95 matches found
Fedora Update for gnash FEDORA-2011-3658
Check for the Version of gnash OpenVAS Vulnerability Test Fedora Update for gnash FEDORA-2011-3658 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora Update for gnash FEDORA-2011-3662
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for gnash FEDORA-2011-3658
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 13 : gnash-0.8.9-1.fc13 (2011-3662)
---------------------------------------------------------------------- ---------- ChangeLog : - Fri Mar 18 2011 Hicham HAOUARI - 1:0.8.9-1 - Update to 0.8.9 final - Sat Mar 12 2011 Hicham HAOUARI - 1:0.8.9-0.1.20110312git - Switch to 0.8.9 branch - Spec cleanup - Add extensions - Enable testsuite...
Fedora 14 : gnash-0.8.9-1.fc14 (2011-3658)
---------------------------------------------------------------------- ---------- ChangeLog : - Fri Mar 18 2011 Hicham HAOUARI - 1:0.8.9-1 - Update to 0.8.9 final - Sat Mar 12 2011 Hicham HAOUARI - 1:0.8.9-0.1.20110312git - Switch to 0.8.9 branch - Spec cleanup - Add extensions - Enable testsuite...
[SECURITY] Fedora 13 Update: gnash-0.8.9-1.fc13
Gnash is capable of reading up to SWF v9 files and op-codes, but primarily supports SWF v7, with better SWF v8 and v9 support under heavy development. Gnash includes initial parser support for SWF v8 and v9. Not all ActionScript 2 classes are implemented yet, but all of the most heavily used ones...
[SECURITY] Fedora 14 Update: gnash-0.8.9-1.fc14
Gnash is capable of reading up to SWF v9 files and op-codes, but primarily supports SWF v7, with better SWF v8 and v9 support under heavy development. Gnash includes initial parser support for SWF v8 and v9. Not all ActionScript 2 classes are implemented yet, but all of the most heavily used ones...
[SECURITY] Fedora 15 Update: gnash-0.8.9-0.1.20110312git.fc15
Gnash is capable of reading up to SWF v9 files and op-codes, but primarily supports SWF v7, with better SWF v8 and v9 support under heavy development. Gnash includes initial parser support for SWF v8 and v9. Not all ActionScript 2 classes are implemented yet, but all of the most heavily used ones...
Reverse Engineering of Proprietary Protocols, Tools and Techniques !
Reverse Engineering of Proprietary Protocols, Tools and Techniques ! This talk is about reverse engineering a proprietary network protocol, and then creating my own implementation. The talk will cover the tools used to take binary data apart, capture the data, and techniques I use for decoding...
CVE-2010-4337
The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/gnash-configure-errors.$$, 2 /tmp/gnash-configure-warnings.$$, or 3 /tmp/gnash-configure-recommended.$$ files...
Code injection
The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/gnash-configure-errors.$$, 2 /tmp/gnash-configure-warnings.$$, or 3 /tmp/gnash-configure-recommended.$$ files...
CVE-2010-4337
The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/gnash-configure-errors.$$, 2 /tmp/gnash-configure-warnings.$$, or 3 /tmp/gnash-configure-recommended.$$ files...
UBUNTU-CVE-2010-4337
The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/gnash-configure-errors.$$, 2 /tmp/gnash-configure-warnings.$$, or 3 /tmp/gnash-configure-recommended.$$ files...
CVE-2010-4337
The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/gnash-configure-errors.$$, 2 /tmp/gnash-configure-warnings.$$, or 3 /tmp/gnash-configure-recommended.$$ files...
CVE-2010-4337
Removed by vendor...
CVE-2010-4337
CVE-2010-4337 affects gnash (GNU Flash player). The issue arises from the configure/build process: temporary files under /tmp (gnash-configure-errors/wns/required.$$) can be created via a symlink attack, allowing a local attacker to overwrite files that the user has write permissions for. This is...
CVE-2010-4337
The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/gnash-configure-errors.$$, 2 /tmp/gnash-configure-warnings.$$, or 3 /tmp/gnash-configure-recommended.$$ files...
PT-2011-1506
Name of the Vulnerable Software and Affected Versions gnash version 0.8.8 Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files created by the configure script. Specifically, the attack targets the /tmp/gnash-configure-errors.$$,...
CVE-2010-4337: Improper Link Resolution Before File Access
The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/gnash-configure-errors.$$, 2 /tmp/gnash-configure-warnings.$$, or 3 /tmp/gnash-configure-recommended.$$ files...
Fedora 12 : gnash-0.8.6-13.fc12 (2010-1820)
This update makes Gnash use the system version of the libltdl library instead of the bundled copy which was vulnerable to CVE-2009-3736. An update to the system libltdl fixing CVE-2009-3736 was issued on December 29, 2009. Note that Tenable Network Security has extracted the preceding description...