Scientific Linux Security Update : curl on SL4.x i386/x86_64

Wesley Miaw discovered that when deflate compression was used, libcurl could call the registered write callback function with data exceeding the documented limit. A malicious server could use this flaw to crash an application using libcurl or, potentially, execute arbitrary code. Note: This issue...

Scientific Linux Security Update : giflib on SL5.x i386/x86_64

Several flaws were discovered in the way giflib decodes GIF images. An attacker could create a carefully crafted GIF image that could cause an application using giflib to crash or, possibly, execute arbitrary code when opened by a victim. CVE-2005-2974, CVE-2005-3350 All running applications usin...

Mozilla: Miscellaneous memory safety hazards (rv:14.0/ rv:10.0.6) (MFSA 2012-42)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allow remote attackers to cause a denial of service memory corruption and...

Oracle MySQL Server 5.5 < 5.5.24 Multiple Unspecified Vulnerabilities

Binary data 6515.prm...

MySQL Server 5.5 < 5.5.24 Multiple Unspecified Vulnerabilities

Binary data 801157.prm...

Oracle MySQL Server 5.1 < 5.1.63 Multiple Vulnerabilities

Binary data 6653.prm...

RedHat Update for librsvg2 RHSA-2011:1289-01

Check for the Version of librsvg2 OpenVAS Vulnerability Test RedHat Update for librsvg2 RHSA-2011:1289-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

MySQL 5.5 < 5.5.24 Security Bypass Vulnerability

The version of MySQL 5.5 installed on the remote host is earlier than 5.5.24 and is, therefore, affected by the following vulnerabilities : - Several errors exist related to 'GIS Extension', 'Server', 'InnoDB' and 'Server Optimizer' components that can allow denial of service attacks...

MySQL 5.1 < 5.1.63 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.63 and is, therefore, affected by multiple vulnerabilities : - Several errors exist related to 'GIS Extension' and 'Server Optimizer' components that can allow denial of service attacks. CVE-2012-0540, CVE-2012-1689,...

Mozilla Thunderbird 10.0.x < 10.0.5 Multiple Vulnerabilities

The installed version of Thunderbird 10.0.x is potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist. CVE-2012-1937, CVE-2012-1939...

Wireshark 1.6.x < 1.6.8 Multiple Denial of Service Vulnerabilities

The installed version of Wireshark is 1.6.x before 1.6.8. This version is affected by the following vulnerabilities : - Input validation errors exist in the dissectors for ANSI MAP, ASF, BACapp, Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP, and R3 that can allow specially crafted packets to cause...

Wireshark 1.4.x < 1.4.13 Multiple Denial of Service Vulnerabilities

The installed version of Wireshark is 1.4.x before 1.4.13. This version is affected by the following vulnerabilities : - Input validation errors exist in the dissectors for ANSI MAP, ASF, BACapp, Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP, and R3 that can allow specially crafted packets to cause...

nVIR

1987 Also hitting Macs in the mid ’80s was nVIR, a virus that initially began to spread via floppy disk that eventually had its source code made widely available. The virus caused application crashes, printing errors on laser printers, slow system response time and even system crashes, according ...

RedHat Update for freetype RHSA-2012:0467-01

Check for the Version of freetype OpenVAS Vulnerability Test RedHat Update for freetype RHSA-2012:0467-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Important: Red Hat Security Advisory: freetype security update

Updated freetype packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

FreeBSD : freetype -- multiple vulnerabilities (462e2d6c-8017-11e1-a571-bcaec565249c)

The Freetype project reports : Multiple vulnerabilities exist in freetype that can result in application crashes and remote code execution. Please review the details in each of the CVEs for additional information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

DSA-2440-1 libtasn1-3 - integer overflow

Bulletin has no description...

Pidgin Multiple Denial of Service Vulnerabilities (Windows)

This host is installed with Pidgin and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginmultdosvulnwin.nasl 5940 2017-04-12 09:02:05Z teissa $ Pidgin Multiple Denial of Service Vulnerabilities Windows Authors: Madhuri D Copyright: Copyright c 2012...

New Version of Flashback Mac Trojan Found Using Java Exploits

A new version of the Flashback Trojan that targets Macs has appeared, and this one uses a drive-by download technique to attempt exploits of two Java vulnerabilities. The Flashback.G malware also tries to trick users into accepting a fake digital certificate, which will install the malware if the...

Mozilla Thunderbird 10.x < 10.0.1 Memory Corruption

The installed version of Thunderbird 10.x is earlier than 10.0.1 and is, therefore, potentially affected by a memory corruption vulnerability. A use-after-free error exists in the method 'nsXBLDocumentInfo::ReadPrototypeBindings' and XBL bindings are not properly removed from a hash table in the...