CVE-2014-4337

The processbrowsedata function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted packet data...

CVE-2014-4337

The CVE-2014-4337 issue affects cups-filters (cups-browsed) prior to 1.0.53. A crafted browse packet can trigger an out-of-bounds read in process_browse_data(), leading to a denial of service via application crash. Affected component is cups-browsed in the cups-filters stack; impact is a partial ...

CVE-2013-4337

...

CVE-2013-4337

CVE-2013-4337 is a duplicate of CVE-2013-5965 and should reference CVE-2013-5965 instead. The connected NVD entry CVE-2013-5965 details a Drupal Node View Permissions module issue: for Drupal 7.x, versions 7.x-1.x before 7.x-1.2 do not properly implement hook_query_alter, potentially allowing rem...

SA-CONTRIB-2013-072 - Node View Permissions - Access Bypass

The Node View Permissions module adds permissions "View own content" and "View any content" for each content type on the permissions page. However, it only implements hooknodeaccess and not hookqueryalter, which means any listing of nodes does not respect the node view permission. CVE identifiers...

CVE-2012-4337

Foxit Reader is affected: pre-5.3 on Windows XP/7 allows remote code execution via a crafted PDF that triggers negative-number calculation during cross-reference processing. The root cause is memory corruption during PDF parsing, leading to arbitrary code execution with the caller’s privileges. A...

Vulnerability in Foxit Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Foxit Reader software version 5.1.4.0104 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Foxit...

Debian Security Advisory DSA 2435-1 (gnash)

The remote host is missing an update to gnash announced via advisory DSA 2435-1. OpenVAS Vulnerability Test $Id: deb24351.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2435-1 gnash Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2435-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4337

The CVE affects Support Incident Tracker (SiT!) versions 3.45–3.65, where translate.php contains a static code injection flaw. An attacker can supply a crafted lang parameter to inject arbitrary PHP code into an executable language file within the i18n directory. The provided documents do not spe...

Fedora Update for gnash FEDORA-2011-3658

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for gnash FEDORA-2011-3662

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : gnash-0.8.9-0.1.20110312git.fc15 (2011-3261)

Bug 669851 - CVE-2010-4337 gnash: symlink attack via configure script Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2010-4337

CVE-2010-4337 affects gnash (GNU Flash player). The issue arises from the configure/build process: temporary files under /tmp (gnash-configure-errors/wns/required.$$) can be created via a symlink attack, allowing a local attacker to overwrite files that the user has write permissions for. This is...

[SECURITY] [DSA 1983-1] New Wireshark packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1983-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 30, 2010 http://www.debian.org/security/faq -...

CVE-2009-4337

CVE-2009-4337 describes a SQL injection in the TYPO3 Diocese of Portsmouth Calendar (pd_calendar) extension version 0.4.1 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via unknown vectors, with impact described as partial confidentiality, integrity, and ...

SLES9: Security update for gzip

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gzip For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012976 within the SuSE...

SuSE9 Security Update : gzip (YOU Patch Number 11220)

Several security issues with gzip have been found that can be exploited to compromise the system in conjunction with other programs while processing malformed archive files. The vulnerabilities have been tracked by Mitre CVE-2006-4334, CVE-2006-4335, CVE-2006-4336, CVE-2006-4337 and CVE-2006-4338...

HP-UX Update for Software Distributor (SD) HPSBUX02195

Check for the Version of Software Distributor SD OpenVAS Vulnerability Test HP-UX Update for Software Distributor SD HPSBUX02195 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Debian Security Advisory DSA 1683-1 (streamripper)

The remote host is missing an update to streamripper announced via advisory DSA 1683-1. OpenVAS Vulnerability Test $Id: deb16831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1683-1 streamripper Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...