79 matches found
Google Chrome < 57.0.2987.133 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 57.0.2987.133. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop29 advisory. - An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linu...
FreeBSD : chromium -- multiple vulnerabilities (7cf058d8-158d-11e7-ba2c-e8e0b747a45a)
Google Chrome Releases reports : 5 security fixes in this release, including : - 698622 Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar - 699166 High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs - 662767 High CVE-2017-5052: Bad...
Stable Channel Update for Desktop
The stable channel has been updated to 57.0.2987.133 for Windows, Mac, and Linux. This will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...
Oracle: Security Advisory (ELSA-2008-0978)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-5052
Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
MS13-097: Cumulative Security Update for Internet Explorer (2898785)
The remote host is missing Internet Explorer IE Security Update 2898785. The installed version of IE is affected by multiple elevation of privilege and memory corruption vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc...
CVE-2013-5052
CVE-2013-5052 is a memory-corruption vulnerability in Microsoft Internet Explorer that can enable remote code execution when a user views a crafted webpage. The provided documents indicate the issue affects Internet Explorer across multiple versions (notably IE7, with broader mentions of IE6–IE8 ...
CVE-2013-5052
Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
Microsoft Internet Explorer Memory Corruption (MS13-097: CVE-2013-5052)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Internet Explorer CVE-2013-5052 Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing...
CentOS 4 : openssh (CESA-2007:0703)
Updated openssh packages that fix two security issues and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. These packages include the core files...
Slackware: Security Advisory (SSA:2006-272-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Scientific Linux Security Update : openssh on SL5.x
Problem description : A flaw was found in the way the ssh server wrote account names to the audit subsystem. An attacker could inject strings containing parts of audit messages, which could possibly mislead or confuse audit log parsing tools. CVE-2007-3102 A flaw was found in the way the OpenSSH...
CoCSoft Stream Down Stack Overflow
Added: 01/10/2012 CVE: CVE-2011-5052 BID: 51190 OSVDB: 78043 Background CoCSoft Stream Down is a streaming media download tool. Problem The CoCSoft Stream Down HTTP client implementation in version 6.8 and prior does not properly validate HTTP responses. This vulnerability may allow an attacker t...
CVE-2011-5052
CVE-2011-5052 affects CoCSoft Stream Down (Windows) up to version 6.8.0. The vulnerability is a stack-based buffer overflow in the HTTP client implementation when handling responses, allowing a remote attacker to trigger arbitrary code execution by delivering a specially crafted long HTTP respons...
CVE-2011-5052
creationtimestamp| type| source ---|---|--- 2011-12-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18283 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/streamdownbof.rb 2025-02-06 03:13:40+00:00| seen|...
CoCSoft StreamDown 6.8.0 Buffer Overflow
Stream Down 6.8.0 seh based buffer overflow triggered when processing the server response packet. During the overflow a structured exception handler is overwritten. Module Options msf use exploit/windows/misc/stream/downbof msf undefineddownbof show actions ...actions... msf undefineddownbof set...
CVE-2010-5052
GetSimple CMS 2.01 is affected by a cross-site scripting (XSS) vulnerability in admin/components.php. The flaw arises from input sanitation in the val[] parameter, allowing remote attackers to inject arbitrary web script or HTML. Exploitation was demonstrated via a crafted POST to /admin/componen...
SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure
The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...