Fedora Update for moodle FEDORA-2015-2

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2015-0464)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5332

The CVE-2014-5332 entry affects NVIDIA Tegra Linux Kernel 3.10 and its NVMap driver. A race condition in the NVMAP_IOC_CREATE path can trigger a use-after-free in nvmap_handle during concurrent creation/duplication of handles, enabling a local attacker to escalate privileges (e.g., escaping Chrom...

Exploiting NVMAP to escape the Chrome sandbox - CVE-2014-5332

Posted by Lee Campbell, Graphics Pwning Unit This guest post continues Project Zero’s practice of promoting excellence in security research on the Project Zero blog Background: Chrome for Android implements a very different sandbox model to that of Chrome for Linux. One of the platform features w...

openSUSE Security Update : flash-player (openSUSE-SU-2013:1915-1)

This update fixes the following security issues with flash-player : - Security update to 11.2.202.332: bnc854881 - APSB13-28, CVE-2013-5331, CVE-2013-5332 - Prevents possible remote code execution! %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Adobe Flash Player Multiple Vulnerabilities-01 (Dec 2013) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 8639 / 8640)

This update fixes the following security issues with flash-player : - flash-plugin: multiple code execution flaws APSB13-28. bnc854881 - These updates resolve a type confusion vulnerability that could lead to code execution. CVE-2013-5331 - These updates resolve a memory corruption vulnerability...

CVE-2013-5332

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or caus...

CVE-2013-5332

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or caus...

CVE-2013-5332

CVE-2013-5332 affects Adobe Flash Player prior to 11.7.700.257/11.8.x/11.9.x before 11.9.900.170 on Windows/macOS, and prior to 11.2.202.332 on Linux, as well as Adobe AIR before 3.9.0.1380 and AIR SDK/SDK & Compiler before 3.9.0.1380. Impact: arbitrary code execution or memory corruption leading...

Adobe Flash Player及AIR远程代码执行漏洞(CVE-2013-5332)

BUGTRAQ ID: 64201 CVECAN ID: CVE-2013-5333 Adobe Flash Player是一个集成的多媒体播放器。Adobe AIR是针对网络与桌面应用的结合所开发出来的技术，可以不必经由浏览器而对网络上的云端程式做控制。 Adobe Flash Player及AIR在卸载Flash Player模块中存在释放后重利用漏洞，可导致间接引用已经释放的内存。 0 Adobe Flash Player = 11.9.900.152 Adobe Flash Player = 11.2.202.327 Adobe AIR = 3.9.0.1210 厂商补丁：...

Adobe Updates Security for Flash, Shockwave Players

Adobe published two security bulletins today, resolving a pair of vulnerabilities in both Shockwave and Flash Player. The Shockwave security update applies to versions 12.0.6.147 and earlier on Windows and Mac OS X and addresses a pair of memory corruption vulnerabilities CVE-2013-5333 and...

CVE-2012-5332

at32 Reverse Proxy 1.060.310 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a long string in an HTTP header field, as demonstrated using the If-Unmodified-Since field...

CVE-2012-5332

Summary: CVE-2012-5332 affects at32 Reverse Proxy 1.060.310 and is caused by processing an overly long HTTP header (demonstrated with the If-Unmodified-Since header), leading to a NULL pointer dereference and a DoS (application crash). Details from connected sources: Multiple CVE records (NVD, CV...

CVE-2008-5332

Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lib parameter to files in lib/action/ including a alias.php, b cancel.php, c context.php, d deadlinks.php, e delete.php, and others; and the 2...

CVE-2008-5332

The CVE-2008-5332 vulnerability affects Pie 0.5.3, with two PHP remote file inclusion vectors: (1) lib parameter to files in lib/action/ (e.g., alias.php, cancel.php, context.php, deadlinks.php, delete.php, etc.) and (2) GLOBALS[pie][library_path] parameter to files in lib/share/ (e.g., diff.php,...

CVE-2007-5332

CA BrightStor ARCserve Backup contains multiple remote vulnerabilities (including CVE-2007-5332) affecting mediasvr and caloggerd across versions 9.01–11.5 and Enterprise Backup r10.5. The issues stem from memory corruption in RPC argument processing, enabling a remote attacker to cause denial of...

Oracle ENABLE_HIERARCHY_INTERNAL procedure vulnerable to PL/SQL injection

Overview The Oracle ENABLEHIERARCHYINTERNAL procedure is vulnerable to PL/SQL injection. This vulnerability may allow a remote, authenticated attacker to execute arbitrary PL/SQL commands on a vulnerable Oracle installation. Description The Oracle ENABLEHIERARCHYINTERNAL procedure fails to proper...

CVE-2006-5332

CVE-2006-5332 concerns Oracle Database components: an unspecified vulnerability in xdb.dbms_xdbz within XMLDB affecting Oracle Database 9.2.0.6 and 10.1.0.4. The DB01 issue is reported as PL/SQL injection in the ENABLE_HIERARCHY_INTERNAL procedure, with evidence that reports of this vulnerability...