CVE-2016-4817

lib/http2/connection.c in H2O before 1.7.3 and 2.x before 2.0.0-beta5 mishandles HTTP/2 disconnection, which allows remote attackers to cause a denial of service use-after-free and application crash or possibly execute arbitrary code via a crafted packet...

CVE-2016-4817

H2O vulnerability CVE-2016-4817 affects lib/http2/connection.c: disconnection handling causes a use-after-free in HTTP/2 processing. A crafted packet can lead to denial of service (application crash) and possibly arbitrary code execution. Affected versions are H2O before 1.7.3 and 2.x before 2.0....

CVE-2015-4817

CVE-2015-4817 affects Oracle Solaris 11.2 Kernel Zones NIC driver. The vulnerability can allow a local user to compromise confidentiality, integrity, and availability by taking over the OS and executing arbitrary code via the Kernel Zones virtualized NIC driver, described as very difficult to exp...

Tivoli Storage Manager Server Unauthorized Backup File Displacement

The remote host is running a version of IBM Tivoli Storage Manager server that is affected by a vulnerability that allows unauthorized users to trigger backup operations that can cause previously backed up files to be rolled off. Note that this plugin does not check for the presence of any...

CVE-2014-4817

Summary: CVE-2014-4817 affects IBM Tivoli Storage Manager (TSM) server components. The vulnerability applies to TSM Server versions 5.x and 6.x prior to 6.3.5.10 and 7.x prior to 7.1.1.100, where a certain backup option combined with a filename that matches a previously used filename can allow re...

[security bulletin] HPSBGN02925 rev.1 - HP IceWall SSO, IceWall File Manager and IceWall Federation Agent, Multiple Remote Unauthorized Access Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03918632 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03918632 Version: 1 HPSBGN02925 rev....

CVE-2013-4817

HP IceWall SSO Agent Option 8.0–10.0 contains an unspecified vulnerability that could allow remote attackers to obtain sensitive information via unknown vectors (CVE-2013-4817). The HP Security Bulletin HPSBGN02925 rev.1 lists CVE-2013-4817 alongside related CVEs affecting IceWall SSO and related...

CVE-2012-4817

The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2012-4817

CVE-2012-4817 affects the NFSv4 client in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02. The root cause is improper handling of GID values in NFSv4, allowing remote attackers to cause a denial of service (vectors unspecified). The linked IBM AIX NFSv4 advisory (APARs IV17855, IV1...

CVE-2011-4817

CVE-2011-4817 affects IBM Maximo Asset Management and related IBM assets (Asset Management Essentials, Tivoli AM for IT, Service Request Manager, Maximo Service Desk, CCMDB) on multiple versions (6.2, 7.1, 7.2/7.5). The issue is an information disclosure where the About menu in Help shows the use...

SuSE 11.1 Security Update : coreutils (SAT Patch Number 4817)

This update fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling user's terminal via the TIOCSTI ioctl. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

CVE-2009-4817

CVE-2009-4817 : Affected product is Element-IT Ultimate Uploader 1.3. The issue is an unrestricted file upload vulnerability that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to the file in the upload...

CVE-2009-4817

creationtimestamp| type| source ---|---|--- 2009-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10578...

Gentoo Security Advisory GLSA 200901-09 (acroread)

The remote host is missing updates announced in advisory GLSA 200901-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200901-09 : Adobe Reader: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200901-09 Adobe Reader: User-assisted execution of arbitrary code An unspecified vulnerability can be triggered by a malformed PDF document, as demonstrated by 2008-HI2.pdf CVE-2008-2549. Peter Vreugdenhil, Dyon Balding, Will...

Stack overflow

Stack-based buffer overflow in the getPlus ActiveX control in gp.ocx 1.2.2.50 in NOS Microsystems getPlus Download Manager, as used for the Adobe Reader 8.1 installation process and other downloads, allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than...

openSUSE 10 Security Update : acroread (acroread-5749)

The acroread package was update to fix several security vulnerabilities in the JavaScript engine. CVE-2008-2992, CVE-2008-2549, CVE-2008-4812, CVE-2008-4813, CVE-2008-4817, CVE-2008-4816, CVE-2008-4814, CVE-2008-4815 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 5746)

The acroread package was update to fix several security vulnerabilities in the JavaScript engine. CVE-2008-2992 / CVE-2008-2549 / CVE-2008-4812 / CVE-2008-4813 / CVE-2008-4817 / CVE-2008-4816 / CVE-2008-4814 / CVE-2008-4815 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description...

CVE-2008-4817

Summary (CVE-2008-4817) : The vulnerability affects Adobe Acrobat/Reader

iDefense Security Advisory 11.04.08: Adobe Acrobat And Reader AcroJS Heap Corruption Vulnerability

iDefense Security Advisory 11.04.08 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 04, 2008 I. BACKGROUND Adobe Reader is a program for viewing Portable Document Format PDF documents. Acrobat is the program used to create such documents. More information is available at the following...