Apple Quicktime Sorenson Video Codec Decoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple's Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way...

Microsoft Word Bookmarks Bounds Checking Code Execution (MS10-079; CVE-2010-3216)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in the way that Microsoft Word handles bookmarks inside a specially crafted Word file. The vulnerability is due to an error in Microsoft Word that fails to properly parse specially...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 7121)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - stack-based buffer overflow while processing CFF opcodes. CVE-2010-1797 - integer underflow. CVE-2010-2497 - invalid free. CVE-2010-2498 - buffer...

SuSE9 Security Update : freetype2 (YOU Patch Number 12630)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - stack-based buffer overflow while processing CFF opcodes. CVE-2010-1797 - integer underflow. CVE-2010-2497 - invalid free. CVE-2010-2498 - buffer...

openSUSE Security Update : freetype2 (openSUSE-SU-2010:0549-1)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - CVE-2010-1797: stack-based buffer overflow while processing CFF opcodes - CVE-2010-2497: integer underflow - CVE-2010-2498: invalid free -...

Apple Fixes 13 Bugs in Major OS X Patch Release

Apple released a patch Tuesday that fixes more than a dozen bugs, including a critical remote code-execution flaw in Apple Type Services. The patch release also includes a fix for a flaw in CFNetwork that enabled an attacker to intercept user credentials and other sensitive data silently on a...

Mandriva Update for freetype2 MDVSA-2010:157 (freetype2)

Check for the Version of freetype2 OpenVAS Vulnerability Test Mandriva Update for freetype2 MDVSA-2010:157 freetype2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2010-2807

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

Integer overflow

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2807

CVE-2010-2807 affects FreeType up to version 2.4.2, where improper integer bounds checking in the font processing code can lead to a crash or potentially arbitrary code execution via a crafted font file. Connected advisories reference the 2.4.2 release as the fix. Remediation: upgrade to FreeType...

CVE-2010-2807

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

Microsoft Windows RRAS Memory Corruption (CVE-2006-2370)

Microsoft Remote Access Connection Manager service, RASMAN, provides the functionality to remotely configure and manage various services. One such service that can be managed remotely is the Routing and Remote Access Service, RRAS. Routing and Remote Access Service makes it possible for a compute...

CVE-2010-2807

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

Ghostscript 'iscan.c' PDF Handling Remote Buffer Overflow Vulnerability

This host is installed with Ghostscript and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbghostscriptbofvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ Ghostscript 'iscan.c' PDF Handling Remote Buffer Overflow Vulnerability Authors: Madhuri D Copyright: Copyright c 201...

Apple Ships Critical iTunes for Windows Patch

Apple has shipped a critical iTunes update to fix a security vulnerability that exposes Windows users to malicious hacker attacks. The latest iTunes 9.2.1 is available for Windows XP, Windows Vista and Windows 7. From Apple’s advisory: A buffer overflow exists in the handling of “itpc:”URLs...

Groovy Media Player '.m3u' File Remote Stack Buffer Overflow Vulnerability

This host is installed with Groovy Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbgroovymediaplayerbofvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ Groovy Media Player '.m3u' File Remote Stack Buffer Overflow Vulnerability Authors: Madhuri D Copyright:...

Groovy Media Player '.m3u' File Remote Stack Buffer Overflow Vulnerability

Groovy Media Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ruby 'ARGF.inplace_mode' Buffer Overflow Vulnerability

This host is installed with Ruby and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbrubybofvulnwin.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby 'ARGF.inplacemode' Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright C 2010 Greenbone Networks GmbH...

TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability

TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-10-04 -- CVE ID: CVE-2010-0898 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Oracle -- Affected Products: Oracle Secure Backup -- TippingPointTM IPS...

Squid Proxy Cache Update Denial of Service

There exists a denial of service vulnerability in Squid web proxy application. The flaw is due to incorrect bounds checking when processing crafted cache update reply messages. A remote unauthenticated attacker may trigger this vulnerability to terminate the affected service. Upon receiving a...