248 matches found
SUSE-SU-2015:0353-1 Security update for samba
samba was updated to fix one security issue. This security issue was fixed: - CVE-2015-0240: Don't call tallocfree on an uninitialized pointer bnc917376. These non-security issues were fixed: - Fix vfssnapper DBus string handling bso11055, bnc913238. - Fix libsmbclient DFS referral handling. +...
UBUNTU-CVE-2014-9157
Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...
mysql: unspecified vulnerability related to SRCHAR (CPU July 2014)
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR...
[SECURITY] Fedora 19 Update: qt5-qtbase-5.2.1-8.fc19
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
ESXi 5.0 < Build 515841 Multiple Vulnerabilities (remote check)
The remote VMware ESXi 5.0 host is affected by the following security vulnerabilities : - A security bypass vulnerability exists in the e1000 driver in the Linux kernel due to improper handling of Ethernet frames that exceed the MTU. An unauthenticated, remote attacker can exploit this, via...
Microsoft Internet Explorer jsdbgui Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
[SECURITY] Fedora 17 Update: qt-4.8.4-11.fc17
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
[SECURITY] Fedora 18 Update: qt-4.8.4-11.fc18
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
php: incomplete CVE-2012-1823 fix - missing filtering of -T and -h
sapi/cgi/cgimain.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to cause a denial of service resource consumption by placing command-line options...
[SECURITY] Fedora 16 Update: qt-4.8.0-7.fc16
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
CVE-2011-2861
Technical details for CVE-2011-2861 are not publicly provided in the connected documents. Monitor for updates from upstream sources.
Google Chrome < 13.0.782.107 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 13.0.782.107. As such, it is potentially affected by several vulnerabilities : - An unspecified error exists related to extension installation and confirmation dialogs. Issue 75821 - A stale pointer issue exists related to...
Squid: Denial of service due internal error in string handling (SQUID-2010:3)
The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted request...
RealNetworks Helix Server "x-wap-profile"头选项格式串处理漏洞
BUGTRAQ ID: 47110 CVE ID: CVE-2010-4235 RealNetwork Helix Server是一款支持多格式、跨平台的流媒体服务器软件，能将高质量的多媒体内容发不到任何网络位置。 Helix Server在处理请求中的"x-wap-profile"头选项时存在格式串处理漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码或造成拒绝服务。 Real Networks Helix Mobile Server 14.0.0 Real Networks Helix Mobile Server 13.x Real Networks Helix Mobile...
CVE-2008-7285
The vulnerability described for CVE-2008-7285 affects IBM Lotus Quickr 8.1 prior to 8.1.0.2 for Lotus Domino, due to an issue in the docnote string handling implementation. The advisory states remote attackers can cause a denial of service (daemon crash) via unknown vectors (SPR JFLD7GZT25). No c...
CVE-2008-7285: Undefined Security Weakness
Unspecified vulnerability in the docnote string handling implementation in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allows remote attackers to cause a denial of service daemon crash via unknown vectors, aka SPR JFLD7GZT25...
Squid < 3.1.8 / 3.2.0.2 NULL Pointer Dereference Denial of Service
According to its banner, the version of Squid is 3.x earlier than than 3.1.8, or 3.2.x earlier than 3.2.0.2. Such versions are potentially affected by a denial of service vulnerability caused by an internal error in string handling. A remote attacker, exploiting this flaw, could crash the affecte...
[SECURITY] Fedora 12 Update: qt-4.6.3-8.fc12
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
[SECURITY] Fedora 13 Update: qt-4.6.2-17.fc13
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
Apple QuickTime MOV File String Handling Integer Overflow (CVE-2005-2753)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous video formats. QuickTime is capable of processing the Apple QuickTime movie file format, which is a proprietary format created by Appl...