CVE-2012-0657

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

Design/Logic Flaw

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

CVE-2012-0657

Technical details about CVE-2012-0657 are not provided in the connected documents. The initial description mentions OS X before 10.7.4 RSS Visualizer and screen-lock bypass, but no explicit affected versions beyond that are specified in the supplied sources.

CVE-2012-0657

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

Mac OS X 10.7.x < 10.7.4 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.4. The newer version contains numerous security-related fixes for the following components : - Login Window - Bluetooth - curl - HFS - Kernel - libarchive - libsecurity - libxml - LoginUIFramework - PHP - Quartz Compose...

Mac OS X Multiple Vulnerabilities (Security Update 2012-002) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-002 applied. This update contains multiple security-related fixes for the following components : - curl - Directory Service - ImageIO - libarchive - libsecurity - libxml - Quartz Composer - QuickTime -...

Security Release: Symfony 2.0.11 released

Symfony 2.0.11 has just been released and it contains a security vulnerability fix for the Serializer Component. If you are using the Serializer component, you should upgrade as soon as possible. The security vulnerability has been reported this morning by Sense of Security: "The XMLEncoder...

Stack overflow

Stack-based buffer overflow in the Phonetic Indexer AvidPhoneticIndexer.exe in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659...

CVE-2011-5003

CVE-2011-5003: Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) of Avid Media Composer 5.5.3 and earlier allows remote code execution via a long request to TCP port 4659 (MSF module notes it may run on 4660). Affected component: AvidPhoneticIndexer.exe; vulnerability ...

CVE-2011-5003

Stack-based buffer overflow in the Phonetic Indexer AvidPhoneticIndexer.exe in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659...

Avid Media Composer 5.5 - Avid Phonetic Indexer Stack Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Avid Media Composer 5.5 - Avid Phonetic Indexer Stack Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Avid Media Compos...

Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflow

This module exploits a stack buffer overflow in process AvidPhoneticIndexer.exe port 4659, which comes as part of the Avid Media Composer 5.5 Editing Suite. This daemon sometimes starts on a different port; if you start it standalone it will run on port 4660. This module requires Metasploit:...

AVID Media Composer Phonetic Indexer Remote Stack BoF

Exploit for windows platform in category remote exploits Name :AVID Media Composer Phonetic Indexer Remote Stack Buffer Overflow Vendor Website : http://www.avid.com Date Released : November 29, 2011 Affected Software : AVID Media Composer = 5.5.3 Researcher Researcher : Nick Freeman...

AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow (Metasploit)

AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow Metasploit Name :AVID Media Composer Phonetic Indexer Remote Stack Buffer Overflow Vendor Website : http://www.avid.com Date Released : November 29, 2011 Affected Software : AVID Media Composer = 5.5.3 Researcher Researcher : Nic...

AVID Media Composer Phonetic Indexer - Remote Stack Buffer Overflow (Metasploit)

Name :AVID Media Composer Phonetic Indexer Remote Stack Buffer Overflow Vendor Website : http://www.avid.com Date Released : November 29, 2011 Affected Software : AVID Media Composer = 5.5.3 Researcher Researcher : Nick Freeman [email protected] Description...

Security Release: Symfony 2.0.6

Symfony 2.0.6 has just been released. It addresses a security vulnerability in the EntityUserProvider as provided in the Doctrine bridge. If you let your users update their login/username from a form, and if you are using Doctrine as a user provider, then you are vulnerable and you should upgrade...

Fedora 10 : amarok-2.0.1.1-1.fc10 (2009-0550)

An update to the latest release, includes new features such as queuing, playlist search and filtering as well as 'stop after current track'. And, long awaited and finally available: sorting the collection by composer. Also includes a security fix concerning the parsing of malformed Audible digita...

Fedora Core 10 FEDORA-2009-0550 (amarok)

The remote host is missing an update to amarok announced via advisory FEDORA-2009-0550. OpenVAS Vulnerability Test $Id: fcore20090550.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0550 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

fc_sql.txt

Title : Facility Composer Website SQL Injection Description : The Facility Composer Website at ff.cecer.army.mil/fc/ suffers from an SQL Injection vulnerability. Author : Tosser E-mail : [email protected] Proof : Go to https://ff.cecer.army.mil/fc/login.jsp and type something like ' or 'x'='x in t...