CVE-2012-4233

LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org OOo, allows remote attackers to cause a denial of service NULL pointer dereference via a crafted 1 odt file to vcllo.dll, 2 ODG Drawing document file to svxcorelo.dll, 3 PolyPolygon record in a .wmf Window Meta File file...

CVE-2012-4233

LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org OOo, allows remote attackers to cause a denial of service NULL pointer dereference via a crafted 1 odt file to vcllo.dll, 2 ODG Drawing document file to svxcorelo.dll, 3 PolyPolygon record in a .wmf Window Meta File file...

Out-of-bounds

The decomposer engine in Symantec Endpoint Protection SEP 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition SAVCE 10.x, and Symantec Scan Engine SSE before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allow...

CVE-2012-2242

scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted 1 .dsc or 2 .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240...

CVE-2012-4405

Multiple integer underflows in the icmLutallocate function in International Color Consortium ICC Format library icclib, as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted 1...

CVE-2012-2241

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted 1 .dsc or 2 .changes file, probably related to a NULL byte in a filename...

CVE-2012-2242

scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted 1 .dsc or 2 .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240...

Design/Logic Flaw

RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service divide-by-zero error and application crash or possibly have...

DEBIAN-CVE-2012-0947

Heap-based buffer overflow in the vqadecodechunk function in the VQA codec vqavideo.c in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6, and 0.8.x before 0.8.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a...

Moderate: Red Hat Security Advisory: gimp security update

Updated gimp packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

DEBIAN-CVE-2012-1148

Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service memory consumption via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities...

GLSA-201206-31 : Linux-PAM: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-31 Linux-PAM: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Linux-PAM. Please review the CVE identifiers referenced below for details. Impact : A local attacker could use specially crafted files ...

Microsoft Excel MergeCells Record Heap Overflow (MS12-030; CVE-2012-0185)

A remote code execution vulnerability has been reported in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel handles memory when opening specially crafted Excel files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted Exc...

RealNetworks RealPlayer Multiple Vulnerabilities (Feb 2012) - Windows

RealPlayer is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for libav USN-1333-1

Ubuntu Update for Linux kernel vulnerabilities USN-1333-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13331.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libav USN-1333-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Design/Logic Flaw

Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Function Pointer Overwrite Vulnerability."...

Apple QuickTime Multiple Denial of Service Vulnerabilities - (Windows)

The host is installed with Apple QuickTime and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplequicktimemultdosvulnwinnov11.nasl 7015 2017-08-28 11:51:24Z teissa $ Apple QuickTime Multiple Denial of Service Vulnerabilities - Windows Authors: Madhuri ...

USN-1209-2: Libav vulnerabilities

It was discovered that Libav incorrectly handled certain malformed ogg files. If a user were tricked into opening a crafted ogg file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...

Apple iTunes Multiple Vulnerabilities (Mac OS X)

This host has installed apple iTunes and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpoditunesmultvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Apple iTunes Multiple Vulnerabilities Mac OS X Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

Apple iTunes Multiple Vulnerabilities - Mac OS X

This host has installed apple iTunes and is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...