CVE-2013-1861

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service crash via a crafted geometry feature that specifies a large number o...

MySQL 和 MariaDB Geometry 查询拒绝服务漏洞

BUGTRAQ ID: 58511 CVECAN ID: CVE-2013-1861 Oracle MySQL Server是一个小型关系型数据库管理系统。MariaDB 是一个采用Maria存储引擎的MySQL分支版本，是免费开源的数据库服务器。 MySQL和MariaDB在转换原始geometry对象的二进制字符串表达式为文本表达式时，MySQL的空间函数长度检查会产生溢出，造成应用崩溃。 0 MySQL AB MySQL 厂商补丁： MySQL AB -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mysql.com/...

Google SketchUp '.SKP' File Remote Code Execution Vulnerability (Windows)

This host is installed with Google SketchUp and is prone to to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglesketchupskpfilecodeexecvulnwin.nasl 5963 2017-04-18 09:02:14Z teissa $ Google SketchUp '.SKP' File Remote Code Execution Vulnerability Windows Authors:...

CVE-2011-2478

Google SketchUp before 8 does not properly handle edge geometry in SketchUp aka .SKP files, which allows remote attackers to execute arbitrary code via a crafted file...

CVE-2011-2478

Google SketchUp before 8 does not properly handle edge geometry in SketchUp aka .SKP files, which allows remote attackers to execute arbitrary code via a crafted file...

Fedora Update for kig FEDORA-2011-13417

Check for the Version of kig OpenVAS Vulnerability Test Fedora Update for kig FEDORA-2011-13417 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Google SketchUp < 8.0 SKP File Malformed Edge Geometry Handling Remote Code Execution

The version of Google SketchUp installed on the remote Windows host is earlier than 8.0. It thus reportedly fails to handle certain types of invalid geometry described in '.SKP' files and is affected by a buffer overflow vulnerability. An attacker can exploit this issue by providing a specially...

[SECURITY] Fedora 16 Update: kig-4.7.1-2.fc16

Interactive Geometry...

Fedora 15 : feh-1.14.1-1.fc15 (2011-8750)

Changes since 0.10.1 : - Bug fixes Make zoomdefault key work properly with --geometry Only create caption directory when actually writing out a caption. read directory contents sorted by filename instead of 'randomly' as returned by readdir by default. Thanks talisein! Show certain warnings in th...

CVE-2011-2600

The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of service system crash via vectors involving WebGL and 1 shader programs or 2 complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to...

Code injection

The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to cause a denial of service desktop hang via vectors involving WebGL and 1 shader programs or 2 complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to vis...

CVE-2011-2601

The GPU support functionality in Mac OS X does not properly restrict rendering time, which allows remote attackers to cause a denial of service desktop hang via vectors involving WebGL and 1 shader programs or 2 complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to vis...

CVE-2011-2600

The CVE-2011-2600 issue affects the GPU support in Windows XP, where rendering time is not properly restricted. This enables remote denial of service (system crash) via WebGL vectors using (1) shader programs or (2) complex 3D geometry, demonstrated by visiting lots-of-polys-example.html in the K...

kernel: xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1

The xfsfsgeometry function in fs/xfs/xfsfsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRYV1 ioctl call...

MySQL: crash when loading data into geometry function PolyFromWKB() (MySQL Bug#51875)

The Gislinestring::initfromwkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service server crash by calling the PolyFromWKB function with Well-Known Binary WKB data containing a crafted number of 1 line strings or 2 line points...

MySQL拒绝服务和客户端证书校验漏洞

MySQL是一款流行的数据库服务程序。 MySQL存在多个安全漏洞，恶意攻击者可以进行拒绝服务和伪造攻击。 -链接OpenSSL库的MySQL客户端包含的"vioverifycallback"函数存在错误，MySQL服务器如果使用深度为零的证书，攻击者可以进行中间人攻击。 -对在WHERE子句中包含子查询的"SELECT"缺少错误处理和指派一个SELECT结果给用户变量，这个结果可导致服务程序崩溃。 -当处理Geometry值作为第一个参数时"GeomFromWKB"函数不正确保留参数的空值标记，可导致服务程序崩溃。 MySQL 5.x MySQL...

[SECURITY] Fedora 7 Update: kdeedu-3.5.8-2.fc7

Educational/Edutainment applications, including: blinken: Simon Says Game kalzium: Periodic Table of Elements kanagram: Letter Order Game kbruch: Exercise Fractions keduca: Tests and Exams kgeography: Geography Trainer khangman: Hangman Game kig: Interactive Geometry kiten: Japanese Reference/Stu...