[SECURITY] [DSA 3655-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3655-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 26, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3655-1 (mupdf - security update)

Two vulnerabilities were discovered in MuPDF, a lightweight PDF viewer. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-6265 Marco Grassi discovered a use-after-free vulnerability in MuPDF. An attacker can take advantage of this flaw to cause an...

openSUSE Security Update : mupdf (openSUSE-2016-926)

This update for mupdf fixes the following issues : Security issues fixed : - CVE-2016-6265: Fixed a use-after-free issue boo990195. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

MGASA-2016-0268 Updated mupdf packages fix security vulnerability

Use-after-free issue in mupdf in pdfloadxref can cause a denial of service CVE-2016-6265...

DHS Alerts to Continuing Browser Cookie Vulnerabilities

In case didn’t know or need a reminder, browser cookies aren’t exactly impervious to attack. The DHS-sponsored CERT at the Software Engineering Institute at Carnegie Mellon University this week dropped an alert that warns users about the continued prevalence of a class of cookie vulnerabilities...

Exploiting Browser Cookies to Bypass HTTPS and Steal Private Information

A newly discovered critical flaw in the implementation of web cookies by major browsers could open secured HTTPS browsing to Man-in-the-middle attacks. The US Computer Emergency Response Team CERT has revealed that all the main browser vendors have improperly implemented the RFC 6265 Standard, al...

Cookies set via HTTP requests may be used to bypass HTTPS and reveal private information

Overview RFC 6265 previously RFC 2965 established HTTP State Management, also known as "cookies". In most web browser implementations of RFC 6265, cookies set via HTTP requests may allow a remote attacker to bypass HTTPS and reveal private session information. Description HTTP cookies have long...

CVE-2015-6265

The CLI in Cisco Application Control Engine ACE 4700 A5 3.0 and earlier allows local users to bypass intended access restrictions, and read or write to files, by entering an unspecified CLI command with a crafted file as this command's input, aka Bug ID CSCur23662...

CVE-2015-6265

The Cisco ACE 4700 A5 CLI vulnerability (CVE-2015-6265) allows an authenticated, local attacker to bypass access restrictions and read/write files by feeding a crafted file as input to a CLI command. Root cause: insufficient file access controls. Affected: ACE 4700 A5 running 3.0 and earlier. Imp...

Schweitzer Engineering Laboratories (SEL) Telnet Account Detection (SCADA)

Binary data 6265.prm...

CVE-2008-6265

CVE-2008-6265 describes a directory traversal vulnerability in the Portfolio module of Cyberfolio (version 7.12.2 and earlier). The flaw resides in the portfolio/css.php component, where an attacker can abuse the theme parameter (using ..) to cause local file inclusion and execute arbitrary local...

CVE-2008-6265

creationtimestamp| type| source ---|---|--- 2008-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7065...

CVE-2007-6265

CVE-2007-6265 affects avast! 4 Home and Professional Editions prior to 4.7.1098. The vulnerability allows remote attackers to influence the system via a crafted TAR archive, with the impact described as unknown in the available sources. No exploitation details, affected subcomponents, or remediat...