RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Windows)

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnnov11win.nasl 7052 2017-09-04 11:50:51Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 Windows Authors: Madhuri D Copyright: Copyright c...

CVE-2011-4256

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2011-4256

CVE-2011-4256 affects RealNetworks RealPlayer (RV30 codec). The vulnerability occurs when parsing RV30 samples: the code allocates a buffer then fails to fully initialize it and improperly trusts an index from the partially filled buffer, enabling memory corruption that can lead to remote code ex...

CVE-2011-4256

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors...

Ubuntu: Security Advisory (USN-1083-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4256

CVE-2010-4256 affects the Linux kernel: the pipe_fcntl code in fs/pipe.c before 2.6.37 may misidentify named pipes, enabling a local user to cause a denial of service via an F_SETPIPE_SZ fcntl call. The issue is tracked across multiple advisories (e.g., Ubuntu USN-1083-1, RH advisories) and was f...

Linux Kernel "pipe_fcntl()"本地拒绝服务漏洞

BUGTRAQ ID: 45125 CVECAN ID: CVE-2010-4256 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在本地拒绝服务漏洞，本地攻击者可利用此漏洞造成内核崩溃，拒绝服务合法用户。 Linux kernel 2.6.35-rc1 - 2.6.37 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

CVE-2009-4256

AlefMentor is affected by SQL injection vulnerabilities in cource.php for versions 2.0 and 2.2. The vulnerability is triggered via the cont_id and courc_id parameters in the pregled action, allowing remote attackers to execute arbitrary SQL commands. CVSS base score is 7.5 ( HIGH ); impact includ...

CVE-2009-4256

Multiple SQL injection vulnerabilities in cource.php in AlefMentor 2.0 and 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 contid and 2 courcid parameters in a pregled action. NOTE: some of these details are obtained from third party information...

Microsoft图表ActiveX控件内存破坏漏洞（MS08-070）

BUGTRAQ ID: 32614 CVECAN ID: CVE-2008-4256 Visual Basic是用来创建高性能的企业应用程序及基于Web的应用程序的工具。 Visual Basic所安装的图表ActiveX控件（Mschrt20.ocx）在处理恶意输入参数时存在内存破坏漏洞。攻击者可以通过构造特制网页来利用该漏洞，当用户查看网页时，就可以触发这个漏洞。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Visual Basic 6.0 Microsoft Visual Studio .NET 2003 SP1 Microsoft Visual...

CVE-2008-4256

The CVE-2008-4256 entry maps to the Charts ActiveX Control memory corruption vulnerability in Microsoft Visual Basic 6.0 runtime components (notably Mschart20.ocx) and related VB/FoxPro runtimes. The root cause is improper error handling when accessing incorrectly initialized objects, enabling re...

MS08-070: Vulnerabilities in Visual Basic 6.0 ActiveX Controls Could Allow Remote Code Execution (932349)

The remote host contains a version of the ActiveX control for Visual Basic 6.0 Runtime Extended Files that may allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit it. Note that this control may have been included with...

Debian Security Advisory DSA 1406-1 (horde3)

The remote host is missing an update to horde3 announced via advisory DSA 1406-1. OpenVAS Vulnerability Test $Id: deb14061.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1406-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1406-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1406-1 : horde3 - several vulnerabilities

Several remote vulnerabilities have been discovered in the Horde web application framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3548 Moritz Naumann discovered that Horde allows remote attackers to inject arbitrary web script or HTML in t...

[SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1406-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 9th, 2007 http://www.debian.org/security/faq -...

CVE-2007-4256

Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter...

CVE-2007-4256

CVE-2007-4256 describes a directory traversal vulnerability in showpage.cgi of YNP Portal System 2.2.0. An attacker can read arbitrary files by supplying a ".." in the p parameter, enabling potential exposure of sensitive data. The available documents confirm the affected product/version and the ...

CVE-2006-4256

The CVE-2006-4256 issue affects the Horde Application Framework prior to 3.1.2, where index.php can include web pages from other sites via the url parameter, enabling cross-site referencing that could aid phishing. Affected platforms and advisories corroborate remote inclusion risks, with related...

CVE-2005-4256

CVE-2005-4256 describes a cross-site scripting (XSS) vulnerability in ASP-DEV XM Forum RC3, specifically in forum.asp where the forum_title parameter can inject arbitrary script/HTML. Affected item is XM Forum RC3 (forum.asp handling). The core issue is an XSS in the forum_title parameter, enabli...