openSUSE Security Update : OpenOffice_org (openSUSE-SU-2011:0336-1)

Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. The previous OpenOfficeorg packages are also renamed to libreoffice. LibreOffice is continuation of the OpenOffice.org project. This update replaces the...

openSUSE Security Update : libxml2 (openSUSE-SU-2012:0975-1)

Fixed an integer overflow in libxml2 which could lead to crashes or potential code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-501. The text description of this...

openSUSE Security Update : xen-201105 (openSUSE-SU-2011:0578-1)

Collective May/2011 update for Xen Xen : - 675363 - Random lockups with kernel-xen. Possibly graphics related. - 679344 - Xen: multi-vCPU pv guest may crash host - 681044 - update xenpaging.autostart.patch - 681302 - xm create -x returns 'ImportError: No module named ext' - 688473 - potential...

openSUSE Security Update : libvpx (openSUSE-SU-2012:0759-1)

A buffer overread was fixed in libvpx which could lead to crashes of applications using libvpx. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-331. The text description of this...

openSUSE Security Update : wireshark (openSUSE-SU-2014:0017-1)

update to 1.10.5 + bugs fixed : - Wireshark stops showing new packets but dumpcap keeps writing them to the temp file. - Wireshark 1.10.4 shuts down when promiscuous mode is unchecked. - Homeplug dissector bug: STATUSACCESSVIOLATION: dissector accessed an invalid memory address. - update to...

openSUSE Security Update : freetype2 (openSUSE-SU-2011:0361-1)

Specially crafted font files could crash applications that use freetype2 to render the fonts CVE-2010-3814, CVE-2010-3855. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update freetype2-4080. The...

openSUSE Security Update : libvirt (openSUSE-SU-2012:0991-1)

libvirt was updated to fix a remote denial of service which could lead to crashes in virtd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-514. The text description of this plug...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:0899-1)

MozillaFirefox was updated to 14.0.1 to fix various bugs and security issues. Following security issues were fixed: MFSA 2012-42: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed...

Stable Channel Update

The Stable Channel has been updated to 35.0.1916.153 for Windows, Mac and Linux. This release contains a Flash Player update. Security Fixes and Rewards This update includes 4 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interestin...

OpenSSL 0.9.8 < 0.9.8za Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 0.9.8za. It is, therefore, affected by multiple vulnerabilities as referenced in the 0.9.8za advisory. - The dtls1clearqueues function in ssl/d1lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data...

FreeBSD-SA-14:14.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:14.openssl Security Advisory The FreeBSD Project Topic: OpenSSL multiple vulnerabilities Category: contrib Module: openssl Announced: 2014-06-05 Affects: All...

Apple fixes 2 2 a Safari vulnerability-vulnerability warning-the black bar safety net

5 on 2 2nd, Apple released a about the Safari patch, which fixes the 2 2 vulnerability these vulnerabilities could cause code execution or a browser crash. These vulnerabilities affect OS X Mavericks 10.9 under Safari 7.0.4 and OS X Mountain Lion 10.8. Under the Safari 6.1.4 on. When a user brows...

Vulnerabilities in HVM MSI injection

ISSUE DESCRIPTION The implementation of the HVM control operation HVMOPinjectmsi, while checking whether a particular IRQ was already set up in the necessary way, fails to properly check all respective conditions. In particular it doesn't check the returned pointer for being non-NULL before de-...

MGASA-2014-0247 Updated libtasn1 packages fix CVE-2014-3467-9

Updated libtasn1 packages fix security vulnerabilities: Multiple buffer boundary check issues were discovered in libtasn1 library, causing it to read beyond the boundary of an allocated buffer. An untrusted ASN.1 input could cause an application using the library to crash CVE-2014-3467. It was...

HP iLO DoS

Device crashes on request with Hearbleed exploitation demonstration...

MySQL User Defined Function Detected

Binary data 8218.prm...

Microsoft Excel Buffer Overrun in ToolbarDef Buffer Overflow - Ver2 (CVE-2011-0097)

A buffer overflow vulnerability has been reported in Microsoft Excel. An attacker could exploit this vulnerability a crafted 400h substream in an Excel file, which triggers a stack-based buffer overflow. Successful exploitation of this vulnerability could allow a remote attacker to execute...

Apple QuickTime QTVR QTVRStringAtom Parsing Buffer Overflow - Ver2 (CVE-2012-0667)

A buffer overflow vulnerability has been reported in Apple QuickTime. The vulnerability is due to a signedness error when processing a specially crafted QTVR string. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cau...

Altnet Download Manager ActiveX Buffer Overflow - Ver2 (CVE-2007-5217)

A buffer overflow vulnerability has been reported in Altnet Download Manager. An attacker could exploit this vulnerability a long argument to the Install method. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...

GIMP XWD File Handling Stack Buffer Overflow - Ver2 (CVE-2012-5576)

A buffer overflow vulnerability has been reported in GNU Image Manipulation Program GIMP. The vulnerability is due to insufficient validation of certain fields while parsing XWD files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...