690 matches found
March 2016 Microsoft Patch Tuesday Security Bulletins
Microsoft released a baker’s dozen worth of security bulletins on Tuesday, including five rated critical and two rated important that could result in remote code execution attacks against compromised machines. Two of the bulletins rated critical address flaws in Internet Explorer and Microsoft...
MS16-026: Security Update for Graphic Fonts to Address Remote Code Execution (3143148)
The remote Windows host is affected by multiple vulnerabilities in the Adobe Type Manager Library : - A denial of service vulnerability exists due to improper handling of OpenType fonts. A remote attacker can exploit this vulnerability by convincing a user to open a file or visit a website...
Cumulative Update for Windows 10: March 8, 2016
None None...
MS16-026: Description of the security update for graphic fonts: March 8, 2016
None None...
MS16-026: Security update for graphic fonts to address remote code execution: March 8, 2016
Resolves vulnerabilities in Windows that could allow remote code execution if an attacker either convinces a user to open a specially crafted document, or to visit a webpage that contains specially crafted embedded OpenType fonts.SummaryThis security update resolves vulnerabilities in Microsoft...
GTK+ Integer Overflow Vulnerability
GTK+ is a multi-platform toolkit for creating graphical user interfaces. An integer overflow vulnerability exists in versions of GTK+ prior to 3.9.8, which allows remote attackers to cause a denial of service via a large image file triggering a large memory allocation...
The vulnerabilities of the Autodesk Design Review software for applying electronic annotations allow a hacker to execute arbitrary code.
The multiple vulnerabilities of the Autodesk Design Review software for applying electronic annotations are caused by buffer overflows. Exploitation of these vulnerabilities could allow an attacker to execute arbitrary code remotely, using specially crafted RLE-encoded data in BMP and FLI files,...
The vulnerability of the Windows operating system allows a remote attacker to execute arbitrary code with privileges of the current user.
The Windows operating system contains a vulnerability related to the incorrect processing of specially crafted graphic files in the EMF format. Exploiting this vulnerability can allow an unauthorized intruder to execute arbitrary code with privileges of the current user...
The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the AddWeightedPathSegLists and SVGPathSegListSMILType::Interpolate functions in browsers like Firefox and Firefox ESR is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects on the system...
DSA-3392-1 freeimage - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3392-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : MozillaFirefox (openSUSE-2015-678)
MozillaFirefox was updated to version 41.0.2 to fix one security issue. This security issue was fixed : - CVE-2015-7184: Cross-origin restriction bypass using Fetch bsc950686. These non-security issues were fixed : - Fix a startup crash related to Yandex toolbar and Adblock Plus bmo1209124 - Fix...
GDK-PixBuf security vulnerabilities
Buffer overflow, integer overflow, on graphic formats processing...
Security update for MozillaFirefox (important)
MozillaFirefox was updated to version 41.0.2 to fix one security issue. This security issue was fixed: - CVE-2015-7184: Cross-origin restriction bypass using Fetch bsc950686. These non-security issues were fixed: Fix a startup crash related to Yandex toolbar and Adblock Plus bmo1209124 Fix...
Mango Automation 2.6.0 - Multiple Vulnerabilities
Mango Automation 2.6.0 - Multiple Vulnerabilities Mango Automation 2.6.0 CSRF File Upload And Arbitrary JSP Code Execution Vendor: Infinite Automation Systems Inc. Product web page: http://www.infiniteautomation.com/ Affected version: 2.5.2 and 2.6.0 beta build 327 Summary: Mango Automation is a...
Microsoft Office Malformed EPS File Vulnerability
Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A security vulnerability exists in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, which can be exploited by remote attackers to execute arbitrary code via a constructed EPS...
Security update for MozillaFirefox (important)
update to Firefox 40.0 bnc940806 Added protection against unwanted software downloads Suggested Tiles show sites of interest, based on categories from your recent browsing history Hello allows adding a link to conversations to provide context on what the conversation will be about New style for...
Microsoft Office Open Graphic Font Remote Code Execution Vulnerability
Microsoft Office is a Windows-based office software suite developed by Microsoft. Commonly used components are Word, Excel, Powerpoint and so on. A remote code execution vulnerability exists in the Microsoft Office Open Graphic font. Allows an attacker to execute arbitrary code in the context of ...
MicEnum - Mandatory Integrity Control Enumerator for Windows
In the context of the Microsoft Windows family of operating systems, Mandatory Integrity Control MIC is a core security feature introduced in Windows Vista and implemented in subsequent lines of Windows operating systems. It adds Integrity LevelsIL-based isolation to running processes and objects...
CVE-2015-2364
The graphics component in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application that...