76 matches found
CVE-2013-4298
The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted comment in a GIF image...
CVE-2013-4298
CVE-2013-4298 affects ImageMagick: the ReadGIFImage function in coders/gif.c is vulnerable to crafted GIF comments, causing memory corruption and application crash inversions prior to 6.7.8-8. Remediation: upgrade ImageMagick to 6.7.8-8 or newer. See connected references (Ubuntu USN, Gentoo GLSA)...
KLA10218 DoS vulnerability in ImageMagick
An unspecified vulnerability was found in ImageMagick. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed GIF image. Original advisories - Related products ImageMagick CVE list CVE-2013-4298 warning...
[SECURITY] [DSA 2750-1] imagemagick security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2750-1 [email protected] http://www.debian.org/security/ Florian Weimer September 03, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2750-1 (imagemagick - buffer overflow)
Anton Kortunov reported a heap corruption in ImageMagick, a program collection and library for converting and manipulating image files. Crafted GIF files could cause ImageMagick to crash, potentially leading to arbitrary code execution. The oldstable distribution squeeze is not affected by this...
Wireshark Multiple Vulnerabilities(01) - August 2012 (Windows)
This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvuln01aug12win.nasl 5912 2017-04-10 09:01:51Z teissa $ Wireshark Multiple Vulnerabilities01 - August 2012 Windows Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...
Wireshark 1.8.x < 1.8.2 Multiple Vulnerabilities
The installed version of Wireshark is 1.8.x before 1.8.2. This version is affected by the following vulnerabilities : - The 'DCP ETSI' dissector and 'pcap-ng' parser can attempt a divide by zero operation leading to an application crash. CVE-2012-4285, CVE-2012-4286 - The 'MongoDB', 'XTP', 'AFP',...
CVE-2012-4298
Integer signedness error in the vwrreadrecdataethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to execute arbitrary code via a crafted packet-trace file that triggers a buffer overflow...
CVE-2012-4298
Wireshark 1.8.x contains CVE-2012-4298 due to an integer signedness error in wiretap/vwr.c (Ixia IxVeriWave file parser). A crafted packet-trace file triggers a buffer overflow, allowing remote code execution. Affected: Wireshark 1.8.x prior to 1.8.2. Mitigation: upgrade to Wireshark 1.8.2 or lat...
CVE-2011-4298
Multiple cross-site request forgery CSRF vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data...
CVE-2011-4298
The CVE refers to multiple CSRF vulnerabilities in Moodle’s mod/wiki components affecting Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2, allowing remote attackers to hijack authentication for wiki data modification. The root cause is cross-site request forgery within the wiki module. Affected ...
CVE-2010-4298
The CVE-2010-4298 issue affects the Free Simple Software 1.0 download module, where the SQL injection flaw can be triggered via the downloads_id parameter in a download_now action to index.php. The connected Seebug entry provides a PoC exploit demonstrating how a UNION SELECT can extract sensitiv...
'Free Simple Software' SQL Injection Vulnerability (CVE-2010-4298)
'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELECT' to easily expose the application...
Free Simple Software - SQL Injection
Free Simple Software - SQL Injection 'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION...
Free Simple Software - SQL Injection
'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELECT' to easily expose the application...
Free Simple Software SQL Injection
'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELECT' to easily expose the application...
CVE-2010-4298
creationtimestamp| type| source ---|---|--- 2010-08-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14672...
openSUSE Security Update : moodle (moodle-1933)
This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...
openSUSE Security Update : moodle (moodle-1933)
This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...
Debian: Security Advisory (DSA-1986-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...