1349 matches found
Zero-Day Vulnerability in Symantec PGP Whole Disk Encryption
Symantec product PGP Whole Disk Encryption which is used to encrypt all the contents on the disk on a block-by-block basis having Zero-Day Vulnerability, according to a pastebin note. Note was posted on 25th Dec by Nikita Tarakanov, claiming that pgpwded.sys kernel driver distributed with Symante...
CVE-2012-6422
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions 0666 for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted...
CVE-2012-4225
NVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local users to write to arbitrary physical memory locations and gain privileges by modifying the VGA window using /dev/nvidia0...
CVE-2012-4225
The CVE-2012-4225 entry affects the NVIDIA UNIX graphics driver for Linux, with vulnerable versions: before 295.71 and before 304.32. The root cause is the driver allowing local users to write to arbitrary physical memory locations by modifying the VGA window via /dev/nvidia0, enabling privilege ...
CVE-2012-4225: Undefined Security Weakness
NVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local users to write to arbitrary physical memory locations and gain privileges by modifying the VGA window using /dev/nvidia0...
Siemens SIMATIC WinCC HMI Web Server Multiple Input Validation Vulnerabilities - Active Check
Siemens SIMATIC WinCC is prone to an HTTP-header-injection issue, a directory-traversal issue, and an arbitrary memory-read access issue because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from...
CVE-2010-4819: Improper Input Validation
The ProcRenderAddGlyphs function in the Render extension render/render.c in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service server crash via unspecified vectors related to an "input sanitization flaw."...
Scientific Linux Security Update : libvpx on SL6.x i386/x86_64
An integer overflow flaw, leading to arbitrary memory writes, was found in libvpx. An attacker could create a specially crafted video encoded using the VP8 codec that, when played by a victim with an application using libvpx such as Totem, would cause the application to crash or, potentially,...
CVE-2011-1021: Undefined Security Weakness
drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custommethod file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347...
Medium: nvidia
Issue Overview: The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges. Affected Packages: nvidia Issue Correction: Run yum update nvidia or yum update --advisory ALAS-2012-67 to update your system. New...
DEBIAN-CVE-2012-0946
The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...
CVE-2012-0946
The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...
CVE-2012-0946
The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...
CVE-2012-0946: Undefined Security Weakness
The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...
CVE-2012-0946
The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...
CVE-2012-0864
Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFYSOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments...
Novell Groupwise Messenger 2.1.0 - Arbitrary Memory Corruption
Novell Groupwise Messenger 2.1.0 - Arbitrary Memory Corruption Luigi Auriemma Application: Novell GroupWise Messenger http://www.novell.com/products/groupwise/ Versions: 8B5D 0C /MOV EBX,DWORD PTR SS:EBP+C 00496E2D | 8B4D F8 MOV ECX,DWORD PTR SS:EBP-8 00496E30 |. 8A47 06 |MOV AL,BYTE PTR DS:EDI+6...
Novell Groupwise Messenger 2.1.0 - Arbitrary Memory Corruption
Luigi Auriemma Application: Novell GroupWise Messenger http://www.novell.com/products/groupwise/ Versions: 8B5D 0C /MOV EBX,DWORD PTR SS:EBP+C 00496E2D | 8B4D F8 MOV ECX,DWORD PTR SS:EBP-8 00496E30 |. 8A47 06 |MOV AL,BYTE PTR DS:EDI+6 00496E33 |. 81E1 FFFF0000 |AND ECX,0FFFF 00496E39 |. 3C 02 |CM...
CVE-2011-4879: Improper Input Validation
miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 aka TIA portal before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle UR...
RHEL 4 : php (RHSA-2012:0071)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0071 advisory. - php: buffer over-read in Exif extension CVE-2011-0708 - php: Crash by converting serial day numbers SDN into Julian calendar CVE-2011-1466...