Debian: Security Advisory (DSA-4433-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-4433

...

SUSE SLED12 Security Update : gegl (SUSE-SU-2017:0694-1)

This update for gegl fixes the following issues: Security issue fixed : - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED12 Security Update : gegl (SUSE-SU-2017:0696-1)

This update for gegl fixes the following issues: Security issue fixed : - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2017:0694-1 Security update for gegl

This update for gegl fixes the following issues: Security issue fixed: - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835...

SUSE-SU-2017:0696-1 Security update for gegl

This update for gegl fixes the following issues: Security issue fixed: - Fix CVE-2012-4433: Fix buffer overflow in and add plausibility checks to ppm-load op bsc789835...

CVE-2016-4433

CVE-2016-4433 affects Apache Struts 2.2.3.20–2.3.28.1, where a crafted request can bypass access restrictions and trigger redirection attacks. Multiple connected sources (NVD description; IBM advisories for Struts-related products) confirm the same affected range and attack pattern. The provided ...

SSL and TLS protocol test suite and fuzzer: tlsfuzzer

tlsfuzzer is a combination of TLS test framework, ready-to-use tests and hopefully in the future a fuzzer for TLS protocol. The aim is to have ability to test TLS implementation everywhere a fairly recent version of Python can run 2.6, 3.2 or later. Current implementation efforts focus on testing...

MacOS X 10.11 Hardlink Resource Exhaustion

/ MacOS X 10.11 hardlink bomb cause resource exhaustion Avast PoC Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - Commands such as: zip, tar, find - AntiVirus: Avast, Eset32 Let's back to an old bug, which Apple does not patch until...

Oracle: Security Advisory (ELSA-2012-1455)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4433

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to execute arbitrary code by leveraging a...

CVE-2015-3120

CVE-2015-3120 is a type-confusion vulnerability in Adobe Flash Player that can be reached by setting a watch on a property, demonstrated with FileReferenceList and fileList. The provided documents describe that a watcher triggers during native browse() when the host object is assigned, causing a ...

CVE-2015-4433

CVE-2015-4433 describes a type confusion vulnerability in Adobe Flash Player and Adobe AIR that can lead to remote code execution. Affected products include Flash Player on Windows/OS X before 13.0.0.302 and 14.x up to 18.x before 18.0.0.203, Linux Flash Player before 11.2.202.481, and Adobe AIR ...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47

3:11-alt47 built July 8, 2015 Sergey V Turchin in task 146142 July 8, 2015 Sergey V Turchin - new version - security fixes: CVE-2014-0578, CVE-2015-3097, CVE-2015-3114, CVE-2015-3115, CVE-2015-3116, CVE-2015-3117, CVE-2015-3118, CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122,...

Adobe Flash Player Use-After-Free Vulnerability (Jul 2015) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

CVE-2014-4433

Affected software: Apple OS X versions prior to 10.10. The issue is a heap-based buffer overflow in the kernel triggered by crafted resource forks in an HFS filesystem, allowing physically proximate attackers to execute arbitrary code. Root cause: heap overflow in kernel code when handling resour...

openSUSE Security Update : gegl (openSUSE-SU-2012:1627-1)

Fix integer overflow by parsing PPM image. bnc789835, CVE-2012-4433 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-841. The text description of this plugin is C SUSE LLC...

CVE-2013-4433

XHProf contains a Cross-site scripting (XSS) vulnerability affecting versions before 0.9.4, exploitable via the run parameter to inject arbitrary script/HTML. Root cause: insufficient input sanitization in the run parameter. Impact: remote attackers could execute arbitrary scripts in a victim’s b...

CVE-2011-4433

CVE-2011-4433 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2012-4433

Multiple integer overflows in operations/external/ppm-load.c in GEGL Generic Graphics Library 0.2.0 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large 1 width or 2 height value in a Portable Pixel Map ppm image, which triggers a...