20296 matches found
CVE-2012-4787
CVE-2012-4787 is a use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 caused by improper ref counting when accessing an object that is not properly initialized or has been deleted. A remote attacker could trigger code execution by convincing a user to open a crafted webpage. The...
Flash Player for Mac <= 10.3.183.43 / 11.5.502.110 Multiple Vulnerabilities (APSB12-27)
According to its version, the instance of Flash Player installed on the remote Mac OS X host is 11.x equal to or earlier than 11.5.502.110, or 10.x equal to or earlier than 10.3.183.43. It is, therefore, potentially affected by multiple vulnerabilities : - An unspecified error exists that can all...
[SECURITY] [DSA 2587-1] libcgi-pm-perl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2587-1 [email protected] http://www.debian.org/security/ December 11, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...
[SECURITY] [DSA 2586-1] perl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2586-1 [email protected] http://www.debian.org/security/ December 11, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...
[SECURITY] [DSA 2585-1] bogofilter security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2585-1 [email protected] http://www.debian.org/security/ December 11, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...
CVE-2012-5956
CVE-2012-5956 affects ManageEngine AssetExplorer 5.6 before service pack 5614. The vulnerability is due to cross-site scripting (XSS) in XML asset data submitted to discoveryServlet/WsDiscoveryServlet, with an example in DocRoot/Computer_Information/output. Public sources (NVD, Red Hat/NASL entry...
CVE-2012-4349
The CVE-2012-4349 entry concerns a root cause in Symantec Network Access Control (SNAC) 12.1 before RU2, where an unquoted Windows search path could allow a local attacker to execute arbitrary code with elevated privileges. The vulnerability is tied to SNAC’s startup path handling, enabling local...
Microsoft Windows OpenType Font (OTF) Driver CVE-2012-2556 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will result in the execution of arbitrary code in the kernel-mode. Failed attempts will cause a denial-of-service condition. Technologies Affected Microsoft Windows 7 for 32-bit Systems Microsoft...
ISC BIND 9 DNS64 REQUIRE断言失败拒绝服务漏洞
BUGTRAQ ID: 56817 CVECAN ID: CVE-2012-5688 BIND是一个应用非常广泛的DNS协议的实现。 ISC BIND 9.8.0及更高版本支持 DNS64 IPv6转换机制，如果启用了dns64配置状态，BIND 9域名服务器在解析特制的请求时，会触发REQUIRE断言失败，造成服务器崩溃。此漏洞可被远程利用，9.8.0之前版本、不启用DNS64时不受此漏洞的影响。 0 ISC BIND 9.9.0-9.9.2 ISC BIND 9.8.0-9.8.4 临时解决方法： 对于启用了DNS64的BIND...
Security fix for the ALT Linux 8 package bind version 9.9.2-alt3
Dec. 11, 2012 George V. Kouryachy 9.9.2-alt3 - Update to 9.9.2-P1 CVE-2012-5688 and bugfixes - Add systemd service file from FC...
Security fix for the ALT Linux 9 package bind version 9.9.2-alt3
Dec. 11, 2012 George V. Kouryachy 9.9.2-alt3 - Update to 9.9.2-P1 CVE-2012-5688 and bugfixes - Add systemd service file from FC...
Fedora Update for cups-pk-helper FEDORA-2012-18950
Check for the Version of cups-pk-helper OpenVAS Vulnerability Test Fedora Update for cups-pk-helper FEDORA-2012-18950 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
Flash Player <= 10.3.183.29 / 11.4.402.287 Multiple Vulnerabilities (APSB12-24)
Binary data 6656.prm...
[USN-1659-1] GIMP vulnerability
========================================================================== Ubuntu Security Notice USN-1659-1 December 10, 2012 gimp vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
Microsoft DirectPlay CLSID_DP8SP_MODEM (MS12-082; CVE-2012-1537)
A remote code execution vulnerability has been reported in the DirectPlay component of the DirectX library on Windows...
Microsoft Windows OpenType Font Parsing Remote Code Execution (MS12-078; CVE-2012-2556)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the OpenType Font OTF driver handles objects in memory. A remote attacker can exploit this issue by enticing a target user to open a specially crafted web page or email...
MS12-078: Vulnerability in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534)
The remote Windows host is affected by the following remote code execution vulnerabilities : - An OpenType Font parsing vulnerability exists due to the way OpenType font files are handled. CVE-2012-2556 - A TrueType Font parsing vulnerability exists due to the way TrueType font files are...
Fedora 17 : weechat-0.3.9.2-2.fc17 (2012-19533)
New upstream version Fix arbitrary code execution due to call of shell when executing command within hookprocess Fix the security bug in the linked Bugzilla. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
Fedora 17 : openstack-keystone-2012.1.3-3.fc17 (2012-19341)
EC2-style credentials invalidation issue CVE-2012-5571 - Fix /etc/keystone directory permission CVE-2012-5483 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...