CVE-2014-0837

The CVE-2014-0837 issue affects IBM QRadar SIEM (and related QRadar components) where the AutoUpdate process does not verify SSL certificates, allowing MITM attackers to spoof the update server and potentially tamper data. Affected products include QRadar SIEM 7.2 MR1 and earlier (QRM/QVM). The r...

Scientific Linux Security Update : yum-autoupdate update on SL5.x, SL6.x i386/x86_64 (20120925)

The Scientific Linux team was made aware of a problem with the use of temp files in the yum-autoupdate script by Elias Persson. The problem should be corrected in these packages. These packages also include some minor feature updates for each release. For SL5, the script now includes the 'PRERUN'...

Expert Warns That WordPress Autoupdate Feature Used To Infect Blogs With Malware

UPDATE: More than 1,000 WordPress blogs are currently being infected by a form of malware that has ‘piggybacked’ its way onto the blogging platform using the WordPress automatic update function, a security researcher has discovered. According to Denis Sinegubko, founder of Unmask Parasites, the...

RealNetworks RealPlayer Multiple Vulnerabilities (Aug 2011) - Windows

RealPlayer is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2954

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2954

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors...

Design/Logic Flaw

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2954

CVE-2011-2954 is a use-after-free vulnerability in RealNetworks RealPlayer, affecting RealPlayer 11.0–11.1 and 14.0.0–14.0.5 (and RealPlayer SP 1.0–1.1.5) when using an Embedded RealPlayer. The issue occurs in the Embedded AutoUpdate path and can allow remote attackers to execute arbitrary code v...

CVE-2010-0990

Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method...

Stack overflow

Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method...

CVE-2010-0990

CVE-2010-0990 describes a stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0 (bundled with AutoUpdate 1.40.01). The vulnerability exists in the BrowseFolder method and can be triggered remotely to execute arbitrary code. Public references identify the affe...

Creative Software AutoUpdate Engine - ActiveX Control Buffer Overflow (Metasploit)

$Id: creativesoftwarecachefolder.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

JDownloader Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Product JDownloader1 is an open source download manager for One-Click- Filehoster like Rapidshare or Megaupload. The Click'n'Load2 interface allows external applications and websites to send URLs to the local running JDownloader. With Click'n'Loa...

HP ProCurve Identity Driven Manager (IDM)未明特权提升漏洞

Bugraq ID: 36462 CVE ID：CVE-2009-2681 HP ProCurve Identity Driven Manager是一款允许网管员动态分配用户及设备的网络链接及访问，以适应不同业务策略。 在运行IAS的Microsoft Windows 2003和Windows 2008系统平台运行HP ProCurve Identity Driven Manager存在未明错误。 本地攻击者可以利用此漏洞提升特权。 HP ProCurve Identity Driven Manager IDM A.03.00 HP ProCurve Identity Driven...

MailScanner Multiple Insecure Temporary Files Vulnerabilities

This host is installed with MailScanner and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmailscannermultvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ MailScanner Multiple Insecure Temporary Files Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbo...

MailScanner Multiple Insecure Temporary Files Vulnerabilities

MailScanner is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...

Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Creative Software AutoUpdate Engine. When sending an overly long string to the cachefolder property of CTSUEng.ocx an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Creative软件自动升级引擎ActiveX控件栈溢出漏洞

BUGTRAQ ID: 29391 CVECAN ID: CVE-2008-0955 Creative是生产用于个人电脑和网络方面的数字娱乐产品的厂商。 Creative在很多产品中都提供了软件自动升级引擎ActiveX控件（CTSUEng.ocx），这个控件没有正确地处理CacheFolder属性，如果用户受骗访问了恶意网页并向该属性传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 Creative Labs AutoUpdate Engine ActiveX 临时解决方法： 在IE中禁用Creative软件自动升级ActiveX控件，为以下CLSID设置kill bit：...

DSquare Exploit Pack: D2SEC_CREATIVE

Name| d2seccreative ---|--- CVE| CVE-2008-0955 Exploit Pack| D2ExploitPack Description| Creative Software AutoUpdate Engine ActiveX Stack Overflow Notes|...