SUSE SLES11 Security Update : PHP5 (SUSE-SU-2013:1316-1)

The following security issues have been fixed : - CVE-2013-4635 bnc828020: - Integer overflow in SdnToJewish - CVE-2013-4113 bnc829207: - heap corruption due to badly formed xml Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

CVE-2014-4635

Multiple cross-site scripting XSS vulnerabilities in EMC Documentum Web Development Kit WDK before 6.8 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4635

EMC Documentum Web Development Kit (WDK) before 6.8 contains multiple Cross-Site Scripting (XSS) vulnerabilities (CVE-2014-4635). The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially impacting users in the context of authenticated sessions....

SOL15316 - PHP vulnerability CVE-2013-4635

Recommended action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

PHP SdnToJewish Function Integer Overflow (CVE-2013-4635)

A denial of service vulnerability exists in PHP...

SuSE 11.2 / 11.3 Security Update : PHP5 (SAT Patch Numbers 8087 / 8088)

The following security issues have been fixed : - bnc828020:. CVE-2013-4635 - Integer overflow in SdnToJewish - bnc829207:. CVE-2013-4113 - heap corruption due to badly formed xml %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Ubuntu Update for php5 USN-1905-1

Check for the Version of php5 OpenVAS Vulnerability Test $Id: gbubuntuUSN19051.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for php5 USN-1905-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Ubuntu: Security Advisory (USN-1905-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : PHP5 -- Integer overflow in Calendar module (5def3175-f3f9-4476-ba40-b46627cc638c)

The PHP development team reports : Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service application hang via a large argument to the jdtojewish function...

USN-1905-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled the xmlparseintostruct function. If a PHP application parsed untrusted XML, an attacker could use this flaw with a specially-crafted XML document to cause PHP to crash, resulting in a denial of service, or to possibly execute arbitrary code...

CVE-2013-4635

Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service application hang via a large argument to the jdtojewish function...

CVE-2013-4635

Summary: PHP has an integer overflow in the SdnToJewish function (jewish.c, Calendar component) that can cause a denial of service when a large argument is passed to jdtojewish. This affects PHP versions prior to 5.3.26 and 5.4.x prior to 5.4.16. Root cause (as reported): overflow in SdnToJewish....

Updated php package fixes several issues

Fixed php bug 64879 Heap based buffer overflow in quotedprintableencode, CVE-2013-2110. Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service application hang...

Updated php packages fix security vulnerabilies

Heap based buffer overflow in quotedprintableencode in PHP before version 5.4.16 CVE-2013-2110. Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service applicati...

Mandriva Update for mplayer MDVSA-2011:088 (mplayer)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for ffmpeg MDVSA-2011:061 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-4635

CVE-2010-4635 is a SQL injection vulnerability in Site2Nite Vacation Rental (VRBO) Listings, triggered by the ID parameter in detail.asp. The issue allows remote attackers to execute arbitrary SQL commands. This is documented in the NVD entry and corroborated by multiple sources (e.g., CVE lists ...

Debian: Security Advisory (DSA-2000-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

CVE-2009-4635

FFmpeg 0.5 contains CVE-2009-4635, a vulnerability where a crafted MOV container with improperly ordered tags causes mov.c and utils.c to use inconsistent codec types/identifiers, leading to a video-structure pointer being passed to the mp3 decoder and a stack-based buffer overflow. The issue is ...