439 matches found
DEBIAN-CVE-2012-2788
Unspecified vulnerability in the avireadpacket function in libavformat/avidec.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to an "out of array read" when a "packet is shrunk."...
t1lib: Off-by-one via crafted Type 1 font
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service application crash via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid...
Mozilla Products Memory Corruption Vulnerabilities - July12 (Windows)
This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmemcorrvulnjul12win.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Memory Corruption Vulnerabilities - July12 Windows Authors: Rachana...
Mozilla Products Memory Corruption Vulnerabilities - July12 (Mac OS X)
This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmemcorrvulnjul12macosx.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products Memory Corruption Vulnerabilities - July12 Mac OS X Authors:...
SeaMonkey < 2.11.0 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.11.0. Such versions are potentially affected by the following security issues : - Several memory safety issues exist, some of which could potentially allow arbitrary code execution. CVE-2012-1948, CVE-2012-1949 - Several memory safety issues...
Firefox < 14.0 Multiple Vulnerabilities
The installed version of Firefox is earlier than 14.0 and thus, is potentially affected by the following security issues : - Several memory safety issues exist, some of which could potentially allow arbitrary code execution. CVE-2012-1948, CVE-2012-1949 - An error related to drag and drop can all...
Google Chrome Multiple Vulnerabilities(02) - May 12 (Windows)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnmay12win.nasl 5888 2017-04-07 09:01:53Z teissa $ Google Chrome Multiple Vulnerabilities02 - May 12 Windows Authors: Madhuri D Copyright: Copyright c 2012...
libxslt: Denial of service
Background libxslt is the XSLT C library developed for the GNOME project. XSLT is an XML language to define transformations for XML. Description An out of bounds read error has been found in libxslt/pattern.c in libxslt. Impact A remote attacker could entice a user to process an XML file using a...
Google Chrome < 17.0.963.65 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 17.0.963.65 and is, therefore, affected by the following vulnerabilities: - Use-after-free errors exist related to 'v8 element wrapper', SVG value handling, SVG document handling, SVG use handling, multi-column handling,...
lighttpd < 1.4.30 base64_decode Function Out-of-Bounds Read Error DoS
According to its banner, the version of lighttpd running on the remote host is prior to 1.4.30. It is, therefore, affected by a denial of service vulnerability. The HTTP server allows out-of-bounds values to be decoded during the auth process and later uses these values as offsets. Using negative...
AZL-40745 CVE-2011-2501 affecting package syslinux for versions less than 6.04-11
The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the copying of...
Rumble 0.25.2232 Denial Of Service
------------------------------------------------------------------------ Software................Rumble 0.25.2232 Vulnerability...........Denial Of Service Threat Level............Serious 3/5 Download................http://humbedooh.users.sourceforge.net/ Discovery Date..........3/27/2011 Tested...
Google Chrome multiple vulnerabilities - Dec 10(Windows)
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulndec10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - Dec 10Windows Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networ...
Google Chrome multiple vulnerabilities - Dec 10(Linux)
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulndec10lin.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - Dec 10Linux Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networks...
Google Chrome multiple vulnerabilities - July 10
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - July 10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Foxit Reader JPEG2000 / JBIG Decoder Add-On < 2.0.2009.616 Multiple Vulnerabilities
The Foxit Reader application installed on the remote Windows host includes an optional JPEG2000 / JBIG Decoder add-on that is prior to version 2.0.2009.616. It is, therefore affected by multiple vulnerabilities : - A out-of-bounds read error exists in the add-on due to improper handling of a...
PT-2004-1352 · Tcpdump · Tcpdump
Name of the Vulnerable Software and Affected Versions: tcpdump versions 3.8.1 and earlier Description: The issue allows remote attackers to cause a denial of service crash via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read. This has bee...
CVE-2004-0221
Affected software / component: OpenBSD isakmpd (OpenBSD 3.4 and earlier). Root cause / weakness: Multiple payload handling flaws in isakmpd’s ISAKMP packet processing allow out-of-bounds reads when processing a Delete payload with a large number of SPIs, leading to a remote denial of service (cra...
NetcPlus BrowseGate 2.80 - Denial of Service
source: https://www.securityfocus.com/bid/1702/info NetcPlus BrowseGate 2.80 will crash as the result of an invalid read error if a number of character strings consisting of 8 KB are inserted into GET request arguments through port 80. For example: GET / HTTP/1.0 Authorization: Basic8 KB string o...