2412 matches found
Firefox 10.0.x < 10.0.5 Multiple Vulnerabilities
The installed version of Firefox 10.0.x is potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist. CVE-2012-1937, CVE-2012-1939 - T...
Firefox < 13.0 Multiple Vulnerabilities
The installed version of Firefox is earlier than 13.0 and thus, is potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist...
Mozilla Firefox 12.x < 12 Multiple Vulnerabilities
Binary data 801297.prm...
Mozilla Thunderbird 10.0.x < 10.0.5 Multiple Vulnerabilities
The installed version of Thunderbird 10.0.x is potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist. CVE-2012-1937, CVE-2012-1939...
USN-1463-1: Firefox vulnerabilities
Jesse Ruderman, Igor Bukanov, Bill McCloskey, Christian Holler, Andrew McCreight, Olli Pettay, Boris Zbarsky, and Brian Bondy discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a deni...
CVE-2012-0441
The CVE-2012-0441 issue affects the NSS ASN.1 decoder QuickDER. The flaw allows a remote attacker to trigger a denial of service (application crash) via a zero-length item in ASN.1 structures (e.g., a zero-length basic constraint or a zero-length OCSP field). Affected software includes NSS-based ...
NSS parsing errors with zero length items — Mozilla
Security researcher Kaspar Brand found a flaw in how the Network Security Services NSS ASN.1 decoder handles zero length items. Effects of this issue depend on the field. One known symptom is an unexploitable crash in handling OCSP responses. NSS also mishandles zero-length basic constraints,...
FreeBSD -- OpenSSL multiple vulnerabilities
Problem description: OpenSSL fails to clear the bytes used as block cipher padding in SSL 3.0 records when operating as a client or a server that accept SSL 3.0 handshakes. As a result, in each record, up to 15 bytes of uninitialized memory may be sent, encrypted, to the SSL peer. This could...
USN-1436-1: Libtasn1 vulnerability
Matthew Hall discovered that Libtasn1 incorrectly handled certain large values. An attacker could exploit this with a specially crafted ASN.1 structure and cause a denial of service, or possibly execute arbitrary code...
Important: openssl098e
Issue Overview: Multiple numeric conversion errors, leading to a buffer overflow, were found in the way OpenSSL parsed ASN.1 Abstract Syntax Notation One data from BIO OpenSSL's I/O abstraction inputs. Specially-crafted DER Distinguished Encoding Rules encoded data read from a file or other BIO...
Debian Security Advisory DSA 2454-2 (openssl)
The remote host is missing an update to openssl announced via advisory DSA 2454-2. OpenVAS Vulnerability Test $Id: deb24542.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2454-2 openssl Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Debian Security Advisory DSA 2454-1 (openssl)
The remote host is missing an update to openssl announced via advisory DSA 2454-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreeBSD Ports: libtasn1
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
openssl, openssl097a, openssl098e security update
CentOS Errata and Security Advisory CESA-2012:0518 Updated openssl, openssl097a, and openssl098e packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common...
Important: Red Hat Security Advisory: openssl security update
Updated openssl, openssl097a, and openssl098e packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...
[SECURITY] [DSA 2454-1] openssl security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2454-1 [email protected] http://www.debian.org/security/ Raphael Geissert April 19, 2012 http://www.debian.org/security/faq -...
OpenSSL 1.0.1 Memory Corruption
Exploit for multiple platform in category remote exploits Incorrect integer conversions in OpenSSL can result in memory corruption. -------------------------------------------------------------------------- CVE-2012-2110 This advisory is intended for system administrators and developers exposing...
Debian DSA-2454-2 : openssl - multiple vulnerabilities
Multiple vulnerabilities have been found in OpenSSL. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2012-0884 Ivan Nestlerode discovered a weakness in the CMS and PKCS 7 implementations that could allow an attacker to decrypt data via a Million Message...
CVE-2012-2110
OpenSSL CVE-2012-2110 is a buffer overflow in asn1_d2i_read_bio (DER parsing) that can cause memory corruption or DoS via crafted DER data (e.g., X.509 certs or RSA keys). Affected releases include OpenSSL 0.9.8v, 0.9.8.x prior to 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a. Public advis...
