openSUSE Security Update : virglrenderer (openSUSE-2017-415)

This update for virglrenderer fixes the following issues : Security issues fixed : - CVE-2017-6386: memory leakage while in vrendcreatevertexelementsstate bsc1027376 - CVE-2017-6355: integer overflow while creating shader object bsc1027108 - CVE-2017-6317: fix memory leak in add shader program...

SUSE SLED12 / SLES12 Security Update : virglrenderer (SUSE-SU-2017:0798-1)

This update for virglrenderer fixes the following issues: Security issues fixed : - CVE-2017-6386: memory leakage while in vrendcreatevertexelementsstate bsc1027376 - CVE-2017-6355: integer overflow while creating shader object bsc1027108 - CVE-2017-6317: fix memory leak in add shader program...

CVE-2017-6355

Integer overflow in the vrendcreateshader function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service process crash via crafted pktlength and offlen values, which trigger an out-of-bounds access...

CVE-2017-6355

CVE-2017-6355 affects virglrenderer (vrend_renderer.c: vrend_create_shader). An integer overflow in vrend_create_shader allows a local guest OS user to trigger an out-of-bounds access, leading to a denial of service (process crash). The issue is described as exploitable via crafted pkt_length and...

CVE-2017-6355

Integer overflow in the vrendcreateshader function in vrendrenderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service process crash via crafted pktlength and offlen values, which trigger an out-of-bounds access...

CVE-2016-6355

Cisco IOS XR vulnerability CVE-2016-6355 affects ASR 9001 devices, where memory leaks in the driver processing of incoming fragmented packets can cause a denial of service by dropping all control-plane protocols. Affected releases include IOS XR 5.1.x up to 5.1.3, 5.2.x up to 5.2.5, and 5.3.x up ...

CVE-2015-6355

CVE-2015-6355 affects Cisco UCS Blade Server web interface 2.2(5b)A; the vulnerability allows an unauthenticated remote attacker to obtain potentially sensitive software version information by visiting an unspecified URL. It is an information-disclosure issue (Bug CSCuw87226). Cisco’s advisory no...

CVE-2014-6355

CVE-2014-6355 concerns a vulnerability in the Microsoft Graphics Component where JPEG decoding in memory is mishandled, enabling information disclosure when a user visits a crafted web site. Affected products include Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, ...

MS14-085: Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3013126)

The version of the Microsoft Graphics Component installed on the remote host is affected by an information disclosure vulnerability due to the way JPEG content is decoded. A remote attacker can exploit this vulnerability by convincing a user to browse to a website containing specially crafted JPE...

CVE-2012-6355

IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database CCMDB 7.1 and 7.2, and SmartCloud...

CVE-2012-6355

CVE-2012-6355 affects IBM Maximo Asset Management (versions 6.2–7.5), Maximo Asset Management Essentials (6.2–7.5), Tivoli Asset Management for IT (6.2–7.2), Tivoli Service Request Manager (7.1–7.2), Maximo Service Desk (6.2), CCMDB (7.1–7.2), and SmartCloud Control Desk (7.5). The vulnerability ...

CVE-2008-6355

The CVE-2008-6355 entry concerns Net Guys ASPired2Protect where sensitive data is stored under the web root with insufficient access control, allowing remote attackers to directly download ASPired2Protect.mdb containing usernames and passwords. The connected records confirm the affected product a...

CVE-2008-6355

creationtimestamp| type| source ---|---|--- 2008-12-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7428...

Gentoo Security Advisory GLSA 200712-17 (exiftags)

The remote host is missing updates announced in advisory GLSA 200712-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200712-17 (exiftags)

The remote host is missing updates announced in advisory GLSA 200712-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1533-2 exiftags

Bulletin has no description...

Debian DSA-1533-2 : exiftags - insufficient input sanitizing

Christian Schmid and Meder Kydyraliev Google Security discovered a number of vulnerabilities in exiftags, a utility for extracting EXIF metadata from JPEG images. The Common Vulnerabilities and Exposures project identified the following three problems : - CVE-2007-6354 Inadequate EXIF property...

[SECURITY] [DSA 1533-1] New exiftags packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1533-1 [email protected] http://www.debian.org/security/ Devin Carraway March 27, 2008 http://www.debian.org/security/faq -...

GLSA-200712-17 : exiftags: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-17 exiftags: Multiple vulnerabilities Meder Kydyraliev Google Security discovered that Exif metadata is not properly sanitized before being processed, resulting in illegal memory access in the postprop and other functions...

CVE-2007-6355

Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354...