USN-1750-1: Linux kernel vulnerabilities

Mathias Krause discovered a bounds checking error for netlink messages requesting SOCKDIAGBYFAMILY. An unprivileged local user could exploit this flaw to crash the system or run programs as an administrator...

USN-1749-1: Linux kernel (Quantal HWE) vulnerability

Mathias Krause discovered a bounds checking error for netlink messages requesting SOCKDIAGBYFAMILY. An unprivileged local user could exploit this flaw to crash the system or run programs as an administrator...

Buffer Overflow Vulnerability Found in VLC Media Player

A buffer overflow could occur in VideoLAN’s VLC cross-platform multimedia player when attempting to parse a specially crafted advanced systems format ASF movie, a researcher reported. The vulnerability, found by security researcher Debasish Mandal, exists in the ASF demuxer of VLC media player...

Apple QuickTime rnet Box Parsing Heap Buffer Overflow (CVE-2012-3756)

A heap buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a bounds-checking error while parsing QuickTime reference movie files. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted QuickTime movie fi...

Apple QuickTime Targa File Buffer Overflow (CVE-2012-3755)

A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a bounds-checking error. A remote attacker can exploit this vulnerability by enticing a user to process a specially crafted Targa file. Successful exploitation may lead to arbitrary code execution...

Buffer Overflow Bugs Found in Informix database Servers

Several versions of the popular Informix database server from IBM contain two buffer overflow vulnerabilities that could lead to remote code execution. The problems affect eight different versions of the server and are present on Informix installations on all supported platforms. A researcher at...

SuSE Update for qemu openSUSE-SU-2012:1170-1 (qemu)

Check for the Version of qemu OpenVAS Vulnerability Test $Id: gbsuse201211701.nasl 8273 2018-01-03 06:29:19Z teissa $ SuSE Update for qemu openSUSE-SU-2012:1170-1 qemu Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...

openSUSE: Security Advisory for qemu (openSUSE-SU-2012:1170-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark DECT Dissector Stack Buffer Overflow (CVE-2011-1591)

A stack buffer overflow vulnerability has been reported in Wireshark DECT dissector. The vulnerability is caused due to improper bounds checking. A remote attacker can exploit this vulnerability by enticing a user to read a specially crafted packet trace file. Successful exploitation would allow ...

Symantec Products CAB Files Memory Corruption Vulnerability

This host is installed with Symantec Product and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecprdtscabfilesmemcorrvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ Symantec Products CAB Files Memory Corruption Vulnerability Authors: Rachana Shetty Copyright:...

Symantec Products CAB Files Memory Corruption Vulnerability

Symantec Product is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NFR Agent Heap Overflow Vulnerability

This module exploits a heap overflow in NFRAgent.exe, a component of Novell File Reporter NFR. The vulnerability occurs when handling requests of name "SRS", where NFRAgent.exe fails to generate a response in a secure way, copying user controlled data into a fixed-length buffer in the heap withou...

APPLE-SA-2012-11-07-1 QuickTime 7.7.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-11-07-1 QuickTime 7.7.3 QuickTime 7.7.3 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Viewing a maliciously crafted PICT file may lead to an unexpected application...

Symantec Legacy Decomposer CAB File Issues

SUMMARY Symantec's legacy Decomposer engine fails to proper handle bounds checking when parsing files from some versions of CAB archives. This could result in the probability of an application crash in the majority of cases. A successfully crafted malicious CAB file could potentially result in...

Apple QuickTime Plugin SetLanguage Buffer Overflow (CVE-2012-0666)

A stack buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to insufficient bounds checking when parsing parameters to a certain method inside the QuickTime plugin. A remote attacker can exploit this issue by enticing a target user to open a specially...

FlashFXP Multiple Buffer Overflow Vulnerabilities

FlashFXP is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:flashfxp:flashfxp"...

qemu: Fix buffer overflow in console VT100 emulation (important)

qemu was fixed to add bounds checking for VT100 escape code parsing and cursor placement. Also qemu was updated on 12.2 and 11.4 to the latest stable release v1.1.1 and v0.14.1 respectively...

Slackware Advisory SSA:2004-049-01 Kernel security update

The remote host is missing an update as announced via advisory SSA:2004-049-01. OpenVAS Vulnerability Test $Id: esoftslkssa200404901.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2004-049-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware: Security Advisory (SSA:2004-006-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...