Updated iceape packages fix security vulnerabilities

Updated iceape packages include security fixes from upstream Seamonkey and Firefox: Multiple flaws were found in the way Iceape 2.48 processes various types of web content, where loading a web page containing malicious content could cause Iceape to crash, execute arbitrary code, or disclose...

CVE-2016-5409

Red Hat OpenShift Enterprise 2 is affected: the GEARID cookie’s Set-Cookie header does not set the HttpOnly flag, which could allow remote attackers to access potentially sensitive information via script. Root cause: missing HttpOnly on the GEARID cookie. Impact: disclosed information with partia...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2017:0714-1)

This update for MozillaFirefox to ESR 45.8 fixes the following issues: Security issues fixed bsc1028391 : - CVE-2017-5402: Use-after-free working with events in FontFace objects - CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping - CVE-2017-5400: asm.js...

GE Hydran M2 Predictable TCP Initial Sequence Vulnerability

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on February 10, 2015, and is being released to the NCCIC/ICS-CERT web site. Raheem Beyah, David Formby, and San Shin Jung of Georgia Tech, via a research project partially sponsored by the Georgia Tech National...

CVE-2015-5409

HP Version Control Repository Manager (VCRM) prior to 7.5.0 is affected by CVE-2015-5409: an unspecified buffer overflow due to improper validation of user-supplied input. A remote, authenticated attacker could cause a denial of service or execute arbitrary code. Remediation: upgrade to version 7...

CVE-2014-5409

CVE-2014-5409 affects GE Digital Energy Hydran M2 devices with the 17046 Ethernet option. The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL does not generate proper random TCP Initial Sequence Numbers, enabling an attacker to predict sequence values and spoof packets. Exploitation could b...

CVE-2012-5409

Siemens SiPass integrated MP2.6 (and earlier) is affected by CVE-2012-5409 due to AscoServer.exe failing to properly handle IOCP RPC messages over Ethernet, enabling remote attackers to write data to memory and potentially execute arbitrary code via crafted messages (pointer dereference or buffer...

BitDefender Antivirus PDF Processing Memory Corruption (CVE-2008-5409)

There exists a memory corruption vulnerability in multiple BitDefender products. The vulnerability is due to boundary errors within the BitDefender PDF Scanner plugin pdf.xmd. A remote attacker can exploit this vulnerability by delivering a crafted PDF file to the vulnerable system, potentially...

CVE-2008-5409

The connected advisories confirm a memory corruption/DoS vulnerability in BitDefender/pdf.xmd that processes PDF streams (e.g., FlateDecode/ASCIIHexDecode). Affects BitDefender products using the pdf.xmd plugin (BitDefender Free Edition 10, Antivirus Standard 10; BullGuard Internet Security 8.5; ...

BitDefender 'pdf.xmd' Module PDF Parsing Remote DoS Vulnerability

This host is installed with BitDefender Internet Security and AntiVirus and is prone to denial of service vulnerability. The flaw is due to boundary error in 'pdf.xmd' module when parsing of data encoded using 'FlateDecode' and 'ASCIIHexDecode' filters. This can be exploited to cause a memory...

CVE-2008-5409

creationtimestamp| type| source ---|---|--- 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7178...

SuSE 10 Security Update : bind (ZYPP Patch Number 5409)

The transaction id and the udp source port used for DNS queries by the bind nameserver were predicatable. Attackers could potentially exploit that weakness to manipulate the DNS cache 'DNS cache poisoning', CVE-2008-1447. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description o...

CVE-2007-5409

NuSEO PHP Enterprise 1.6 (NuSEO.PHP) is affected by CVE-2007-5409. The vulnerability is a PHP remote file inclusion in admin/nuseo_admin_d.php when register_globals is enabled. An attacker can supply a URL via the nuseo_dir parameter to execute arbitrary PHP code on the affected system. The conne...

Cisco IOS 12.3 - LPD Remote Buffer Overflow

Cisco IOS 12.3 - LPD Remote Buffer Overflow source: https://www.securityfocus.com/bid/26001/info Cisco IOS is prone to a remote buffer-overflow vulnerability in its LPD service because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...