SUSE SLES11 Security Update : clamav (SUSE-SU-2018:0863-1)

This update for clamav fixes the following issues: Security issues fixed : - CVE-2012-6706: VMSFDELTA filter inside the unrar implementation allows an arbitrary memory write bsc1045315. - CVE-2017-6419: A heap-based buffer overflow that can lead to a denial of service in libmspack via a crafted C...

openSUSE Security Update : clamav (openSUSE-2018-314)

This update for clamav fixes the following issues : Security issues fixed : - CVE-2012-6706: VMSFDELTA filter inside the unrar implementation allows an arbitrary memory write bsc1045315. - CVE-2017-6419: A heap-based buffer overflow that can lead to a denial of service in libmspack via a crafted...

[ASA-201803-14] clamav: multiple issues

Arch Linux Security Advisory ASA-201803-14 ========================================== Severity: Critical Date : 2018-03-18 CVE-ID : CVE-2012-6706 CVE-2017-6419 CVE-2017-11423 CVE-2018-0202 CVE-2018-1000085 Package : clamav Type : multiple issues Remote : Yes Link :...

Fedora Update for clamav FEDORA-2018-d2b08aa37f

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : clamav (2018-602b5345fa)

Update to 0.99.4 0.99.4 addresses a few outstanding vulnerability bugs. It includes fixes for : - CVE-2012-6706 - CVE-2017-6419 - CVE-2017-11423 - CVE-2018-1000085 There are also a few bug fixes that were not assigned CVEs, but were important enough to address while we had the chance. One of thes...

Security fix for the ALT Linux 10 package clamav version 0.99.4-alt1

March 4, 2018 Sergey Y. Afonin 0.99.4-alt1 - 0.99.4 CVE-2012-6706, CVE-2017-6419, CVE-2017-11423, CVE-2018-0202, and CVE-2018-1000085...

GLSA-201710-21 : Kodi: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201710-21 Kodi: Arbitrary code execution Kodi is vulnerable due to shipping with an embedded version of UnRAR. Please review the referenced CVE identifier for details. Impact : A remote attacker, by enticing a user to process a...

McAfee Web Gateway Multiple Vulnerabilities (SB10205)

McAfee Web Gateway is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mcafee:webgateway";...

openSUSE: Security Advisory for clamav (openSUSE-SU-2017:1797-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : clamav (openSUSE-2017-779)

This update for clamav fixes the following security issue : - CVE-2012-6706: Fixed an arbitrary memory write in VMSFDELTA filter in libclamunrar bsc1045490 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

SUSE SLES11 Security Update : unrar (SUSE-SU-2017:1760-1)

This update for unrar fixes the following issues : - CVE-2012-6706: decoding malicious RAR files could have lead to memory corruption or code execution. bsc1045315. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...

CVE-2017-6706

A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1...

CVE-2017-6706

The CVE-2017-6706 entry concerns a vulnerability in the logging subsystem of Cisco Prime Collaboration Provisioning Tool that could allow an unauthenticated, local attacker to access sensitive information. Affected behavior is described as information disclosure via log files; the issue stems fro...

SUSE SLED12 / SLES12 Security Update : unrar (SUSE-SU-2017:1745-1)

This update for unrar fixes the following issues : - CVE-2012-6706: decoding malicious RAR files could have lead to memory corruption or code execution. bsc1045315. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable h...

SUSE-SU-2017:1745-1 Security update for unrar

This update for unrar fixes the following issues: - CVE-2012-6706: decoding malicious RAR files could have lead to memory corruption or code execution. bsc1045315...

SUSE SLED12 / SLES12 Security Update : clamav (SUSE-SU-2017:1716-1)

This update for clamav fixes the following issues: Security issue fixed : - CVE-2012-6706: Fixed an arbitrary memory write in VMSFDELTA filter in libclamunrar bsc1045490 Non security issues fixed : - Provide and obsolete clamav-nodb to trigger its removal in openSUSE Leap. bsc1040662 Note that...

CVE-2012-6706

CVE-2012-6706 is a VMSF_DELTA memory corruption in unrar <5.5.5 (used in Sophos Anti-Virus Threat Detection Engine

CVE-2016-6706

CVE-2016-6706 is a local privilege-escalation vulnerability in Android’s Mediaserver, specifically within the libstagefright component. The issue allows a local malicious application to execute arbitrary code in the context of a privileged process due to a flaw in Mediaserver on Android 7.0 and e...

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...

CVE-2015-6706

CVE-2015-6706 affects Adobe Reader and Acrobat: Adobe Reader/Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, and Acrobat/Reader DC Classic before 2015.006.30094 or DC Continuous before 2015.009.20069 on Windows and OS X. The vulnerability allows attackers to bypass intended access restrictio...