CVE-2015-4351

The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL...

APPLE-SA-2014-10-22-1 QuickTime 7.7.6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-10-22-1 QuickTime 7.7.6 QuickTime 7.7.6 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Playing a maliciously crafted movie file may lead to an unexpected application...

CVE-2014-4351

CVE-2014-4351 : Apple QuickTime on macOS X before 10.10 is affected by a buffer overflow in handling of audio samples in M4A files, allowing remote code execution or a denial of service. Affected component: QuickTime (OS X). Root cause: memory corruption when parsing M4A audio samples. Impact: ar...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2011:0057-1)

This update of java-160-openjdk improves the return value handling of JNLPSecurityManager. Prior to this update the JNLPSecurityManager silently returns in some cases when a permission was denied. CVE-2010-4351 Additionally the java path was fixed to make java work with firefox again. %NASLMINLEV...

openSUSE Security Update : gpg2 (openSUSE-SU-2013:1494-1)

A vulnerability was discovered for the gpg2 packages in openSUSE versions 12.2 and 12.3. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-716. The text description of this plugin ...

Fedora Update for gnupg FEDORA-2013-23678

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4351

FFmpeg did suffer a buffer overflow vulnerability (CVE-2011-4351) that could allow remote code execution via unspecified vectors. Public advisories list affected releases as FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8. The issue is not described beyond a bu...

Fedora 18 : gnupg-1.4.15-1.fc18 (2013-18647)

CVE-2013-4351 - CVE-2013-4402 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CentOS Update for gnupg2 CESA-2013:1459 centos6

Check for the Version of gnupg2 OpenVAS Vulnerability Test CentOS Update for gnupg2 CESA-2013:1459 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CentOS Update for gnupg2 CESA-2013:1459 centos5

Check for the Version of gnupg2 OpenVAS Vulnerability Test CentOS Update for gnupg2 CESA-2013:1459 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CentOS Update for gnupg CESA-2013:1458 centos5

Check for the Version of gnupg OpenVAS Vulnerability Test CentOS Update for gnupg CESA-2013:1458 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for gnupg CESA-2013:1458 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 5 : gnupg (CESA-2013:1458)

An updated gnupg package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

CentOS 5 / 6 : gnupg2 (CESA-2013:1459)

An updated gnupg2 package that fixes three security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

SuSE 11.2 / 11.3 Security Update : gpg2 (SAT Patch Numbers 8426 / 8427)

This GnuPG update fixes two security issues : - GnuPG treated no-usage-permitted keys as all-usages-permitted. CVE-2013-4351 - An infinite recursion in the compressed packet parser was fixed. CVE-2013-4402 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

Oracle Linux 5 / 6 : gnupg2 (ELSA-2013-1459)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1459 advisory. - fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted - fix CVE-2012-6085 GnuPG: readblock corrupt key input validation...

Oracle Linux 5 : gnupg (ELSA-2013-1458)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2013-1458 advisory. - fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted - fix CVE-2012-6085 GnuPG: readblock corrupt key input validation - fix...

RHEL 5 / 6 : gnupg2 (RHSA-2013:1459)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1459 advisory. The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with the proposed OpenPGP...

gnupg2 security update

CentOS Errata and Security Advisory CESA-2013:1459 An updated gnupg2 package that fixes three security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVS...

gnupg security update

1.4.5-18 - fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted 1.4.5-17 - fix CVE-2012-6085 GnuPG: readblock corrupt key input validation - fix CVE-2013-4242 GnuPG susceptible to Yarom/Falkner side-channel attack - fix CVE-2013-4402 GnuPG: infinite recursion in the...