75 matches found
SUSE-SU-2017:1030-1 Security update for libsndfile
This update for libsndfile fixes the following issues: - CVE-2017-7585,CVE-2017-7741,CVE-2017-7742: Some stack-based buffer overflows via a specially crafted FLAC file were fixed error in the 'flacbuffercopy' function bsc1033054, bsc1033914, bsc1033915...
SUSE-SU-2017:0940-1 Security update for audiofile
This audiofile update fixes the following issue: Security issues fixed: - CVE-2015-7747: Fixed buffer overflow issue when changing both number of channels and sample format. bsc949399 - CVE-2017-6827: heap-based buffer overflow in MSADPCM::initializeCoefficients MSADPCM.cpp bsc1026979 -...
SUSE-SU-2016:1783-1 Security update for GraphicsMagick
GraphicsMagick was updated to fix 37 security issues. These security issues were fixed: - CVE-2014-9810: SEGV in dpx file handler bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9813: Crash on corrupted viff file bsc984035. - CVE-2014-9814: NULL pointer dereference in...
SUSE-SU-2016:1258-1 Security update for MozillaFirefox
This update to MozillaFirefox 38.8.0 ESR fixes the following issues bsc977333: - CVE-2016-2805: Miscellaneous memory safety hazards - MFSA 2016-39 bsc977374 - CVE-2016-2807: Miscellaneous memory safety hazards - MFSA 2016-39 bsc977376 - CVE-2016-2814: Buffer overflow in libstagefright with CENC...
SUSE-SU-2016:0636-1 Security update for java-1_7_0-ibm
This update for java-170-ibm fixes the following issues by updating to 7.0-9.30 bsc963937: - CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances - CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack wh...
MGASA-2015-0427 Updated firefox, nspr, nss packages fix security vulnerability
Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2015-4513, CVE-2015-7189, CVE-2015-7194, CVE-2015-7196,...
FreeBSD : mozilla -- multiple vulnerabilities (e3f0374a-7ad6-11e2-84cd-d43d7e0c7c02)
The Mozilla Project reports : MFSA 2013-21 Miscellaneous memory safety hazards rv:19.0 / rv:17.0.3 MFSA 2013-22 Out-of-bounds read in image rendering MFSA 2013-23 Wrapped WebIDL objects can be wrapped again MFSA 2013-24 Web content bypass of COW and SOW security wrappers MFSA 2013-25 Privacy leak...
DSA-695-1 xli - buffer overflow, input sanitising, integer overflow
Bulletin has no description...
RHEL 3 : rh-postgresql (RHSA-2005:141)
Updated PostgreSQL packages to fix various security flaws are now available for Red Hat Enterprise Linux 3. PostgreSQL is an advanced Object-Relational database management system DBMS. A flaw in the LOAD command in PostgreSQL was discovered. A local user could use this flaw to load arbitrary shar...
yamt -- buffer overflow and directory traversal issues
Stanislav Brabec discovered errors in yamt's path name handling that lead to buffer overflows and directory traversal issues. When processing a file with a maliciously crafted ID3 tag, yamt might overwrite arbitrary files or possibly execute arbitrary code. The SuSE package ChangeLog contains:...
Debian DSA-479-1 : linux-kernel-2.4.18-alpha+i386+powerpc - several vulnerabilities
Several serious problems have been discovered in the Linux kernel. This update takes care of Linux 2.4.18 for the alpha, i386 and powerpc architectures. The Common Vulnerabilities and Exposures project identifies the following problems that will be fixed with this update : - CAN-2004-0003 A...
Debian DSA-277-1 : apcupsd - buffer overflows, format string
The controlling and management daemon apcupsd for APC's Unbreakable Power Supplies is vulnerable to several buffer overflows and format string attacks. These bugs can be exploited remotely by an attacker to gain root access to the machine apcupsd is running on. %NASLMINLEVEL 70300 C Tenable Netwo...
[VulnWatch] Patch available for multiple critical flaws in Oracle
Researchers at NGSSoftware have discovered multiple critical vulnerabilities in Oracle Database Server and Oracle Application Server. Versions affected include Oracle Database 10g Release 1 Version 10.1.0.2 Oracle9i Database Server Release 2, versions 9.2.0.4 and 9.2.0.5 Oracle9i Database Server...
Fedora Core 1 : XFree86-4.3.0-55 (2004-069)
Updated XFree86 packages that fix a privilege escalation vulnerability are now available. XFree86 is an implementation of the X Window System, providing the core graphical user interface and video drivers. iDefense discovered two buffer overflows in the parsing of the 'font.alias' file. A local...
ActivePerl buffer overflow
win32stat buffer overflow...
QuickTime/Darwin Streaming Server multiple bugs
Multiple bugs including uncommented shell characters, buffer overflows, etc...
[SECURITY] [DSA 434-1] New gaim packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 434-1 [email protected] http://www.debian.org/security/ Martin Schulze February 5th, 2004 http://www.debian.org/security/faq -...
[Full-Disclosure] lftp buffer overflows
lftp buffer overflows --------------------- PROGRAM: lftp VENDOR: Alexander V. Lukyanov et al. HOMEPAGE: http://lftp.yar.ru/ VULNERABLE VERSIONS: 2.3.0, 2.4.9, 2.6.6, 2.6.7, 2.6.8, 2.6.9, probably all versions inbetween IMMUNE VERSIONS: 2.6.10, older versions with my patch applied PROGRAM...