4849 matches found
openSUSE Security Update : gstreamer-0_10-plugins-bad (openSUSE-2017-64)
This update for gstreamer-010-plugins-bad fixes the following issues : - CVE-2016-9445, CVE-2016-9446: Protection against buffer overflows bsc1010829 - CVE-2016-9447: Disable the nsf plugin bsc1010514 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C...
November 2016 Preview of Quality Rollup for the .NET Framework 2.0 SP2, 4.5.2, 4.6 on Windows Vista SP2 and Windows Server 2008 SP2 (KB3195382): November 15, 2016
November 2016 Preview of Quality Rollup for the .NET Framework 2.0 SP2, 4.5.2, 4.6 on Windows Vista SP2 and Windows Server 2008 SP2 KB3195382: November 15, 2016 This update is superseded by the December 13, 2016, Quality Rollup 3210142. Note There is a known issue in this update. For more...
Update Rollup 7 for System Center 2012 Orchestrator Service Pack 1
Update Rollup 7 for System Center 2012 Orchestrator Service Pack 1 Introduction This article describes the issues that are fixed in Update Rollup 7 for Microsoft System Center 2012 Orchestrator Service Pack 1 SP1. This article also contains the installation instructions for Update Rollup 7 for...
MS13-052: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: July 9, 2013
MS13-052: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: July 9, 2013 View products that this article applies to. August 13, 2013 This security update has been re-released and contains updated...
MS14-057: Description of the security update for the .NET Framework 2.0 SP2 for Windows Vista SP2 and Windows Server 2008 SP2: October 14, 2014
MS14-057: Description of the security update for the .NET Framework 2.0 SP2 for Windows Vista SP2 and Windows Server 2008 SP2: October 14, 2014 View products that this article applies to. Introduction This security update resolves vulnerabilities that could allow remote code execution if an...
openSUSE Security Update : samba (openSUSE-2017-12)
This update for samba fixes the following issues : Security issues fixed : - CVE-2016-2125: Don't send delegated credentials to all servers. bsc1014441. - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. bsc1014442. - CVE-2016-2123: Heap-based Buffe...
CVE-2016-7275
Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."...
CVE-2016-7289
CVE-2016-7289 corresponds to a memory corruption/remote code execution vulnerability in Microsoft Office components, notably Microsoft Publisher 2010 SP2. The issue arises from improper handling of objects in memory when parsing crafted documents, allowing an attacker to run arbitrary code or cau...
CVE-2016-7289: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
CVE-2016-7290: Out-of-bounds Read
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service...
CVE-2016-7268: Out-of-bounds Read
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial...
CVE-2016-7275: Undefined Security Weakness
Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."...
CVE-2016-7262: Undefined Security Weakness
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature...
CVE-2016-7257: Exposure of Sensitive Information to an Unauthorized Actor
The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 for Mac allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI Information Disclosure Vulnerability."...
PT-2016-7290
Name of the Vulnerable Software and Affected Versions Microsoft Publisher 2010 SP2 Microsoft Office affected versions not specified Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted document. Multiple remote...
Microsoft Windows Graphics Component CVE-2016-7259 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges within the context of the affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...
Microsoft Windows Crypto Driver CVE-2016-7219 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
PT-2016-7271
Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Office for Mac 2011 Microsoft Office 2016 for Mac Description The issue allows remote attackers to obtain sensitive information from...
openSUSE Security Update : libgit2 (openSUSE-2016-1450)
libgit2 was updated to fix two security issues. These security issues were fixed : - CVE-2016-8568: Read out-of-bounds in gitoidnfmt bsc1003810. - CVE-2016-8569: DoS caused by a NULL pointer dereference in gitcommitmessage bsc1003810. This update was imported from the SUSE:SLE-12-SP2:Update updat...