SMI Handler Vulnerability in legacy IBM System x and IBM BladeCenter systems - US

Lenovo Security Advisory: LEN-25165 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6155 Summary Description: During an internal security review, a potential vulnerability was found in an SMI handler in certain legacy IBM System x and...

rdesktop Heap Buffer Overflow DoS

The vulnerability of the “rdpsndprocessping” function in the RDP client rdesktop implementation is related to reading data beyond the memory boundary. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Galaktika ERP arpc_Span Remote Procedure Call Memory Read

The vulnerability of the process handler for remote procedure calls in the “arpcSpan” module of the atlcore.dll library of the resource management system of the Galaktika ERP system is related to the lack of validation for the correctness of received requests. Exploiting this vulnerability allows...

Tencent Foxmail Command Injection Vulnerability

Tencent Foxmail is an e-mail client software of China Tencent Tencent. The software mainly provides e-mail sending and receiving functions based on Internet standards. A command injection vulnerability exists in the handling of URI handlers in Tencent Foxmail, which arises from the program failin...

JavaScript script handlers Internet Explorer Code Execution

The vulnerability of JavaScript script handlers in Internet Explorer browsers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

Android WLAN Component Code Execution

The vulnerability of the wmaunifiedbcntxstatuseventhandler function in the Android WLAN operating system from the CAF repository involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within a privileged proces...

Heap overflow

In the handler for the ioctl command VIDIOCMSMISPDUALHWLPMMODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a heap overread vulnerability exists...

KLA11082 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Firefox and Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, privilege escalation, spoof user interface, bypass security restrictions, obtain sensitive information and execute arbitrary code. Below is...

JVN#45928828: H2O vulnerable to HTTP header injection

H2O is an open source web server software. H2O contains an HTTP header injection vulnerability. Impact An HTTP response splitting attack may result in arbitrary cookie values. Solution Update the Software Update to the latest version according to the information provided by the developer. Product...

USN-2011-1: Libav vulnerabilities

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...

CVE-2010-0191

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."...

CVE-2010-0191

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."...

CVE-2010-0810: Undefined Security Weakness

The kernel in Microsoft Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, does not properly handle unspecified exceptions, which allows local users to cause a denial of service reboot via a crafted application, aka "Windows Kernel Exception Handler Vulnerability."...

Windows IE7 URI Handler command execution through Firefox

Added: 10/19/2007 CVE: CVE-2007-3896 BID: 25945 OSVDB: 41090 Background The shell32.dll library provides functions which handle interaction between Internet Explorer and the Windows shell. Problem The version of the shell32.dll library installed with Internet Explorer 7 does not properly validate...

Lynx: Arbitrary command execution

Background Lynx is a fully-featured WWW client for users running cursor-addressable, character-cell display devices such as vt100 terminals and terminal emulators. Description iDefense labs discovered a problem within the feature to execute local cgi-bin programs via the "lynxcgi:" URI handler. D...

TNFTPD Multiple Signal Handler Remote Superuser Privilege Escalation

Binary data 1854.prm...

Important: Red Hat Security Advisory: stunnel security update

Updated stunnel packages are now available. These updates correct a potential vulnerability in stunnel's signal handling. Stunnel is a wrapper for network connections. It can be used to tunnel an unencrypted network connection over a secure connection encrypted using SSL or TLS or to provide a...

CVE-2002-1438

The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option...

Important: Red Hat Security Advisory: gaim security update

Updated gaim packages are now available for Red Hat Linux Advanced Server. These updates fix a vulnerability in the default URL handler. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prio...