PT-2014-1031

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 9 through 11 Description The issue is related to memory handling errors, allowing an attacker to execute arbitrary code or cause a denial of service via a specially crafted website. This is due to incorrect access to...

Microsoft Office Excel SerAuxTrend Record Remote Code Execution (MS11-045) - Ver2 (CVE-2011-1274)

This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute arbitrary code. Successful exploitation of this vulnerabilit...

Microsoft Office Excel Scenario Record Buffer Overflow (MS11-045) - Ver2 (CVE-2011-1275)

Microsoft Excel is a popular spreadsheet application. This is a remote code execution vulnerability. When Microsoft Excel validates record information upon opening a specially crafted Excel file, a memory handling error may corrupt system memory in such a way that an attacker could execute...

Microsoft Office RTF File listid Use-After-Free - Ver2 (CVE-2012-2528)

A use-after-free vulnerability has been reported in Microsoft Office Word. The vulnerability is due to a memory handling error while parsing specially crafted RTF Rich Text Format files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...

PT-2014-1141

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to memory handling errors, allowing an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory. This...

PT-2014-1144

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to memory handling errors, allowing an attacker to execute arbitrary code due to incorrect access to objects in memory, in the context of the current user...

USN-2138-1: Linux kernel vulnerabilities

Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker could exploit this error to discover the original MAC address after a spoofing atack. CVE-2013-4579 Andrew Honig reported a flaw in the Linux Kernel's kvmvmioctlcreatevcpu function ...

Microsoft Excel RealTime Date Record Parsing Buffer Overflow - Ver2 (CVE-2011-0101)

A buffer overflow vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to a memory handling error in Microsoft Office Excel during validation of record information while parsing a specially crafted Excel file. A remote attacker could exploit this vulnerability by...

PT-2014-1032

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to memory handling errors, allowing an attacker to execute arbitrary code or cause a denial of service using a specially crafted website. This is due to imprope...

CVE-2013-2190

The translatehierarchyevent function in x11/clutter-device-manager-xi2.c in Clutter, when resuming the system, does not properly handle XIQueryDevice errors when a device has "disappeared," which causes the gnome-shell to crash and allows physically proximate attackers to access the previous...

Telnet-Ftp Server Directory Traversal Vulnerability

The host is running Telnet-Ftp server and is prone to directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: gbtelnetftpserverdirtravvun.nasl 6086 2017-05-09 09:03:30Z teissa $ Telnet-Ftp Server Directory Traversal Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2013...

Mozilla Firefox Multiple Vulnerabilities -01 Apr13 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvuln01apr13win.nasl 6086 2017-05-09 09:03:30Z teissa $ Mozilla Firefox Multiple Vulnerabilities -01 Apr13 Windows Authors: Thanga Prakash S Copyright: Copyrigh...

DEBIAN-CVE-2013-1582

The dissectclnp function in epan/dissectors/packet-clnp.c in the CLNP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly manage an offset variable, which allows remote attackers to cause a denial of service infinite loop or application crash via a malformed packet...

AIX 6.1 TL 6 : bind9 (IV11743)

An as-yet unidentified network event caused BIND 9 resolvers to cache an invalid record, subsequent queries for which could crash the resolvers with an assertion failure. Furthermore, AIX BIND 9.4.1 is affected by the following three security vulnerabilities: CVE-2010-0382 - ISC BIND...

AIX 5.3 TL 0 : iostat (IZ22350)

The iostat command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/bin/iostat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 5.2 TL 0 : lsmcode (IZ15276)

The lsmcode command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/sbin/lsmcode. %NASLMINLEVEL 70300 C Tenable Network Security,...

MS12-059: Buffer Overflow in Microsoft Visio and Visio Viewer Could Allow Remote Code Execution (2733918)

The remote host contains a version of Microsoft Visio or Visio Viewer that is affected by a buffer overflow vulnerability. A memory handling error exists when parsing specially crafted DFX files. A remote attacker could exploit these issues by tricking a user into opening a specially crafted...

NSS parsing errors with zero length items — Mozilla

Security researcher Kaspar Brand found a flaw in how the Network Security Services NSS ASN.1 decoder handles zero length items. Effects of this issue depend on the field. One known symptom is an unexploitable crash in handling OCSP responses. NSS also mishandles zero-length basic constraints,...

CVE-2012-0769: Undefined Security Weakness

Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x does not properly handle integers, which allows attackers to obtain sensitive information via unspecified...

Microsoft Internet Explorer Cache Objects History Information Disclosure Vulnerability

The host is installed with Internet Explorer and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmsiehistoryinfodiscvuln.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Cache Objects History Information Disclosure Vulnerability Authors:...