Mandriva Update for libproxy MDVSA-2012:172 (libproxy)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : libproxy (MDVSA-2012:172)

A vulnerability has been discovered and corrected in libproxy : Stack-based buffer overflow in the url::getpac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file CVE-2012-4504. The updated packages have been patched to...

Fedora 17 : libproxy-0.4.10-1.fc17 (2012-17574)

Fix http chunk encoded PAC that was broken in previous release Add HTTP client unit test Fix coding style issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it ...

Ubuntu: Security Advisory (USN-1629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1629-1: libproxy vulnerabilities

Tomas Mraz discovered that libproxy incorrectly handled certain PAC files. A remote attacker could use this issue to cause libproxy to crash, or to possibly execute arbitrary code. CVE-2012-4504, CVE-2012-4505...

Fedora 18 : libproxy-0.4.10-1.fc18 (2012-16383)

Fix http chunk encoded PAC that was broken in previous release - Add HTTP client unit test - Fix coding style issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

CVE-2012-4504

CVE-2012-4504 affects libproxy 0.4.x (up to 0.4.8); a stack-based buffer overflow in url::get_pac() when processing a proxy.pac file from a remote server can cause an unspecified impact. Remediation: upgrade to libproxy 0.4.9+ (Gentoo GLSA and related advisories reference 0.4.10 as fixed). Other ...

CVE-2011-4504

The CVE-2011-4504 entry concerns the UPnP IGD implementation in the Pseudo ICS UPnP software used by ZyXEL P-330W. The vulnerability arises in the UPnP AddPortMapping action processed on the WAN interface, related to an “external forwarding” issue, enabling remote attackers to establish arbitrary...

CVE-2010-4504

CVE-2010-4504 affects eSyndiCat Directory 2.3. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the title parameter in two scripts, suggest-category.php and suggest-listing.php. Remote attackers could inject arbitrary web script or HTML as described in the CVE. The connected...

Buffer overflow

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

CVE-2008-7162

Buffer overflow in Hero Super Player 3000 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in a .M3U file. NOTE: this might be related to CVE-2008-4504...

CVE-2008-4504

Affected software: Hero DVD Player 3.0.8 (Herosoft Inc.). Vulnerability: heap-based buffer overflow in Mplayer.exe triggered by a long entry in an M3U file. Impact: user-assisted remote attackers may execute arbitrary code. Notes: the description indicates the provenance is from third-party infor...

CVE-2007-4504

CVE-2007-4504 affects Joomla! RSfiles (com_rsfiles) versions 1.0.2 and earlier. The vulnerability enables local file inclusion in index.php via a .. payload in the files.display action, allowing reading of arbitrary files on the affected server. The NVD records a CVSS v2 base score of 5.0 (Medium...

CVE-2006-4504

NX5Linx 1.0 is affected by an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL via the c and l parameters. The issue is documented with PoC/exploit availability (EV0138) and various advisories, and the vulnerability appears in multiple sources. No patch/remediatio...

Stack overflow

Stack-based buffer overflow in Safari in Mac OS X 10.4.5 and earlier, and 10.3.9 and earlier, allows remote attackers to execute arbitrary code via unspecified vectors involving a web page with crafted JavaScript, a different vulnerability than CVE-2005-4504...

CVE-2006-0390

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4504. Reason: This candidate is a duplicate of CVE-2005-4504. Notes: All CVE users should reference CVE-2005-4504 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Mac OS X Multiple Vulnerabilities (Security Update 2006-001)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-001. This security update contains fixes for the following applications : apachemodphp automount Bom Directory Services iChat IPSec LaunchServices LibSystem loginwindow Mail rsync Safari Syndication C Tenable Network...

CVE-2005-4504

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service memory consumption and application crash via HTML files with a large ROWSPAN attribute in a TD tag...

CVE-2005-4504

The vulnerability CVE-2005-4504 affects Apple Mac OS X (10.4.3 and earlier) in the khtml::RenderTableSection::ensureRows function within KHTMLParser used by Safari and TextEdit. A remote attacker can trigger a denial of service (memory consumption and application crash) by parsing HTML files cont...

CVE-2023-4504

creationtimestamp| type| source ---|---|--- 2000-12-31 23:00:00+00:00| seen| http://takeonme.org/cve/ 2023-09-21 16:37:00+00:00| seen| http://takeonme.org/cves/cve-2023-4504/ 2023-09-22 02:45:00+00:00| seen| https://t.me/cibsecurity/70932 2023-11-19 14:26:27+00:00| seen|...