2011-4043 ; CVE-2011-4044; CVE-2011-4045)

A buffer overflow vulnerability has been reported in SCADA ARC PcVue...

Oracle Linux 5 : Important: / cups (ELSA-2008-0157)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0157 advisory. 1.2.4-11.14:.4 - Prevent double-free when a browsed class has the same name as a printer or vice versa bug 433766, STR 2656. 1.2.4-11.14:.3 - pdftops: Fix inval...

CVE-2012-4045

CVE-2012-4045 affects Winamp prior to 5.63 build 3235, caused by multiple heap-based buffer overflows in bmp.w5s handling specific data (strf chunk in BI_RGB, UYVY video data in AVI, and decompressed TSCC data in AVI). The vulnerability allows remote code execution, with attack vector over a netw...

CVE-2011-4045

CVE-2011-4045 is a buffer overflow in an unspecified ActiveX control (aipgctl.ocx) used by ARC Informatique PcVue 6.0–10.0, FrontVue, and PlantVue. The vulnerability allows remote attackers to cause a denial of service via a crafted HTML document. Affected products include PcVue versions 6.x thro...

KLA10292 Multiple vulnerabilities in PcVue

Multiple critical vulnerabilities have been found in PcVue. Malicious users can exploit these vulnerabilities to execute arbitrary code, modify local files or cause denial of service. Below is a complete list of vulnerabilities 1. Unspecified vectors can be exploited remotely; 2. A buffer overflo...

Arc Informatique产品多个ActiveX控件漏洞

CVE ID: CVE-2011-4042,CVE-2011-4043,CVE-2011-4044,CVE-2011-4045 ARC Informatique是开发人机接口、监控和数据捕获HMI/SCADA软件的法国公司。 多个Arc Informatique产品在实现上存在多个安全漏洞，可被恶意用户利用操作某些数据并控制用户系统。 1）处理"SaveObject"和"LoadObject"方法SVUIGrd.ocx时存在的错误可被利用通过特制的"aStream"参数执行虚拟函数调用任意内存位置； 2）"GetExtendedColor"方法SVUIGrd.ocx中的错误可被利用破坏内...

CVE-2010-4045

Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting XSS attacks, and possibly execute arbitrary code by leveraging the ability of a script to...

CVE-2010-4045

CVE-2010-4045 affects Opera before 10.63. The vulnerability arises because Opera does not properly restrict web scripts in unspecified circumstances involving reloads and redirects, allowing a remote attacker to spoof the Address Bar and perform cross-site scripting (XSS) attacks; in some cases t...

CVE-2009-4045

CVE-2009-4045 affects FrontAccounting (FA) up to version 2.1.7, with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files (reporting/, sales/, sales/includes/, sales/includes/db/, sales/inqui...

Fedora Update for cups FEDORA-2007-2982

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2007-2982 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for cups FEDORA-2007-746

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for cups FEDORA-2008-8801

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2008-8801 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for cups FEDORA-2008-2897

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2008-2897 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for cups FEDORA-2008-1976

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2008-1976 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for cups FEDORA-2008-1901

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200712-14 (cups)

The remote host is missing updates announced in advisory GLSA 200712-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-4045

Multiple cross-site scripting XSS vulnerabilities in @Mail 5.42 allow remote attackers to inject arbitrary web script or HTML via the 1 file and 2 HelpFile parameters to parse.php, the 3 Folder and 4 start parameters to showmail.php, and the 5 abookview parameter to abook.php...

CVE-2008-4045

CVE-2008-4045 involves multiple cross-site scripting (XSS) vulnerabilities in @Mail 5.42. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters: parse.php (file and HelpFile), showmail.php (Folder and start), and abook.php (abookview). The NVD e...

Important: cups security update

1.2.4-11.14:.4 - Prevent double-free when a browsed class has the same name as a printer or vice versa bug 433766, STR 2656. 1.2.4-11.14:.3 - pdftops: Fix invalid dereference from bad Info object found during testing of bug 356571. 1.2.4-11.14:.2 - Applied patch to fix CVE-2007-4045 bug 356571. -...

Fedora 8 : cups-1.3.4-2.fc8 (2007-2982)

This update fixes a remote code execution vulnerability in the IPP handling part of the CUPS scheduler, as well as several PDF handling security issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...