RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Dec10

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayermultvulnwindec10.nasl 5373 2017-02-20 16:27:48Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Dec10 Authors: Sooraj KS Copyright: Copyright c 2010...

CVE-2010-4390

CVE-2010-4390 : RealNetworks RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, and Linux RealPlayer 11.0.2.1744 contain multiple heap-based buffer overflows. An attacker could remotely exploit via a crafted IVR header. The provided sources do not specify exact impact, affected components beyond the ...

RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...

Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities

Binary data 5709.prm...

CVE-2009-4390

The CVE-2009-4390 entry concerns the Car extension for TYPO3 (version 0.1.1). The vulnerability is a SQL injection in the Car extension that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The exact affected components are the Car extension files (TYPO3 ecosyste...

Memory corruption

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a...

CVE-2009-1555

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe process memory, a...

CVE-2008-4390

The CVE-2008-4390 entry affects Cisco Linksys WVC54GC/GCAs (wireless video cameras) prior to firmware 1.25. The issue is that, in response to a Setup Wizard remote-management command, the device sends cleartext configuration data over the network, enabling remote attackers to obtain sensitive det...

CUPS < 1.3.6 Multiple Vulnerabilities

Binary data 4390.prm...

CVE-2007-4390

The CVE-2007-4390 issue affects BlueCat Networks Adonis DNS/DHCP appliance (CLI/Adonis Administration Console) version 5.0.2.8. The vulnerability allows local admin users to gain root privileges on the underlying OS by injecting shell metacharacters in a command. Documents confirm the affected co...

CVE-2006-4390

Concrete details found: CVE-2006-4390 affects CFNetwork in Mac OS X 10.4.x (10.4.0–10.4.7) and 10.3.9, where SSL encryption could mislead users into trusting remote sites (lock icon may display without proper identity). The issue is mitigated by Mac OS X 10.4.8 Security Update, which fixes multip...

Mac OS X Multiple Vulnerabilities (Security Update 2006-006)

The remote host is running a version of Mac OS X 10.3 which does not have the security update 2006-006 applied. Security Update 2006-006 contains several security fixes for the following programs : - CFNetwork - Flash Player - QuickDraw Manager - SASL - WebCore C Tenable Network Security, Inc. if...

CVE-2005-4390

The CVE-2005-4390 entry affects ContentServ 3.1 and earlier, where the index.php StoryID parameter is vulnerable to SQL injection. Remote attackers could potentially execute arbitrary SQL commands due to this flaw. The available documents state the vulnerability but do not provide exploitation de...