Scientific Linux Security Update : kdenetwork on SL7.x x86_64 (20141111)

A NULL pointer dereference flaw was found in the way LibVNCServer handled certain ClientCutText message. A remote attacker could use this flaw to crash the VNC server by sending a specially crafted ClientCutText message from a VNC client. CVE-2014-6053 A divide-by-zero flaw was found in the way...

Scientific Linux Security Update : libvncserver on SL6.x, SL7.x i386/x86_64 (20141111)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way screen sizes were handled by LibVNCServer. A malicious VNC server could use this flaw to cause a client to crash or, potentially, execute arbitrary code in the client. CVE-2014-6051 A NULL pointer dereference...

RedHat Update for libvncserver RHSA-2014:1826-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 / 7 : libvncserver (RHSA-2014:1826)

Updated libvncserver packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

RHEL 7 : kdenetwork (RHSA-2014:1827)

Updated kdenetwork packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

CentOS Update for libvncserver CESA-2014:1826 centos6

Check the version of libvncserver SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882078";...

libvncserver: server divide-by-zero flaw in scaling factor handling

A divide-by-zero flaw was found in the way LibVNCServer handled the scaling factor when it was set to "0". A remote attacker could use this flaw to crash the VNC server using a malicious VNC client...

Moderate: Red Hat Security Advisory: kdenetwork security update

Updated kdenetwork packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

libvncserver security update

CentOS Errata and Security Advisory CESA-2014:1826 Updated libvncserver packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS ba...

libvncserver security update

0.9.7-7.1 - Fix CVE-2014-6051 integer overflow in screen size handling bug 1157668 - Fix CVE-2014-6052 NULL pointer dereference in framebuffer setup bug 1157668 - Fix CVE-2014-6053 NULL pointer dereference in ClientCutText message handling bug 1157668 - Fix CVE-2014-6054 server divide-by-zero in...

CVE-2014-6054

The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service divide-by-zero error and server crash via a zero value in the scaling factor in a 1 PalmVNCSetScaleFactor or 2 SetScale message...

Denial of service

The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service divide-by-zero error and server crash via a zero value in the scaling factor in a 1 PalmVNCSetScaleFactor or 2 SetScale message...

CVE-2014-6054

CVE-2014-6054 affects LibVNCServer: rfbProcessClientNormalMessage handles the scaling factor and can crash the server via a division-by-zero when the factor is 0. This is a remote-denial-of-service condition. Connected advisories (Debian, CentOS/RHEL, Mageia, Arch Linux, Gentoo) report fixes via ...

RHEL 6 : MRG (RHSA-2012:1491)

Updated kernel-rt packages that fix several security issues and multiple bugs are now available for Red Hat Enterprise MRG 2.2. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Facebook Founder Wants to Make Internet Availability as Universal as 911 Emergency Service

Facebook founder Mark Zuckerberg has a dream to make Internet access available to everyone across the world - Zuckerberg argues Internet should be a service as essential as of 911 in the case of an emergency. In a blog post published Monday in The Wall Street Journal, founder of the social...

Foxit Reader 5.4.3.0920 Crash PoC

No description provided by source. Title : Foxit Reader suffers from Division By Zero Version : 5.4.3.0920 Date : 2012-09-28 Vendor : http://www.foxitsoftware.com/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 Bug : ---- division by zero vulnerabilit...

Microsoft Internet Explorer 11 - WeakMap Integer Divide-by-Zero

No description provided by source. !-- Exploit title: Microsoft Internet Explorer 11 - WeakMap Integer divide-by-zero DoS Date: 29.05.2014 Vulnerable version: 11 Tested on: Windows 7/8 Author: Pawel Wylecial http://h0wl.pl @h0wlu -- html script var a = new WeakMap; a.pushnew WeakMap; a1.seta0, a1...

Bochs 2.3 - Buffer Overflow and Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/24246/info Bochs is prone to a heap-based buffer-overflow issue and a denial-of-service issue. The buffer-overflow issue occurs because the application fails to bounds-check user-supplied data before copying it into an...

X.Org X Window System Xserver 1.3 XRender Extension Divide by Zero Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23741/info X.Org X Window System Xserver is prone to a denial-of-service vulnerabilty because the software fails to properly handle exceptional conditions. Attackers who can connect to a vulnerable X server may exploit th...

openSUSE Security Update : libsndfile (openSUSE-SU-2011:0854-1)

An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. Additionally an divide by zero CVE-2009-4835 has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...