CVE-2012-4775

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreeNode Use After Free Vulnerability."...

CVE-2012-1895

The CVE-2012-1895 entry concerns Microsoft .NET Framework, where the reflection implementation may bypass object permissions. Affected products span .NET Framework 1.0 SP3 through 4, with exploitation possible via a crafted XBAP or crafted .NET application. The root cause is improper enforcement ...

CVE-2012-2519

CVE-2012-2519 : Untrusted search path vulnerability in Entity Framework/ADO.NET of Microsoft .NET Framework (1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4) allows local privilege gain via a Trojan DLL in the current working directory. Connected sources confirm this as a real, public entry with concret...

CVE-2012-1528

CVE-2012-1528 is a Windows Shell vulnerability originating from an integer overflow in the Briefcase feature. The flaw affects multiple Windows client/server platforms (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008/R2 SP, Windows 7 SP1, Windows 8, Server 2012) and can let local users gain p...

CVE-2012-4777

CVE-2012-4777 affects Microsoft .NET Framework 4 and 4.5. The vulnerability arises from improper enforcement of object permissions in the reflection code-optimization feature, allowing remote code execution through a crafted XAML browser application (XBAP) or a crafted .NET Framework application....

Microsoft Office Remote Code Execution Vulnerabilities - 2720184 (Mac OS X)

This host is missing an important security update according to Microsoft Bulletin MS12-076. OpenVAS Vulnerability Test $Id: secpodms12-076macosx.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Office Remote Code Execution Vulnerabilities - 2720184 Mac OS X Authors: Antu Sanadi Copyright:...

CVE-2012-4776

The CVE-2012-4776 issue is the WPAD-related remote code execution in Microsoft .NET Framework (versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5). The vulnerability arises because WPAD data returned during proxy settings acquisition is not validated, allowing a crafted data input during XBAP or .NET Framework...

CVE-2012-1896

CVE-2012-1896 affects Microsoft .NET Framework 2.0 SP2 and 3.5.1, where trust levels are not properly respected during output data construction, enabling information leakage via crafted XBAPs or partially trusted code in .NET applications. The vulnerability is described as an information-disclosu...

MS12-072: Vulnerabilities in Windows Shell Could Allow Remote Code Execution (2727528)

The version of Windows on the remote host is affected by several vulnerabilities that could allow an attacker to execute arbitrary code on the system by causing a user to browse to a specially crafted briefcase in Windows Explorer. C Tenable Network Security, Inc. include"compat.inc"; if...

Fedora 18 : openstack-glance-2012.2-3.fc18 (2012-17901)

Fix Glance Authentication bypass for image deletion CVE-2012-4573 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CentOS 6 : gegl (CESA-2012:1455)

Updated gegl packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

MS12-074: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2745030)

The remote Windows host is running a version of Microsoft .NET Framework that is affected by multiple vulnerabilities : - The way .NET Framework validates the permissions of certain objects during reflection is flawed and could be exploited by an attacker to gain complete control of an affected...

SA-CONTRIB-2012-162 - RESTful Web Services - Cross site request forgery (CSRF)

This module enables you to expose Drupal entities as RESTful web services. It provides a machine-readable interface to exchange resources in JSON, XML and RDF. The module doesn't sufficiently verify POST requests thereby exposing a Cross Site Request Forgery vulnerability. This vulnerability is...

CVE-2012-2543

CVE-2012-2543 is a stack-based buffer overflow in Microsoft Excel components (Windows: Excel 2007 SP2/SP3, Excel 2010 SP1; Mac: Office 2011; Excel Viewer; Office Compatibility Pack SP2/SP3). The vulnerability arises while handling crafted spreadsheets, enabling remote code execution. Connected so...

CVE-2012-1886

Summary: CVE-2012-1886 affects Microsoft Office Excel and related components. The vulnerability is triggered by a crafted spreadsheet that can cause memory corruption, enabling remote code execution or a denial of service. Affected products (as documented): Excel 2003 SP3; Excel 2007 SP2/SP3; Exc...

MS12-076: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2720184) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - A heap-based buffer overflow vulnerability exists due to the way the application handles memory when opening Excel files. CVE-2012-1885 - A memory corruption vulnerability exists...

Fedora 18 : seamonkey-2.13.2-2.fc18 (2012-17841)

Update to 2.13.2 Fix CVE-2012-4194 and CVE-2012-3974 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

MS12-076: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2720184)

The remote Windows host is running a version of Microsoft Excel that is affected by the following vulnerabilities : - A heap-based buffer overflow vulnerability exists due to the way the application handles memory when opening Excel files. CVE-2012-1885 - A memory corruption vulnerability exists...

Fedora 18 : weechat-0.3.8-3.fc18 (2012-17950)

Fix buffer overflow when parsing IRC colors. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

RHEL 5 : kernel (RHSA-2012:1445)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1445 advisory. - kernel: ext4: fix inconsistency in ext4fillflexinfo CVE-2012-2100 Note that Nessus has not tested for this issue but has instead relied only on the...