SUSE SLED12 / SLES12 Security Update : gstreamer-plugins-bad (SUSE-SU-2017:0962-1)

This update for gstreamer-plugins-bad fixes the following issues: Security issues fixed : - CVE-2017-5843: set stream tags to NULL after unrefing bsc1024044. - CVE-2017-5848: rewrite PSM parsing to add bounds checking bsc1024068. Note that Tenable Network Security has extracted the preceding...

Debian DSA-3818-1 : gst-plugins-bad1.0 - security update

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DSA 3818-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3818-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 27, 2017 https://www.debian.org/security/faq -...

Debian DLA-830-1 : gst-plugins-bad0.10 security update

Some memory management issues were found in the GStreamer 'bad' plugins : CVE-2017-5843 A use after free issue was found in the mxfdemux element, which can can be triggered via a maliciously crafted file. CVE-2017-5848 The psdemux was vulnerable to several invalid reads, which could be triggered...

Fedora 25 : mingw-gstreamer1-plugins-bad-free (2017-216f4b9f9d)

Security fix for CVE-2017-5848, CVE-2017-5843 - Downgrade to 1.10.3 as it is the latest stable release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as muc...

Fedora Update for mingw-gstreamer1-plugins-bad-free FEDORA-2017-216f4b9f9d

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-5843

Multiple use-after-free vulnerabilities in the 1 gstminiobjectunref, 2 gsttaglistunref, and 3 gstmxfdemuxupdateessencetracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service crash via vectors involving stream tags, as demonstrated by 02785736.mxf...

CVE-2017-5843

Multiple use-after-free vulnerabilities in the 1 gstminiobjectunref, 2 gsttaglistunref, and 3 gstmxfdemuxupdateessencetracks functions in GStreamer before 1.10.3 allow remote attackers to cause a denial of service crash via vectors involving stream tags, as demonstrated by 02785736.mxf...

CVE-2017-5843

CVE-2017-5843 refers to multiple use-after-free vulnerabilities in GStreamer up to version 1.10.3, specifically in gst_mini_object_unref, gst_tag_list_unref, and gst_mxf_demux_update_essence_tracks. A remote attacker could crash the application (DoS) via crafted media such as MXF streams. Public ...

adstimer.com XSS vulnerability

Vulnerable URL: https://www.adstimer.com/?ref="// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5843 VIP website status:| Yes Check adstimer.com SSL connection:| Grade: A+...

CVE-2016-5843

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System OTRS allow remote attackers to execute arbitrary SQL commands via crafted search parameters...

CVE-2016-5843

Multiple SQL injection vulnerabilities affect the Open Ticket Request System (OTRS) FAQ package. The issues exist in FAQ package versions 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5, allowing remote attackers to execute arbitrary SQL commands via crafted search parameters. The CVE-20...

CVE-2015-5843

IOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-5843

Summary (CVE-2015-5843) : A memory corruption vulnerability exists in IOMobileFrameBuffer on Apple iOS versions prior to 9.0, enabling a local attacker to gain privileges or cause a denial of service via unspecified vectors. The vulnerability is addressed in iOS 9 by Apple’s update; affected comp...

CVE-2015-5843

IOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

SUSE SLES10 Security Update : IBM Java 5 (SUSE-SU-2013:1669-1)

IBM Java 5 SR16-FP4 has been released which fixes lots of bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ CVEs fixed: CVE-2013-4041, CVE-2013-5375, CVE-2013-5372, CVE-2013-5843, CVE-2013-5830, CVE-2013-5829, CVE-2013-5842,...

CVE-2014-5843

CVE-2014-5843 affects the ADP AGENCY Immobiliare Android app (com.wAdpagencyAndroid) version 0.1. The issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and steal sensitive information via a crafted certificate. The NVD...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1583-1)

Changes in MozillaFirefox : - update to Firefox 17.0 bnc790140 - MFSA 2012-91/CVE-2012-5842/CVE-2012-5843 Miscellaneous memory safety hazards - MFSA 2012-92/CVE-2012-4202 bmo758200 Buffer overflow while rendering GIF images - MFSA 2012-93/CVE-2012-4201 bmo747607 evalInSanbox location context...

IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...

Low: Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.4, 5.5 and 5.6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...