Nautilus 'PixarLogDecode' Function Denial of Service Vulnerability

Nautilus is a file manager for the GNOME desktop environment. A security vulnerability in the 'PixarLogDecode' function in the libtiff.so file of Nautilus allows remote attackers to construct special TIFF images that can be tricked into being parsed by the application, which can crash the...

CVE-2016-5317

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack crash via a crafted TIFF file...

Gnome Nautilus Denial of Service Vulnerability

Nautilus is a file file manager for the Linux desktop operating system Gnome environment. A denial of service vulnerability exists in Gnome Nautilus. The vulnerability allows attackers to launch a denial of service attack and cause a system crash...

Gnome Nautilus 3.16 - Denial of Service

Gnome Nautilus 3.16 - Denial of Service Exploit Title: Gnome Nautilus Denial of Service Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://www.gnome.org/ Software Link:...

Gnome Nautilus 3.16 Denial Of Service Vulnerability

Gnome Nautilus version 3.16 suffers from a denial of service vulnerability. Exploit Title: Gnome Nautilus Denial of Service Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage:...

Gnome Nautilus 3.16 - Denial of Service

Exploit Title: Gnome Nautilus Denial of Service Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://www.gnome.org/ Software Link: https://wiki.gnome.org/Apps/Nautilus Version: 3.16 Tested...

Gnome Nautilus 3.16 Denial Of Service

Exploit Title: Gnome Nautilus Denial of Service Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: https://www.gnome.org/ Software Link: https://wiki.gnome.org/Apps/Nautilus Version: 3.16 Tested...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-image-2.2.22-nautilus package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-image-2.2.19-nautilus package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the nautilus-mozilla-1.0.4 package of the Red Hat Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the nautilus-devel-1.0.4 package of the Red Hat Linux operating system may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The nautilus-1.0.4 package of the Red Hat Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)

A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 compressed image files. An attacker could create a malicious JPEG 2000 compressed image file that, when opened, would cause applications that use JasPer such as Nautilus to crash or, potentially, execute arbitrary cod...

jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)

A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 compressed image files. An attacker could create a malicious JPEG 2000 compressed image file that, when opened, would cause applications that use JasPer such as Nautilus to crash or, potentially, execute arbitrary cod...

openSUSE Security Update : ldapsmb (openSUSE-SU-2010:0653-1)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code CVE-2010-3069. Additionally the update also contains fixes for the following non-security issues : bnc567013 - Failed to join ADS Domain bnc573246 - mounted shares via...

openSUSE Security Update : file-roller (openSUSE-SU-2013:1281-1)

The GNOME file-roller archive tool was updated to fix a path traversal issue while unpacking CVE-2013-4668. File Roller now sanitizes path names while unpacking, so that a path traversal attack cannot be used to create files outside the unpack destination directory. %NASLMINLEVEL 70300 C Tenable...

openSUSE Security Update : evince (openSUSE-SU-2011:0045-1)

Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : evince (openSUSE-SU-2011:0279-1)

This update of evince fixes a buffer overflow in linetoken. CVE-2011-0433 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update evince-4002. The text description of this plugin is C SUSE LLC...

CentOS Update for gnome-vfs2 CESA-2013:0131 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Scientific Linux Security Update : gnome-vfs2 on SL5.x i386/x86_64 (20130108)

A denial of service flaw was found in the neon Extensible Markup Language XML parser. Visiting a malicious DAV server with an application using gnome-vfs2 such as Nautilus could possibly cause the application to consume an excessive amount of CPU and memory. CVE-2009-2473 This update also fixes t...