SUSE SLED11 Security Update : libwmf (SUSE-SU-2015:1378-1)

libwmf was updated to fix four security issues. These security issues were fixed : - CVE-2015-4588: Heap-based buffer overflow in the DecodeImage function allowed remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted 'run-length count' in an image in...

Fedora 21 : libwmf-0.2.8.4-45.fc21 (2015-10601)

CVE-2015-0848 Heap overflow CVE-2015-4588 RLE decoding doesn't check that the 'count' fits into the image CVE-2015-4695 metapencreate heap buffer overflow CVE-2015-4696 wmf2gd/wmf2eps use after free Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora Update for libwmf FEDORA-2015-10627

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3302-1 : libwmf - security update

Insufficient input sanitising in libwmf, a library to process Windows metafile data, may result in denial of service or the execution of arbitrary code if a malformed WMF file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

[SECURITY] [DSA 3302-1] libwmf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3302-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 06, 2015 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3302-1 (libwmf - security update)

Insufficient input sanitising in libwmf, a library to process Windows metafile data, may result in denial of service or the execution of arbitrary code if a malformed WMF file is opened. OpenVAS Vulnerability Test $Id: deb3302.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory...

CVE-2015-4696

CVE-2015-4696 is a use-after-free/processing flaw in libwmf 0.2.8.4 that can be triggered by opening specially crafted WMF files and may crash the application or allow arbitrary code execution via wmf2gd or wmf2eps. Multiple advisories (CentOS/CentOS-ASA, Debian DSA-3302, Red Hat/ALAS-604, Fedora...

CVE-2015-4696

Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service crash via a crafted WMF file to the 1 wmf2gd or 2 wmf2eps command...

[SECURITY] [DLA 257-1] libwmf security update

Package : libwmf Version : 0.2.8.4-6.2+deb6u2 CVE ID : CVE-2015-4695 CVE-2015-4696 Debian Bug : 784192 784205 libwmf is vulnerable to two denial of service due to invalid read operations when processing specially crafted WMF files. CVE-2015-4695 Heap buffer overread in libwmf CVE-2015-4696 Read...

Debian DLA-257-1 : libwmf security update

libwmf is vulnerable to two denial of service due to invalid read operations when processing specially crafted WMF files. CVE-2015-4695 Heap buffer overread in libwmf CVE-2015-4696 Read after free in wmf2gd/wmf2eps For the squeeze distribution, those issues have been fixed in libwmf...

DLA-257-1 libwmf - security update

Bulletin has no description...

CVE-2014-4696

CVE-2014-4696 describes multiple open redirect vulnerabilities in the Suricata package for pfSense, affected versions up to 1.0.6 (pfSense through 2.1.4). The issue allows remote attackers to redirect users to arbitrary sites via two parameters: referer in suricata_rules_flowbits.php and returl i...

CVE-2011-4696

CVE-2011-4696: A directory traversal in Eye-Fi Helper before 3.4.23 allows an attacker to create arbitrary files via .. in the filesignature of a GetPhotoStatus request. The issue could enable overwriting arbitrary files and may lead to DoS or arbitrary code execution. Affected product: Eye-Fi He...

CVE-2011-4696

Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. dot dot in the filesignature in a GetPhotoStatus request...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4696. Reason: This candidate is a duplicate of CVE-2012-4696. A CNA inadvertently entered an unassigned ID. Notes: All CVE users should reference CVE-2012-4696 instead of this candidate. All references and descriptions in thi...

CVE-2012-4696

CVE-2012-4696 describes a buffer overflow in Beijer’s ADP 6.5.0-180_R1967 and 6.5.1-186_R2942, and H-Designer 6.5.0 B180_R1967. The flaw allows local users to gain privileges by inserting a long string into a DLL file. Affected components: Beijer ADP and H-Designer (specific versions listed). Roo...

CVE-2010-4696

Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via the 1 filterorder or 2 filterorderDir parameter in a comcontact action to index.php, a different vulnerability than CVE-2010-4166. NOTE: the provenance of this...

CVE-2010-4696

CVE-2010-4696 describes multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22. The exploits affect parameters in two actions: (1) filter_order and (2) filter_order_Dir in a com_contact action to index.php (and a note that this is a different vulnerability from CVE-2010-4166). Addi...

CVE-2009-4696

creationtimestamp| type| source ---|---|--- 2009-07-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9196...

Gentoo Security Advisory GLSA 200811-01 (opera)

The remote host is missing updates announced in advisory GLSA 200811-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...