5953 matches found
[SECURITY] Fedora 7 Update: arts-1.5.8-4.fc7
arts analog real-time synthesizer is the sound system of KDE 3. The principle of arts is to create/process sound using small modules which do certain tasks. These may be create a waveform oscillators, play samples, filter data, add signals, perform effects like delay/flanger/chorus, or output the...
CVE-2002-2409
Photon microGUI in QNX Neutrino RTOS 6.1.0/6.2.0 is affected: a vulnerability allowing attackers to read clipboard information by sending a direct request to the 1.TEXT file in a hex-encoded user-ID directory. The underlying issue is a confidentiality exposure in the clipboard handling path. Expl...
[SECURITY] Fedora 7 Update: snort-2.7.0.1-3.fc7
Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules based logging and can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows,...
[SECURITY] Fedora 7 Update: mapserver-4.10.3-2.fc7
Mapserver is an internet mapping program that converts GIS data to map images in real time. With appropriate interface pages, Mapserver can provide an interactive internet map based on custom GIS data...
Symantec SAVCE RTVScan Component Local Privilege Escalation (SYM07-017)
The remote installation of Symantec Antivirus Corporate Edition SAVCE or Symantec Client Security contains a flaw in the Real-Time scanner RTVScan component because it fails to drop its privileges with in a threat notification window. A local attacker may be able to leverage this flaw to elevate...
DEBIAN-CVE-2007-3762
Stack-based buffer overflow in the IAX2 channel driver chaniax2 in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a...
DEBIAN-CVE-2007-3765
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a crafted STUN length attribute in a STUN packet sent on an RTP port...
Code injection
Unspecified vulnerability in the Real-time scanner RTVScan component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2.0 through 3.1, when the Notification Message window is enabled, allows local users to gain privileges via crafted code...
CVE-2007-3800
Unspecified vulnerability in the Real-time scanner RTVScan component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2.0 through 3.1, when the Notification Message window is enabled, allows local users to gain privileges via crafted code...
CVE-2007-3800
Summary : CVE-2007-3800 affects Symantec Antivirus Corporate Edition (9.0–10.1) and Symantec Client Security (2.0–3.1). The vulnerability lies in the Real-Time scanner RTVScan component where, if the Notification Message window is enabled, a local attacker can craft code to gain privileges. The c...
CVE-2006-5278
Integer overflow in the Real-Time Information Server RIS Data Collector service RisDC.exe in Cisco Unified Communications Manager CUCM, formerly CallManager before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow...
Cisco Unified Communications Manager / Presence Server multiple security vulnerabilities
Unauthorized SNMP access, buffer overflow in Certificate Trust List TCP/2444 and Real-Time Information Server Data Collector TCP/2556...
CVE-2007-2965
Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via...
Input validation
Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via...
CVE-2007-2965
CVE-2007-2965 concerns the Real-time Scanning component across multiple F-Secure products (Internet Security 2005–2007, Anti-Virus 2005–2007, and related Protection Service for Consumers 6.40 and earlier). The root cause is improper validation in IOCTL/I/O space handling, allowing a crafted I/O r...
CVE-2007-2965: Undefined Security Weakness
Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007; Anti-Virus 2005, 2006 and 2007; and Solutions based on F-Secure Protection Service for Consumers 6.40 and earlier allows local users to gain privileges via...
XMPP Server Detection
An instant messaging server supporting the Extensible Messaging and Presence Protocol XMPP, a protocol used for real-time messaging, is listening on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...
User about antivirus real-time monitoring and memory antivirus-vulnerability warning-the black bar safety net
Antivirus real-time monitoring with in-memory scanning is a thing? Of course not. If not, then they have what is the difference? In General, real-time monitoring is mainly to monitor the virus on the hard disk of the rewrite operation, the memory scan is mainly scans the memory of all processes a...
F-Secure Anti-Virus Client Security本地格式串处理漏洞
F-Secure Anti-Virus Client Security是PC平台上的实时病毒监测和防护系统，支持所有WINDOWS系统。 F-Secure Anti-Virus Client Security在处理Management Server名称字段时存在格式串处理漏洞，如果攻击者在Communication设置的Management Server名称字段中提供了特制格式串的话，就可以读写任意内存，并可以导致拒绝服务。 F-Secure Anti-Virus Client Security 6.03 F-Secure Anti-Virus Client Security 6.02...
