Google Chrome Multiple Vulnerabilities-02 Dec2012 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln02dec12win.nasl 5940 2017-04-12 09:02:05Z teissa $ Google Chrome Multiple Vulnerabilities-02 Dec2012 Windows Authors: Antu Sanadi Copyright: Copyright c 2012...

Two High-Risk Flaws Fixed in Google Chrome 23

Google has fixed two bugs in its Chrome browser, including a high-severity vulnerability in its media handler that a researcher named Pinkie Pie discovered. The bug, which is different from another use-after-free vulnerability the researcher used in the Pwnium contest at Hack in the Box in Octobe...

Google Chrome < 23.0.1271.95 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 23.0.1271.95 and is, therefore, affected by the following vulnerabilities : - A use-after-free error exists related to media source handling. CVE-2012-5137 - An unspecified error exists related to file path handling...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 161564 High CVE-2012-5138: Incorrect file path handling. Credit to Google Chrome Security Team Jüri Aedla. 162835 High CVE-2012-5137: Use-after-free in media source handling. Credit to Pinkie Pie...

Debian: Security Advisory (DSA-2324-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FFFTP may insecurely load executable files

Overview FFFTP may use unsafe methods for determining how to load executables .exe FFFTP loads certain executables when using certain functions. FFFTP contains an issue with the file search path, which may insecurely load executables. Makoto Shiotsuki reported this vulnerability to IPA. JPCERT/CC...

Mandriva Update for mmc-wizard MDVA-2011:028 (mmc-wizard)

Check for the Version of mmc-wizard OpenVAS Vulnerability Test Mandriva Update for mmc-wizard MDVA-2011:028 mmc-wizard Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Sleipnir and Grani may insecurely load executable files

Overview Sleipnir and Grani may use unsafe methods for determining how to load executables .exe. Sleipnir and Grani provided by Fenrir are web browsers. Sleipnir and Grani load certain executables when displaying the source code of the HTML file currently being viewed. Sleipnir and Grani contain ...

Lhaplus may insecurely load executable files

Overview Lhaplus may use unsafe methods for determining how to load executables .exe. Lhaplus is a file compression/extraction software supporting multiple file formats. Lhaplus loads certain executables .exe when extracting files. Lhaplus contains an issue with the file search path, which may...

sudo: Privilege Escalation

Background sudo allows a system administrator to give users the ability to run commands as other users. Description Multiple vulnerabilities have been reported in sudo: Evan Broder and Anders Kaseorg of Ksplice, Inc. reported that the sudo 'secure path' feature does not properly handle multiple...

Ubuntu Update for fastjar vulnerability USN-953-1

Ubuntu Update for Linux kernel vulnerabilities USN-953-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9531.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for fastjar vulnerability USN-953-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

[ MDVSA-2010:118 ] sudo

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:118 http://www.mandriva.com/security/ Package : sudo Date : June 17, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been discover...

Buffer overflow

Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability."...

Debian Security Advisory DSA 1566-1 (cpio)

The remote host is missing an update to cpio announced via advisory DSA 1566-1. OpenVAS Vulnerability Test $Id: deb15661.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1566-1 cpio Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1566-1] New cpio packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1566-1 [email protected] http://www.debian.org/security/ Steve Kemp May 02, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow

/ ======================================================================== 0-day BlazeVideo HDTV Player 30 days of Media Player Exploits by Greg Linares Discovered and Reported By: Greg Linares [email protected] Reported Exploit Date: 12/1/2006 / include include include int mainint argc, ch...

CVE-2006-4758

phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/adminboard.php with an avatarpath parameter ending in .php%00...

SAMBA buffer overflow

By setting small buffer in TRANSACT2QFILEPATHINFO it's possible to cause dynamic memory buffer overflow on oversized path...

QNX PPPoEd 2.4/4.25/6.2 - Path Environment Variable Local Command Execution

source: https://www.securityfocus.com/bid/11105/info QNX PPoEd is reported prone to a problem that exists in the handling of paths to external executables that are employed by PPPoEd. Because of this, an attacker may be able to gain elevated privileges on a host with a vulnerable version of PPPoE...

MDKSA-2004:031 - Updated utempter packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: utempter Advisory ID: MDKSA-2004:031 Date: April 19th, 2004 Affected versions: 10.0, 9.1, 9.2, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: Steve Grubb discovered two...