Debian DSA-4578-1 : libvpx - security update

Multiple security issues were found in libvpx multimedia library which could result in denial of service and potentially the execution of arbitrary code if malformed WebM files are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Debian: Security Advisory (DLA-2012-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2012-1] libvpx security update

Package : libvpx Version : 1.3.0-3+deb8u2 CVE ID : CVE-2019-9232 CVE-2019-9433 Several issues have been found in libvpx, a VP8 and VP9 video codec. CVE-2019-9232 There is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no addition...

CVE-2019-9433

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

CVE-2019-9433

CVE-2019-9433 is a libvpx vulnerability identified in multiple advisories. The issue is described as an information disclosure caused by improper input validation in libvpx, enabling remote information disclosure without extra execution privileges (user interaction required per the CVE entry). Th...

CVE-2019-9433

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

CVE-2019-9433

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

CVE-2015-9433

The wp-social-bookmarking-light plugin for WordPress is affected by a CSRF leading to XSS via configuration parameters in wp-admin/options-general.php?page=wp-social-bookmarking-light/modules/admin.php. This vulnerability exists in versions prior to 1.7.10. Root cause: CSRF enables insertion of m...

CVE-2018-9433

...

openSUSE Security Update : libreoffice (openSUSE-2017-1048)

LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements : Writer : - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc : - New...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2017:2315-1)

LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements: Writer : - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc : - New...

Fedora Update for libmwaw FEDORA-2017-2d8a1226d1

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : libmwaw (2017-3229e88ea3)

Security fix for CVE-2017-9433 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Updated libmwaw packages fix security vulnerability

It was discovered that a buffer overflow in libmwaw might result in the execution of arbitrary code if a malformed document is opened CVE-2017-9433...

[SECURITY] [DSA 3875-1] libmwaw security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3875-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 09, 2017 https://www.debian.org/security/faq -...

CVE-2017-9433

Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx...

CVE-2017-9433

Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in lib/MsWrd1Parser.cxx...

CVE-2017-9433

The CVE-2017-9433 issue affects Document Liberation Project libmwaw prior to 2017-04-08, where a heap-based buffer overflow in MsWrd1Parser.cxx::readFootnoteCorrespondance causes an out-of-bounds write. The vulnerability impacts components handling Word/Footnote parsing and is rated high/severe (...

Fedora 25 : w3m (2017-2e6b693937)

Security fix for CVE-2016-9422, CVE-2016-9423, CVE-2016-9424, CVE-2016-9425, CVE-2016-9428, CVE-2016-9426, CVE-2016-9429, CVE-2016-9430, CVE-2016-9431, CVE-2016-9432, CVE-2016-9433, CVE-2016-9434, CVE-2016-9435, CVE-2016-9436, CVE-2016-9437, CVE-2016-9438, CVE-2016-9439, CVE-2016-9440,...

CVE-2016-9433

CVE-2016-9433 affects the w3m web/text browser fork by Tatsuya Kinoshita prior to 0.5.3-31, enabling a remote attacker to trigger out-of-bounds HTML parsing and cause a denial of service. Connected advisories show upstream fixes via updated w3m snapshots (e.g., 0.5.3-30.git20170102 and newer) and...