Google Chrome < 54.0.2840.99 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 54.0.2840.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 201611stable-channel-update-for-desktop9 advisory. - browser/extensions/api/dial/dialregistry.cc in Google Chrome before...

Stable Channel Update for Desktop

The stable channel has been updated to 54.0.2840.99 for Windows, 54.0.2840.98 for Mac, and 54.0.2840.100 on Linux. This will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fi...

Fedora 21 : libvdpau-1.1.1-2.fc21 (2015-3ca3f2138b)

libvdpau-1.1.1-2.fc21 - Backport current patches - Switch to new upstream git repository on freedesktop.org ---- Update to 1.1.1 Security fix for CVE-2015-5198, CVE-2015-5199, CVE-2015-5200 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

SUSE SLED12 / SLES12 Security Update : libvdpau (SUSE-SU-2015:1892-1)

libvdpau was updated to use securegetenv instead of getenv for several variables so it can be more safely used in setuid applications. - CVE-2015-5198: libvdpau: incorrect check for security transition bnc943967 - CVE-2015-5199: libvdpau: directory traversal in dlopen bnc943968 - CVE-2015-5200:...

SUSE-SU-2015:1925-1 Security update for libvdpau

libvdpau was updated to use securegetenv instead of getenv for several variables so it can be more safely used in setuid applications. CVE-2015-5198: libvdpau: incorrect check for security transition bnc943967 CVE-2015-5199: libvdpau: directory traversal in dlopen bnc943968 CVE-2015-5200: libvdpa...

[SECURITY] [DSA 3355-1] libvdpau security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3355-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 10, 2015 https://www.debian.org/security/faq -...

openSUSE Security Update : libvdpau (openSUSE-2015-576)

libvdpau was updated to use securegetenv instead of getenv for several variables so it can be more safely used in setuid applications. - CVE-2015-5198: libvdpau: incorrect check for security transition bnc943967 - CVE-2015-5199: libvdpau: directory traversal in dlopen bnc943968 - CVE-2015-5200:...

Updated libvdpau packages fix security vulnerabilities

Updated libvdpau packages fix security vulnerabilities: libvdpau versions 1.1 and earlier, when used in setuid or setgid applications, contain vulnerabilities related to environment variable handling that could allow an attacker to execute arbitrary code or overwrite arbitrary files CVE-2015-5198...

Debian DSA-3355-1 : libvdpau - security update

Florian Weimer of Red Hat Product Security discovered that libvdpau, the VDPAU wrapper library, did not properly validate environment variables, allowing local attackers to gain additional privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DLA 306-1] libvdpau security update

Package : libvdpau Version : 0.4.1-2+deb6u1 CVE ID : CVE-2015-5198 CVE-2015-5199 CVE-2015-5200 Debian Bug : 797895 Florian Weimer of Red Hat Product Security discovered that libvdpau, the VDPAU wrapper library, did not properly validate environment variables, allowing local attackers to gain...

[SECURITY] [DSA 3355-1] libvdpau security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3355-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 10, 2015 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3355-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-5199

CVE-2015-5199 : A directory traversal vulnerability in libvdpau’s dlopen path allows local privilege escalation via the VDPAU_DRIVER environment variable, affecting libvdpau versions prior to 1.1.1. The incident is documented across multiple distributions (Fedora, SUSE/openSUSE, Mageia, Fedora up...

CVE-2015-5199

Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAUDRIVER environment variable...

Fedora 23 : libvdpau-1.1.1-1.fc23 (2015-14850)

Update to 1.1.1 Security fix for CVE-2015-5198, CVE-2015-5199, CVE-2015-5200 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2014-5199

CVE-2014-5199 is a CSRF vulnerability in the WordPress File Upload plugin (wp-file-upload) for WordPress, affecting versions before 2.4.2. The issue allows remote attackers to hijack the administrator’s authentication for requests that change plugin settings via unspecified vectors. Root cause is...

CVE-2014-5199

Cross-site request forgery CSRF vulnerability in the WordPress File Upload plugin wp-file-upload before 2.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are...

Apple TV < 6.1 Multiple Vulnerabilities

According to its banner, the remote Apple TV 2nd generation or later device is prior to 6.1. It is, therefore, reportedly affected by multiple vulnerabilities, the most serious issues of which could result in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if...

UBUNTU-CVE-2013-5199

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1...

CVE-2013-5199

CVE-2013-5199 affects WebKit as used by Apple Safari , where memory corruption could be triggered by a crafted website, allowing remote code execution or a browser crash. The description specifies vulnerable targets as WebKit in Safari before 6.1.1 and 7.x before 7.0.1. Remediation available in A...