USN-2432-1: GNU C Library vulnerabilities

Siddhesh Poyarekar discovered that the GNU C Library incorrectly handled certain multibyte characters when using the iconv function. An attacker could possibly use this issue to cause applications to crash, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu 12....

[SECURITY] [DLA 97-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u2 CVE ID : CVE-2012-6656 CVE-2014-6040 CVE-2014-7817 CVE-2012-6656 Fix validation check when converting from ibm930 to utf. When converting IBM930 code with iconv, if IBM930 code which includes invalid multibyte character "0xffff" is specified, then iconv...

DLA-97-1 eglibc - security update

Bulletin has no description...

openSUSE Security Update : glibc (openSUSE-SU-2014:1115-1)

glibc was updated to fix three security issues : - A directory traversal in locale environment handling was fixed CVE-2014-0475, bnc887022, GLIBC BZ 17137 - Disable gconv transliteration module loading which could be used for code execution CVE-2014-5119, bnc892073, GLIBC BZ 17187 - Fix crashes o...

glibc (important)

glibc was updated to fix three security issues: - A directory traversal in locale environment handling was fixed CVE-2014-0475, bnc887022, GLIBC BZ 17137 - Disable gconv transliteration module loading which could be used for code execution CVE-2014-5119, bnc892073, GLIBC BZ 17187 - Fix crashes on...

MW6 Technologies Aztec ActiveX Control Buffer Overflow (CVE-2013-6040)

A buffer overflow vulnerability exists in MW6 Technologies Aztec ActiveX Control. The vulnerability is due to improperly handled user input in the 'Data' parameter. A remote attacker could exploit the vulnerability via a specially crafted web page...

CVE-2013-6040

CVE-2013-6040 affects MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls prior to version 4.0. The vulnerability allows arbitrary code execution via a crafted HTML document, with the issue fixed in version 4.0. Exploitation would occur when a user views a malicious HTML document, potentially yi...

CVE-2013-6040 MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions 4.0 of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue...

CVE-2013-6040 MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions 4.0 of MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls have resolved the issue...

Old School Hackers spying on European governments

Kaspersky Lab's team of experts recently published a new research report that analyzed that Cyber criminals have targeted government officials in more than 20 countries, including Ireland and Romania with a new piece of malware called 'MiniDuke'. In a recent attack, malware has infected governmen...

CVE-2012-6040

CVE-2012-6040 corresponds to a cross-site scripting (XSS) flaw in the File King Advanced File Management 1.4 package. The vulnerability affects the users.php component and allows remote attackers to inject arbitrary web script or HTML by manipulating the page parameter. The primary sources descri...

CVE-2012-6040

creationtimestamp| type| source ---|---|--- 2012-01-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36539...

SuSE 10 Security Update : libsndfile (ZYPP Patch Number 6040)

Specially crafted CAF files could cause an integer overflow in libsndfile. CVE-2009-0186 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41550;...

CVE-2008-6040

SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php...

CVE-2008-6040

SQL injection vulnerability in index.php in Arcadem Pro 2.700 through 2.802 allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, probably related to includes/articleblock.php...

CVE-2008-6040

Arcadem Pro is affected by a SQL injection in index.php (versions 2.700–2.802). The vulnerability allows remote attackers to execute arbitrary SQL commands via the articlecat parameter, likely due to a flaw in includes/articleblock.php. No remediation or exploit details are provided in the connec...

CVE-2006-1278

creationtimestamp| type| source ---|---|--- 2008-07-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6040...

CVE-2007-6040

The CVE-2007-6040 entry concerns the Belkin F5D7230-4 Wireless G Router: a remote denial-of-service via a flood of TCP SYN packets, degrading networking and logging. The provided materials do not specify affected firmware versions, exact root cause details, exploit codes, or mitigations. Connecte...