Oracle Linux 5 / 6 : systemtap (ELSA-2010-0894)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0894 advisory. - CVE-2010-4170 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 4 : systemtap (ELSA-2010-0895)

From Red Hat Security Advisory 2010:0895 : Updated systemtap packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

Adobe Photoshop PNG Image Processing Buffer Overflow - Improved Performance (CVE-2012-4170)

A heap buffer overflow vulnerability has been reported in Adobe Photoshop CS6. The vulnerability is due to an error while handling certain chunks within a specially crafted PNG file. A remote attacker can exploit this vulnerability by enticing a user to open a malicious PNG file. Successful...

Adobe Photoshop PNG Image Processing Buffer Overflow - Improved Performance (CVE-2012-4170)

A heap buffer overflow vulnerability has been reported in Adobe Photoshop CS6. The vulnerability is due to an error while handling certain chunks within a specially crafted PNG file. A remote attacker can exploit this vulnerability by enticing a user to open a malicious PNG file. Successful...

Adobe Photoshop PNG Image Processing Buffer Overflow (APSB12-20; CVE-2012-4170)

A heap buffer overflow vulnerability has been reported in Adobe Photoshop CS6...

Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities (Mac OS X)

This host is installed with Adobe Photoshop and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobephotoshoppngimagefilebofvulnmacosx.nasl 5931 2017-04-11 09:02:04Z teissa $ Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities Mac OS X Authors:...

Adobe Photoshop PNG Image Processing Buffer Overflow Vulnerabilities - Mac OS X

Adobe Photoshop is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:photoshopcs6";...

Critical buffer overflow vulnerability in Photoshop CS6

Adobe has released an update for Photoshop CS6 that closes a critical heap-based buffer overflow vulnerability CVE-2012-4170 in its popular graphics editing program. Both the Mac and Windows versions of Photoshop CS6 aka Photoshop 13.0 contain a critical vulnerability that could allow an attacker...

CVE-2012-4170

creationtimestamp| type| source ---|---|--- 2012-09-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20971...

CVE-2012-4170

CVE-2012-4170 is a buffer overflow in Adobe Photoshop CS6 (CS6 13.x) prior to 13.0.1 triggered while processing certain PNG chunks, enabling a remote attacker to execute arbitrary code by convincing a user to open a malicious PNG. The vulnerability is rooted in improper handling of PNG file chunk...

KLA10029 ACE vulnerabilities in Adobe Photoshop

Buffer overflow vulnerabilities were found in Adobe Photoshop. By exploiting this vulnerability malicious users can execute arbitrary code. These vulnerabilities can be exploited from the network at a point related to an unknown application via a specially designed file or TIFF image with...

Scientific Linux Security Update : systemtap on SL4.x i386/x86_64

It was discovered that staprun did not properly sanitize the environment before executing the modprobe command to load an additional kernel module. A local, unprivileged user could use this flaw to escalate their privileges. CVE-2010-4170 Note: On Scientific Linux 4, an attacker must be a member ...

Debian Security Advisory DSA 2348-1 (systemtap)

The remote host is missing an update to systemtap announced via advisory DSA 2348-1. OpenVAS Vulnerability Test $Id: deb23481.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2348-1 systemtap Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2348-1 : systemtap - several vulnerabilities

Several vulnerabilities were discovered in SystemTap, an instrumentation system for Linux : - CVE-2011-2503 It was discovered that a race condition in staprun could lead to privilege escalation. - CVE-2010-4170 It was discovered that insufficient validation of environment variables in staprun cou...

CVE-2011-4170

Cross-site scripting XSS vulnerability in the themeadiumappendmessage function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias aka nickname in a /me event, a different...

CVE-2011-4170

Cross-site scripting XSS vulnerability in the themeadiumappendmessage function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias aka nickname in a /me event, a different...

CVE-2011-4170

Removed by vendor...

CVE-2011-4170

CVE-2011-4170 is an XSS vulnerability in the empathy-theme-adium.c in the Adium theme of libempathy-gtk used by Empathy 3.2.1 and earlier. It allows remote attackers to inject arbitrary web script or HTML via a crafted nickname in a /me event. Public advisories (Ubuntu USN-1250-1 and openSUSE/SUS...

CVE-2011-3635

Cross-site scripting XSS vulnerability in the themeadiumappendmessage function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias aka nickname...

CVE-2011-4170

Cross-site scripting XSS vulnerability in the themeadiumappendmessage function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias aka nickname in a /me event, a different...