Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (1)

Application: Adobe Acrobat Reader DC Platforms: Windows,OSX Versions: 15.016.20045 and earlier Author: Sébastien Morin and Pier-Luc Maltais of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: July 12, 2016 CVE: CVE-2016-4205 COSIG-2016-30 1 Introduction 2 Report Timeline...

CVE-2013-4205

Memory leak in the unshareuserns function in kernel/usernamespace.c in the Linux kernel before 3.10.6 allows local users to cause a denial of service memory consumption via an invalid CLONENEWUSER unshare call...

CVE-2015-4205

CVE-2015-4205 affects Cisco IOS XR 5.3.1 on ASR 9000 devices. The issue stems from improper flow-control (IEEE 802.3x) PAUSE frame processing, allowing an unauthenticated adjacent attacker to cause a denial of service via NPU chip reset or line-card reload. Impact is a DoS affecting availability ...

CVE-2014-4205

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-2491...

CVE-2014-2491

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-4205...

CVE-2014-4205

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect integrity via unknown vectors related to Portal Framework, a different vulnerability than CVE-2014-2491...

CVE-2014-4205

Oracle Siebel CRM 8.1.1/8.2.2 are affected by CVE-2014-4205 in the Siebel UI Framework Portal Framework. The Nessus entry notes a difficult-to-exploit vulnerability that permits unauthenticated network access via HTTP and can lead to unauthorized update/insert/delete of data in Siebel UI Framewor...

Ubuntu: Security Advisory (USN-1971-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1974-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-1974-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1974-1 September 27, 2013 linux vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

CVE-2013-4205

Memory leak in the unshareuserns function in kernel/usernamespace.c in the Linux kernel before 3.10.6 allows local users to cause a denial of service memory consumption via an invalid CLONENEWUSER unshare call...

CVE-2013-4205

CVE-2013-4205: Memory leak in the Linux kernel’s unshare_userns (kernel/user_namespace.c) allows local denial of service via invalid CLONE_NEWUSER unshare calls. Vulnerable on Linux kernels before 3.10.6 and observed in multiple advisories (e.g., EulerOS/Ubuntu entries referencing this CVE). The ...

CVE-2013-4205

Memory leak in the unshareuserns function in kernel/usernamespace.c in the Linux kernel before 3.10.6 allows local users to cause a denial of service memory consumption via an invalid CLONENEWUSER unshare call...

Linux Kernel本地拒绝服务漏洞(CVE-2013-4205)

BUGTRAQ ID: 61636 CVECAN ID: CVE-2013-4205 Linux Kernel是Linux操作系统的内核。 Linux kernel启用了用户名称空间（CONFIGUSERNS）后，未授权用户可造成本地拒绝服务漏洞 0 Linux kernel 3.3.5 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Mozilla Thunderbird Multiple Vulnerabilities-02 November12 (Windows)

This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvuln02nov12win.nasl 6022 2017-04-25 12:51:04Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities-02 November12 Windows Authors: Arun Kallavi...

Ubuntu: Security Advisory (USN-1636-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4205

CVE-2012-4205 affects Mozilla Firefox (prior to 17.0), Mozilla Thunderbird (prior to 17.0), and SeaMonkey (prior to 2.14). The root cause, per the description, is that XMLHttpRequest objects created in sandboxes are assigned the system principal rather than the sandbox principal, enabling CSRF ag...

Google Chrome multiple vulnerabilities - November 10(Linux)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov10lin.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - November 10Linux Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

CVE-2010-4205

Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2010-4205

CVE-2010-4205 affects Google Chrome prior to 7.0.517.44, where improper handling of the data types of event objects can allow remote attackers to cause a denial of service or potentially other impact via unknown vectors. The provided documents do not include a vendor fix/patch information or conc...