CVE-2013-3039

The vulnerability CVE-2013-3039 affects IBM Rational Requirements Composer before 4.0.4. The root cause is improper authentication, leading to an unspecified impact with remote attack vectors. Documents consolidate the issue but do not specify vulnerable components beyond the product/version, nor...

CVE-2013-3037

Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain privileges via unknown vectors...

CVE-2013-3037

CVE-2013-3037 affects IBM Rational Requirements Composer prior to 4.0.4. The vulnerability is described as an unspecified local-privilege-escalation, enabling local users to gain privileges via unknown vectors. The connected documents confirm the vendor/product and version, but do not provide con...

CVE-2013-3039

IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact and remote attack vectors...

CVE-2012-4883

Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. NOTE: the provenance ...

CVE-2012-4883

CVE-2012-4883 affects 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652. The issue is an untrusted search path vulnerability that lets local users gain privileges via a Trojan horse (dwmapi.dll or ibfs32.dll) placed in the current working directory, demonstrated by a directory containing a .smg file. T...

CVE-2012-4883

Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 ibfs32.dll file in the current working directory, as demonstrated by a directory that contains a .smg file. NOTE: the provenance ...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...

CVE-2012-0657

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

Design/Logic Flaw

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

CVE-2012-0657

Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors...

CVE-2012-0657

Technical details about CVE-2012-0657 are not provided in the connected documents. The initial description mentions OS X before 10.7.4 RSS Visualizer and screen-lock bypass, but no explicit affected versions beyond that are specified in the supplied sources.

Mac OS X Multiple Vulnerabilities (Security Update 2012-002) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-002 applied. This update contains multiple security-related fixes for the following components : - curl - Directory Service - ImageIO - libarchive - libsecurity - libxml - Quartz Composer - QuickTime -...

Mac OS X 10.7.x < 10.7.4 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.4. The newer version contains numerous security-related fixes for the following components : - Login Window - Bluetooth - curl - HFS - Kernel - libarchive - libsecurity - libxml - LoginUIFramework - PHP - Quartz Compose...

Security Release: Symfony 2.0.11 released

Symfony 2.0.11 has just been released and it contains a security vulnerability fix for the Serializer Component. If you are using the Serializer component, you should upgrade as soon as possible. The security vulnerability has been reported this morning by Sense of Security: "The XMLEncoder...

Stack overflow

Stack-based buffer overflow in the Phonetic Indexer AvidPhoneticIndexer.exe in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659...

CVE-2011-5003

CVE-2011-5003: Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) of Avid Media Composer 5.5.3 and earlier allows remote code execution via a long request to TCP port 4659 (MSF module notes it may run on 4660). Affected component: AvidPhoneticIndexer.exe; vulnerability ...

CVE-2011-5003

Stack-based buffer overflow in the Phonetic Indexer AvidPhoneticIndexer.exe in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659...

Avid Media Composer 5.5 - Avid Phonetic Indexer Stack Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Avid Media Compos...

Avid Media Composer 5.5 - Avid Phonetic Indexer Stack Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...