58 matches found
CVE-2016-5769
Removed by vendor...
CVE-2016-5769
CVE-2016-5769: In the PHP mcrypt extension (mcrypt.c), multiple integer overflows enable a crafted length value to cause a heap-based buffer overflow and crash or potentially other impact. Affected: PHP releases prior to 5.5.37, 5.6.x prior to 5.6.23, and 7.x prior to 7.0.8, with the vulnerabilit...
Ubuntu 14.04 LTS / 16.04 LTS : PHP vulnerabilities (USN-3045-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3045-1 advisory. It was discovered that PHP incorrectly handled certain SplMinHeap::compare operations. A remote attacker could use this issue to cause PHP to...
USN-3045-1: PHP vulnerabilities
It was discovered that PHP incorrectly handled certain SplMinHeap::compare operations. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2015-4116 ...
Medium: php55, php56
Issue Overview: A stack consumption vulnerability in GD in PHP allows remote attackers to cause a denial of service via a crafted imagefilltoborder call. CVE-2015-8874 An integer overflow, leading to a heap-based buffer overflow was found in the imagecreatefromgd2 function of PHP's gd extension. ...
[SECURITY] [DSA 3618-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3618-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 14, 2016 https://www.debian.org/security/faq -...
openSUSE: Security Advisory for php5 (openSUSE-SU-2016:1761-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated php packages fix security vulnerability
php-mbstring phpmbregexeregreplaceexec - double free CVE-2016-5768. php-mcrypt heap Overflow due to integer overflows CVE-2016-5769. php-SPL int/sizet confusion in SplFileObject::fread CVE-2016-5770. php-SPL Use After Free Vulnerability in PHP's GC algorithm and unserialize CVE-2016-5771. php-WDD...
CVE-2016-5769
Multiple integer overflows in mcrypt.c in the mcrypt extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted length value,...
CVE-2015-5769
CVE-2015-5769 affects Apple iOS (MSVDX Driver) prior to 8.4.1. A denial-of-service via a crafted video could crash the device; fix implemented in iOS 8.4.1 (improved memory handling for MSVDX Driver).
CVE-2015-5769
The MSVDX driver in Apple iOS before 8.4.1 allows remote attackers to cause a denial of service device crash via a crafted video...
CVE-2014-5769
CVE-2014-5769 affects the Mobiscope Local (aka ehs.mobiscope.kernel) Android app version 1.05. The underlying issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling potential man-in-the-middle attackers to spoof servers and access sensitive information v...
CVE-2013-5769
CVE-2013-5769 affects Oracle Siebel CRM 8.1.1, specifically the Siebel Core - EAI component (Web Services). The vulnerability allows remote authenticated users to impact availability via HTTP-based attacks on the Web Services subcomponent, summarized as an authenticated network DoS (partial). The...
Generic Protocol Detection
Binary data 5769.prm...
Fedora Core 11 FEDORA-2009-5769 (ocsinventory)
The remote host is missing an update to ocsinventory announced via advisory FEDORA-2009-5769. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
CVE-2008-5769
CVE-2008-5769 concerns Kerio MailServer prior to 6.6.2, with multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary web script or HTML via the folder parameter to mailCompose.php or the daytime parameter to calendarEdit.php. The NVD/OpenVAS recor...
CVE-2007-5769
CVE-2007-5769 describes a double‑free vulnerability in the getreply function of netkit‑ftp’s ftp.c (netkit‑ftp 0.17 20040614 and later). This can allow a remote FTP server to trigger a denial of service (application crash) and possibly other impact via FTP protocol behavior. The issue is tied to ...
CVE-2006-5769
CVE-2006-5769 has XSS vulnerabilities in admin.tool CMS 3 and earlier. The affected component is the admin.tool CMS frontend/backend where the (1) fSid and (2) fSrcBegriffe parameters can be injected to execute arbitrary web script or HTML in unspecified vectors. The NVD entry lists a MEDIUM base...