SUSE CVE-2012-5147

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling...

Debian DSA-5147-1 : dpkg - security update

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5147 advisory. - Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability...

Ubuntu: Security Advisory (USN-5147-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Vim vulnerabilities (USN-5147-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5147-1 advisory. It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to...

SonicWall NetExtender 10.2.0.300 Unquoted Service Path

Exploit Title: SonicWall NetExtender 10.2.0.300 - Unquoted Service Path Exploit Author: shinnai Software Link: https://www.sonicwall.com/products/remote-access/vpn-clients/ Version: 10.2.0.300 Tested On: Windows CVE: CVE-2020-5147...

SonicWall NetExtender 10.2.0.300 - Unquoted Service Path

Exploit Title: SonicWall NetExtender 10.2.0.300 - Unquoted Service Path Exploit Author: shinnai Software Link: https://www.sonicwall.com/products/remote-access/vpn-clients/ Version: 10.2.0.300 Tested On: Windows CVE: CVE-2020-5147...

SUSE: Security Advisory (SUSE-SU-2018:0850-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-5147

creationtimestamp| type| source ---|---|--- 2021-01-09 07:42:26+00:00| seen| https://t.me/cibsecurity/21880 2024-11-14 06:07:38+00:00| seen| MISP/53d3b2ac-2a55-4e02-9d09-9347da0df79d...

SonicWall NetExtender windows client unquoted service path vulnerability

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier. CVE: CVE-2020-5147 Last...

CVE-2020-5147

CVE-2020-5147 affects SonicWall NetExtender Windows client (version 10.2.300 and earlier). The root cause is an unquoted service path, enabling a local attacker to gain elevated privileges on the host. The CVE description in multiple sources confirms the vulnerable component as the NetExtender Wi...

Trend Micro OfficeScan Multiple Vulnerabilities (1119961)

Trend Micro OfficeScan is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-5147

The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Android and ARM platforms. This vulnerability affects Firefox ESR 52.7.2 and Firefox 59.0.1...

CVE-2018-5147

CVE-2018-5147 references the same flaw as CVE-2018-5146, arising from an out-of-bounds write in Vorbis processing, with libtremor used by Firefox on Android/ARM. The initial description notes impact on Firefox ESR < 52.7.2 and Firefox

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:0850-1)

This update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 bsc1085130 : - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds wri...

[SECURITY] [DLA 1319-1] firefox-esr security update

Package : firefox-esr Version : 52.7.2esr-1deb7u1 CVE ID : CVE-2018-5146 CVE-2018-5147 Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code. For Debian 7 "Wheezy", these problems have been...

Debian: Security Advisory (DLA-1319-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox < 59.0.1

The version of Firefox installed on the remote Windows host is prior to 59.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-08 advisory. - The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on...

[SECURITY] [DLA 1312-1] libvorbisidec security update

Package : libvorbisidec Version : 1.0.2+svn18153-0.2+deb7u1 CVE ID : CVE-2018-5147 Huzaifa Sidhpurwala discovered that an out-of-bounds memory write in the codebook parsing code of the Libtremor multimedia library could result in the execution of arbitrary code if a malformed Vorbis file is opene...

openSUSE Security Update : MozillaFirefox (openSUSE-2018-278)

This update for Mozilla Firefox to version 52.7.2esr fixes security issues and bugs. Security issues fixed : - CVE-2018-5146: Specially crafted vorbis files could have been used to execute arbitrary code via an Out of bounds memory write bsc1085671, MFSA 2018-08 - CVE-2018-5147: Specially crafted...

Debian DSA-4141-1 : libvorbisidec - security update

Huzaifa Sidhpurwala discovered that an out-of-bounds memory write in the codebook parsing code of the Libtremor multimedia library could result in the execution of arbitrary code if a malformed Vorbis file is opened. C Tenable Network Security, Inc. The descriptive text and package checks in this...