CVE-2010-4235

CVE-2010-4235 affects RealNetworks Helix Server (12.x, 13.x, 14.x) and Helix Mobile Server (12.x, 13.x, 14.x) prior to 14.2. The vulnerability is a format-string issue in processing the x-wap-profile HTTP header, allowing remote attackers to execute arbitrary code. Public sources describe remote ...

CVE-2010-4235

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header...

RealNetworks Helix Server x-wap-profile Format String Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Helix Server products. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rmserver.exe process. This process is active by default on all Helix Server...

Fedora 15 : maniadrive-1.2-29.fc15 / php-5.3.6-1.fc15 / php-eaccelerator-0.9.6.1-6.fc15 (2011-3614)

Security Enhancements and Fixes in PHP 5.3.6 : - Enforce security in the fastcgi protocol parsing with fpm SAPI. - Fixed bug 54247 format-string vulnerability on Phar. CVE-2011-1153 - Fixed bug 54193 Integer overflow in shmopread. CVE-2011-1092 - Fixed bug 54055 buffer overrun with high values fo...

Mandriva Update for php MDVSA-2011:053 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2011:053 php Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for php MDVSA-2011:052 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2011:052 php Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for php MDVSA-2011:053 (php)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : php (MDVSA-2011:052)

Multiple vulnerabilities has been identified and fixed in php : The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service applicatio...

Mandriva Linux Security Advisory : php (MDVSA-2011:053)

Multiple vulnerabilities has been identified and fixed in php : The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service applicatio...

CVE-2011-0173

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...

Format string

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...

CVE-2011-0173

Multiple format string vulnerabilities in AppleScript in Apple Mac OS X before 10.6.7 allow context-dependent attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in a 1 display dialog or 2 display alert command in a dialog in an...

CVE-2011-0173

CVE-2011-0173 describes multiple format-string vulnerabilities in AppleScript and AppleScript Studio dialogs (display dialog/display alert) on Mac OS X prior to 10.6.7. The issues can allow a context-dependent attacker to cause an arbitrary code execution or a denial of service (application crash...

PHP "phar/phar_object.c"格式字符串漏洞

BUGTRAQ ID: 46854 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的"phar/pharobject.c"函数在实现上存在格式字符串漏洞，远程攻击者可利用此漏洞绕过某些安全限制或取得提升的权限。 此漏洞源于在将用户提供的输入用作格式说明符发送到格式化的打印函数之前未正确过滤。 PHP PHP 5.3.x PHP PHP 5.2.x 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net...

PHP 5.3.6 closes five security holes !

The PHP developers have released PHP 5.3.6, a maintenance update to the PHP interpreter. Among over 60 bug fixes are a number of fixes for security related problems. A format string vulnerability in the phar extension of PHP 5.3.5, CVE-2011-1153, may allow attackers to view memory, cause a denial...

CVE-2011-1153

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...

Format string

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...

CVE-2011-1153

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...

CVE-2011-1153

CVE-2011-1153 involves multiple format string vulnerabilities in the php phar extension, specifically phar_object.c, affecting PHP 5.3.5 and earlier. The issue allows context-dependent attackers to obtain sensitive data from process memory, cause memory corruption (DoS), or potentially execute ar...

CVE-2011-1153

Multiple format string vulnerabilities in pharobject.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service memory corruption, or possibly execute arbitrary code via format string specifiers...