Fedora Update for clamav FEDORA-2010-18564

Check for the Version of clamav OpenVAS Vulnerability Test Fedora Update for clamav FEDORA-2010-18564 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for clamav FEDORA-2010-18564

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1031-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for clamav FEDORA-2010-18568

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : clamav-0.96.5-1300.fc13 (2010-18564)

Sat Dec 4 2010 Enrico Scholz - 0.96.5-1300 - updated to 0.96.5 - CVE-2010-4260 Multiple errors within the processing of PDF files can be exploited to e.g. cause a crash. - CVE-2010-4261 An off-by-one error within the 'iconcb' function can be exploited to cause a memory corruption. - Sun Oct 31...

[USN-1031-1] ClamAV vulnerabilities

=========================================================== Ubuntu Security Notice USN-1031-1 December 10, 2010 clamav vulnerabilities CVE-2010-4260, CVE-2010-4261, CVE-2010-4479 =========================================================== A security issue affects the following Ubuntu releases:...

SuSE 10 Security Update : clamav (ZYPP Patch Number 7274)

This is an update of clamav to version 0.96.5 to fix : - Denial of service bugs while parsing PDFs. CVE-2010-4260 - Memory corruption due to an off-by-one error within the iconcb function. CVE-2010-4261 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

USN-1031-1: ClamAV vulnerabilities

Arkadiusz Miskiewicz and others discovered that the PDF processing code in libclamav improperly validated input. This could allow a remote attacker to craft a PDF document that could crash clamav or possibly execute arbitrary code. CVE-2010-4260, CVE-2010-4479 It was discovered that an off-by-one...

SuSE9 Security Update : clamav (YOU Patch Number 12666)

This is an update of clamav to version 0.96.5 to fix : - Denial of service bugs while parsing PDFs. CVE-2010-4260 - Memory corruption due to an off-by-one error within the iconcb function. CVE-2010-4261 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

Ubuntu 10.04 LTS / 10.10 : clamav vulnerabilities (USN-1031-1)

Arkadiusz Miskiewicz and others discovered that the PDF processing code in libclamav improperly validated input. This could allow a remote attacker to craft a PDF document that could crash clamav or possibly execute arbitrary code. CVE-2010-4260, CVE-2010-4479 It was discovered that an off-by-one...

Fedora 14 : clamav-0.96.5-1400.fc14 (2010-18568)

Sat Dec 4 2010 Enrico Scholz - 0.96.5-1400 - updated to 0.96.5 - CVE-2010-4260 Multiple errors within the processing of PDF files can be exploited to e.g. cause a crash. - CVE-2010-4261 An off-by-one error within the 'iconcb' function can be exploited to cause a memory corruption. - Sun Oct 31...

CVE-2010-4260

CVE-2010-4260 affects ClamAV’s pdf.c in libclamav prior to 0.96.5, enabling a crafted PDF to cause an application crash (DoS) or potentially execute code remotely. Multiple advisories (Fedora, openSUSE/SUSE, Gentoo GLSA, Gentoo/Nessus entries) confirm the issue and recommend upgrading to a fixed ...

CVE-2008-4260

CVE-2008-4260 : An uninitialized memory corruption vulnerability in Microsoft Internet Explorer 7 occurs when IE accesses an object that has been deleted. Exploitation via a specially crafted HTML page could allow remote code execution with the caller’s privileges. The issue is part of a set of I...

Internet Explorer URL Cache Memory Corruption (MS08-073; CVE-2008-4260)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in the way Microsoft Internet Explorer accesses an object that has been deleted. The vulnerability is due to a memory corruption error in Internet Explorer when it attempt...

Unfixed XSS vulnerability at www.students.ubc.ca

Security researcher MaXWeL, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.students.ubc.ca, which at the time of submission ranked 4260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is...

CVE-2007-4260

CVE-2007-4260 affects EZPhotoSales 1.9.3 and earlier, where a default hard-coded or easily guessed admin username enables remote access to arbitrary galleries by specifying the username. The vulnerability stems from inadequate access controls around the gallery browsing component, permitting an a...

CVE-2006-4260

Fotopholder 1.8 is affected by a directory traversal in index.php, allowing remote attackers to read arbitrary directories or files via a .. in the path parameter. The root cause is insufficient sanitization/verification of the path input. Impact is partial confidentiality (read access only). No ...

CVE-2005-4260

Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting XSS attacks by replacing the "" in the tag with a "", which bypasses the regular expressions that sanitize the data, but is automatically corrected by many web...

CVE-2005-4260

CVE-2005-4260 is an XSS vulnerability in PHP-Nuke 7.9 and later, where an interpretation conflict in includes/mainfile.php allows remote attackers to inject scripts by replacing the ">" with "