SUSE-SU-2016:0061-1 Security update for libpng12-0

security update: This update fixes the following securit issue: CVE-2015-8126 Multiple buffer overflows in the pngsetPLTE and pnggetPLTE functions allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact bsc954980...

Security update for grub2 (important)

This update for grub2 fixes the following issue: - CVE-2015-8370: Fix for overflow in grubpasswordget and grubuserget functions bsc956631...

SUSE-SU-2015:2000-1 Security update for libsndfile

The libsndfile package was updated to fix the following security issue: - CVE-2014-9756: Fixed a divide by zero problem that can lead to a Denial of Service DoS bsc953521. - CVE-2015-7805: Fixed heap overflow issue bsc953516. - CVE-2015-8075: Fixed heap overflow issue bsc953519...

OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)

The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors, related to an "overflow."...

CVE-2014-6272

Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...

Amazon Linux AMI : php56 (ALAS-2015-585) (BACKRONYM)

PHP process crashes when processing an invalid file with the 'phar' extension. CVE-2015-5589 As discussed upstream, mysqlnd is vulnerable to the attack described in https://www.duosecurity.com/blog/backronym-mysql-vulnerability. CVE-2015-3152 PHP versions before 5.5.27 and 5.4.43 contain buffer...

PT-2015-4910 · Debian +3 · Yubiserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to buffer overflows caused by the misuse of sprintf. No additional details are provided about the estimated number of potentially...

Debian DSA-3267-1 : chromium-browser - security update

Several vulnerabilities were discovered in the chromium web browser. - CVE-2015-1251 SkyLined discovered a use-after-free issue in speech recognition. - CVE-2015-1252 An out-of-bounds write issue was discovered that could be used to escape from the sandbox. - CVE-2015-1253 A cross-origin bypass...

Debian Security Advisory DSA 3267-1 (chromium-browser - security update)

Several vulnerabilities were discovered in the chromium web browser. CVE-2015-1251 SkyLined discovered a use-after-free issue in speech recognition. CVE-2015-1252 An out-of-bounds write issue was discovered that could be used to escape from the sandbox. CVE-2015-1253 A cross-origin bypass issue w...

CVE-2014-9667

sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via a crafted SFNT table...

Debian Security Advisory DSA 2959-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2014-3154 Collin Payne discovered a use-after-free issue in the filesystem API. CVE-2014-3155 James March, Daniel Sommermann, and Alan Frindell discovered several out-of-bounds read issues in the SPDY protocol...

Debian Security Advisory DSA 2930-1 (chromium-browser - security update)

Several vulnerabilties have been discovered in the chromium web browser. CVE-2014-1740 Collin Payne discovered a use-after-free issue in chromium's WebSockets implementation. CVE-2014-1741 John Butler discovered multiple integer overflow issues in the Blink/Webkit document object model...

Debian: Security Advisory (DSA-2930-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pcsc-lite security and bug fix update

1.5.2-11 - fix overflow issue introduced in 1.5.2-5 and incorrectly corrected in 1.5.2-6 1.5.2-10 - CVE-2010-4531 1.5.2-9 - Bump version number so it doesn't get confused with z stream build...

Google Chrome < 15.0.874.102 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 15.0.874.102. It therefore is potentially affected by the following vulnerabilities : - Several URL bar spoofing errors exist related to history handling and drag-and-drop of URLs. CVE-2011-2845, CVE-2011-3875 - Whitespace ...

OpenOffice.org Multiple Vulnerabilities - Oct09 (Windows)

The host has OpenOffice.org installed and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenofficemultvulnoct09.nasl 4869 2016-12-29 11:01:45Z teissa $ OpenOffice.org Multiple Vulnerabilities - Oct09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networ...

CVE-2009-0148

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as 1 source-code tokens and 2 pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541...

Microsoft Internet Explorer 7 - HTML Form Value Denial of Service

Microsoft Internet Explorer 7 - HTML Form Value Denial of Service source: https://www.securityfocus.com/bid/33494/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this...

Fedora Core 9 FEDORA-2009-0371 (uw-imap)

The remote host is missing an update to uw-imap announced via advisory FEDORA-2009-0371. OpenVAS Vulnerability Test $Id: fcore20090371.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0371 uw-imap Authors: Thomas Reinke Copyright: Copyright c 2009...