MGASA-2016-0202 Updated p7zip packages fix CVE-2016-2335

Updated p7zip package fixes security vulnerability: An out of bound read vulnerability exists in the CInArchive::ReadFileItem method functionality of 7zip for handling UDF files that can lead to denial of service or code execution CVE-2016-2335...

p7zip: arbitrary code execution

CVE-2016-2334 arbitrary code execution An exploitable heap overflow vulnerability exists in the NArchive::NHfs::CHandler::ExtractZlibFile method functionality of 7zip that can lead to arbitrary code execution. Before decompression, ExtractZlibFile method read block size and its offset from file...

SUSE SLED12 / SLES12 Security Update : cairo (SUSE-SU-2016:1100-1)

This update for cairo fixes the following issues : - CVE-2016-3190: Fixed an out-of-bound read in the fillxrgb32lerpopaquespans function that might lead to a crash when processing a maliciously crafted image file bsc971964. Note that Tenable Network Security has extracted the preceding descriptio...

SUSE-SU-2016:1100-1 Security update for cairo

This update for cairo fixes the following issues: - CVE-2016-3190: Fixed an out-of-bound read in the fillxrgb32lerpopaquespans function that might lead to a crash when processing a maliciously crafted image file bsc971964...

Microsoft Internet Explorer 9/10/11 - CDOMStringDataList::InitFromString Out-of-Bounds Read (MS15-11

Exploit for windows platform in category remote exploits !-- CVE-2015-6086 Out Of Bound Read Vulnerability Address Space Layout Randomization ASLR Bypass Improper handling of new line and white space character caused Out of Bound Read in CDOMStringDataList::InitFromString. This flaw can be used t...

Microsoft Internet Explorer 91011 - CDOMStringDataList::InitFromString Out-of-Bounds Read (MS15-112)

Microsoft Internet Explorer 91011 - CDOMStringDataList::InitFromString Out-of-Bounds Read MS15-112 !-- CVE-2015-6086 Out Of Bound Read Vulnerability Address Space Layout Randomization ASLR Bypass Improper handling of new line and white space character caused Out of Bound Read in...

openSUSE Security Update : ghostscript (openSUSE-2016-427)

ghostscript was updated to fix one security issue and one bug. The following vulnerability was fixed : - CVE-2015-3228: Specially crafted ps files could have caused an out of bound read/write due to an integer overflow, causing a segfault in the application or having unspecified further impact...

Apple QuickTime 7.7.79.80.95 - .PSD Parsing Memory Corruption

Apple QuickTime 7.7.79.80.95 - .PSD Parsing Memory Corruption Application: Apple Quicktime Platforms: Windows, OSX Versions: before version 7.7.79.80.95 Author: Francis Provencher of COSIG Website: http://www.protekresearchlab.com/ Twitter: @COSIG @protekresearch CVE-2016-1769 1 Introduction 2...

Fedora 23 : knot-2.0.2-1.fc23 (2015-df0f324367)

New upstream release: - security fix: out-of-bound read in packet parser for malformed NAPTR record Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Amazon Linux AMI : nginx (ALAS-2016-655)

It was discovered that nginx could perform an out of bound read and dereference an invalid pointer when resolving CNAME DNS records. An attacker able to manipulate DNS responses received by nginx could use this flaw to cause a worker process to crash if nginx enabled the resolver in its...

Fedora 22 : knot-1.6.6-1.fc22 (2015-b5a8f09e32)

New upstream release: - security fix: out-of-bound read in packet parser for malformed NAPTR record - fix: systemd startup notifications Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

php5 -- multiple vulnerabilities

The PHP Group reports: Phar: Fixed bug 71498 Out-of-Bound Read in pharparsezipfile. WDDX: Fixed bug 71587 Use-After-Free / Double-Free in WDDX Deserialize...

Debian Security Advisory DSA 3471-1 (qemu - security update)

Several vulnerabilities were discovered in qemu, a full virtualization solution on x86 hardware. CVE-2015-7295 Jason Wang of Red Hat Inc. discovered that the Virtual Network Device support is vulnerable to denial-of-service, that could occur when receiving large packets. CVE-2015-7504 Qinghao Tan...

SUSE-SU-2016:0030-1 Security update for libxml2

This update fixes the following security issues: CVE-2015-1819 Enforce the reader to run in constant memory bnc928193 CVE-2015-7941 Fix out of bound read with crafted xml input by stopping parsing on entities boundaries errors bnc951734 CVE-2015-7942 Fix another variation of overflow in Condition...

openSUSE: Security Advisory for libpng12 (openSUSE-SU-2015:2099-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libpng12 (openSUSE-2015-826)

The libpng12 package was updated to fix the following security issues : - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in pnggetPLTE/pngsetPLTE functions bsc954980. - CVE-2015-7981: Fixed an out-of-bound read bsc952051. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

openSUSE Security Update : libpng12 (openSUSE-2015-802)

The libpng12 package was updated to fix the following security issues : - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in pnggetPLTE/pngsetPLTE functions bsc954980. - CVE-2015-7981: Fixed an out-of-bound read bsc952051. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

Security update for libpng12 (important)

The libpng12 package was updated to fix the following security issues: - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in pnggetPLTE/pngsetPLTE functions bsc954980. - CVE-2015-7981: Fixed an out-of-bound read bsc952051...

SUSE SLED11 / SLES11 Security Update : libpng12-0 (SUSE-SU-2015:2017-1)

The libpng12-0 package was updated to fix the following security issues : - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in pnggetPLTE/pngsetPLTE functions bsc954980. - CVE-2015-7981: Fixed an out-of-bound read bsc952051. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : libpng12 (SUSE-SU-2015:2024-1)

The libpng12 package was updated to fix the following security issues : - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in pnggetPLTE/pngsetPLTE functions bsc954980. - CVE-2015-7981: Fixed an out-of-bound read bsc952051. Note that Tenable Network Security has extracted the preceding...