GLSA-201603-01 : GIMP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201603-01 GIMP: Multiple vulnerabilities GIMPs network server, scriptfu, is vulnerable to the remote execution of arbitrary code via the python-fu-eval command due to not requiring authentication. Additionally, the X Window Dump X...

GIMP: Multiple vulnerabilities

Background GIMP is a cross-platform image editor available for GNU/Linux, OS X, Windows and more operating systems. Description GIMP’s network server, scriptfu, is vulnerable to the remote execution of arbitrary code via the python-fu-eval command due to not requiring authentication. Additionally...

SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2016:0636-1) (SLOTH)

This update for java-170-ibm fixes the following issues by updating to 7.0-9.30 bsc963937 : - CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances - CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack...

Updated xerces-c packages fix CVE-2016-0729

Updated xerces-c packages fix security vulnerability: The Xerces-C XML parser mishandles certain kinds of malformed input documents, resulting in buffer overlows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse...

MGASA-2016-0088 Updated xerces-c packages fix CVE-2016-0729

Updated xerces-c packages fix security vulnerability: The Xerces-C XML parser mishandles certain kinds of malformed input documents, resulting in buffer overlows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse...

The vulnerabilities of Adobe Integrated Runtime and Flash Player allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption remotely...

The vulnerabilities of Adobe Integrated Runtime and Flash Player allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption remotely...

The vulnerabilities of Adobe Integrated Runtime and Flash Player allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption remotely...

The vulnerabilities of Adobe Integrated Runtime and Flash Player allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption remotely...

The vulnerabilities of Adobe Integrated Runtime and Flash Player allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of Adobe Integrated Runtime and Flash Player programs arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption remotely...

Firefox browser’s vulnerabilities, which allow a hacker to trigger a service failure or execute arbitrary code

The multiple vulnerabilities in the Firefox browser’s kernel are caused by buffer overflows. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions memory corruption, application termination, or execute arbitrary code by manipulating uninitialized memory...

Debian DSA-3493-1 : xerces-c - security update

Gustavo Grieco discovered that xerces-c, a validating XML parser library for C++, mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. These flaws could lead to a denial of service in applications using the xerces-c library, o...

xerces-c3 -- Parser Crashes on Malformed Input

The Apache Software Foundation reports: The Xerces-C XML parser mishandles certain kinds of malformed input documents, resulting in buffer overflows during processing and error reporting. The overflows can manifest as a segmentation fault or as memory corruption during a parse operation. The bugs...

DSA-3493-1 xerces-c - security update

Bulletin has no description...

The vulnerability of the glibc library, which allows a hacker to cause a service failure or execute arbitrary code

The vulnerability of the libresolv component in the glibc library is related to multiple buffer overflows in the senddg and sendvc functions. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code by sending specially crafted DNS requests that trigger...

DLA-422-1 python-imaging - security update

Bulletin has no description...

CVE-2015-7547

Multiple stack-based buffer overflows in the 1 senddg and 2 sendvc functions in the libresolv library in the GNU C Library aka glibc or libc6 before 2.23 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted DNS response that triggers a call to...

CVE-2015-7547

Multiple stack-based buffer overflows in the 1 senddg and 2 sendvc functions in the libresolv library in the GNU C Library aka glibc or libc6 before 2.23 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted DNS response that triggers a call to...

F5 Networks BIG-IP : glibc vulnerability (K47098834)

Multiple stack-based buffer overflows in the 1 senddg and 2 sendvc functions in the libresolv library in the GNU C Library aka glibc or libc6 before 2.23 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted DNS response that triggers a call to...

CVE-2015-7547

Multiple stack-based buffer overflows in the 1 senddg and 2 sendvc functions in the libresolv library in the GNU C Library aka glibc or libc6 before 2.23 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted DNS response that triggers a call to...