Eye of Gnome 3.10.2 - GMarkup Out of Bounds Write

Eye of Gnome 3.10.2 - GMarkup Out of Bounds Write Exploit Title: Gnome Eye of Gnome Out-of-bounds-write Exploit Author: Kaslov Dmitri Vendor Homepage: https://wiki.gnome.org/Apps/EyeOfGnome Version: 3.10.2 Tested on: Ubuntu 14.04 LTS CVE: CVE-2016-6855 Proof of Concept:...

UBUNTU-CVE-2016-6855

Eye of GNOME aka eog 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service out-of-bounds write and crash via vectors involving passing invalid UTF-8 to GMarkup...

Eye of Gnome 3.10.2 - GMarkup Out of Bounds Write

Exploit Title: Gnome Eye of Gnome Out-of-bounds-write Exploit Author: Kaslov Dmitri Vendor Homepage: https://wiki.gnome.org/Apps/EyeOfGnome Version: 3.10.2 Tested on: Ubuntu 14.04 LTS CVE: CVE-2016-6855 Proof of Concept:...

GNOME NetworkManager Local Information Disclosure Vulnerability

GNOME NetworkManager is a set of network management tools developed by The GNOME Project for simplifying network configuration on Linux and other Unix-like operating systems. A local information disclosure vulnerability exists in versions of GNOME NetworkManager prior to 1.0.12. An attacker could...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities of the ssh-askpass-gnome package for the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the xchat-gnome package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the gnome-vlc package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the libgtk-common package of the Debian GNU/Linux operating system can lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

CVE-2016-4994

Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted XCF file...

CVE-2016-5317

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack crash via a crafted TIFF file...

CVE-2016-4448

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors...

CVE-2016-1834

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML...

[SECURITY] Fedora 24 Update: NetworkManager-openconnect-1.2.0-1.fc24

This package contains software for integrating the openconnect VPN software with NetworkManager and the GNOME desktop...

[SECURITY] Fedora 24 Update: NetworkManager-l2tp-1.2.0-1.fc24

This package contains software for integrating L2TP VPN support with the NetworkManager and the GNOME desktop...

[SECURITY] Fedora 24 Update: NetworkManager-libreswan-1.2.0-1.fc24

This package contains software for integrating the libreswan VPN software with NetworkManager and the GNOME desktop...

USN-2950-2: libsoup update

USN-2950-1 fixed vulnerabilities in Samba. The updated Samba packages introduced a compatibility issue with NTLM authentication in libsoup. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jouni Knuutinen discovered that Samba contained multiple flaws ...

HexChat-GNOME Man-in-the-Middle Attack Vulnerability

HexChat formerly known as XChat-WDK, XChat and XChat-GNOME are all IRC a form of instant chat over the Internet communication programs. Versions of XChat,XChat-GNOME prior to HexChat 2.10.2 suffer from a man-in-the-middle attack vulnerability, which allows a man-in-the-middle attacker to spoof SS...

CVE-2013-7449

The ssldoconnect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

Ubuntu 14.04 LTS : XChat-GNOME vulnerability (USN-2945-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2945-1 advisory. It was discovered that XChat-GNOME incorrectly verified the hostname in an SSL certificate. An attacker could trick XChat-GNOME into trusting a rogue server's...

Ubuntu: Security Advisory (USN-2945-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...