CVE-2017-5839

CVE-2017-5839 affects the GStreamer gst-plugins-base before 1.10.3. The function gst_riff_create_audio_caps does not properly limit recursion, enabling remote attackers to cause a denial of service via vectors involving nested WAVEFORMATEX, resulting in a stack overflow/crash. Affected versions: ...

[ASA-201702-4] gst-plugins-base-libs: multiple issues

Arch Linux Security Advisory ASA-201702-4 ========================================= Severity: Critical Date : 2017-02-03 CVE-ID : CVE-2017-5837 CVE-2017-5839 CVE-2017-5842 CVE-2017-5844 Package : gst-plugins-base-libs Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-1...

[SECURITY] [DSA 3639-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3639-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 03, 2016 https://www.debian.org/security/faq -...

Debian DLA-568-1 : wordpress security update (httpoxy)

Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2016-5387 WordPress allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via...

Fedora Update for wordpress FEDORA-2016-7db496f6f2

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-5839

WordPress before 4.5.3 allows remote attackers to bypass the sanitizefilename protection mechanism via unspecified vectors...

CVE-2016-5839

WordPress before 4.5.3 allows remote attackers to bypass the sanitizefilename protection mechanism via unspecified vectors...

CVE-2016-5839

WordPress before 4.5.3 allows remote attackers to bypass the sanitizefilename protection mechanism via unspecified vectors...

UBUNTU-CVE-2016-5839

WordPress before 4.5.3 allows remote attackers to bypass the sanitizefilename protection mechanism via unspecified vectors...

CVE-2016-5839

CVE-2016-5839 affects WordPress prior to 4.5.3, where the sanitize_file_name protection mechanism can be bypassed via unspecified vectors, enabling remote attackers to potentially bypass filename sanitization. Publicly documented in multiple advisories connected to WordPress, including Debian DSA...

CVE-2016-5839

WordPress before 4.5.3 allows remote attackers to bypass the sanitizefilename protection mechanism via unspecified vectors...

Oracle: Security Advisory (ELSA-2012-1483)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-5839

CVE-2015-5839 : In Apple iOS, pre-9.0 dyld can bypass code-signing protection by an app that places a crafted signature into an executable. The issue arises from how dyld validates the code signature of executables, enabling bypass of the protection under crafted conditions. Affected software: iO...

CVE-2014-5839

The CVE-2014-5839 entry affects the Android app Acces Compte (com.fullsix.android.labanquepostale.accountaccess) version 3.2.6, which does not verify X.509 certificates from SSL servers. The root cause is improper TLS certificate validation, enabling man-in-the-middle attackers to spoof servers a...

CVE-2013-5839

CVE-2013-5839 affects Oracle Solaris 10, with the vulnerability in the Oracle Java Web Console component. Affected product/version details found in connected documents indicate Solaris 10 (x86 sparc variants) and specifically the Oracle Java Web Console subcomponent; the underlying root cause and...

Fedora Update for seamonkey FEDORA-2012-18931

Check for the Version of seamonkey OpenVAS Vulnerability Test Fedora Update for seamonkey FEDORA-2012-18931 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for seamonkey FEDORA-2012-18931

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : seamonkey-2.14-1.fc17 (2012-18952)

Update to 2.14 Fix CVE-2012-5830, CVE-2012-5833, CVE-2012-5835, CVE-2012-4212-4218, CVE-2012-5829, CVE-2012-5839, CVE-2012-5840, CVE-2012-5836, CVE-2012-4202, CVE-2012-5842, CVE-2012-5843 and others, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Update to...

Fedora 18 : seamonkey-2.14-1.fc18 (2012-18894)

Update to 2.14 Fix CVE-2012-5830, CVE-2012-5833, CVE-2012-5835, CVE-2012-4212-4218, CVE-2012-5829, CVE-2012-5839, CVE-2012-5840, CVE-2012-5836, CVE-2012-4202, CVE-2012-5842, CVE-2012-5843 and others, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Note that...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 8381)

Mozilla Firefox has been updated to the 10.0.11 ESR security release, which fixes various bugs and security issues. - Security researcher miaubiz used the Address Sanitizer tool to discover a series critically rated of use-after-free, buffer overflow, and memory corruption issues in shipped...