Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability

Summary REAKTOR 5 PLAYER is your free entry point to the award-winning and avant-garde audio world of REAKTOR 5 - the super-powerful modular sound studio that made Native Instruments famous. Description The NI's Reaktor 5 Player suffers from multiple file handling vulnerability when processing .e...

Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption

Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 5.5.1 R10584 or 5.5.1.10584 Tested on: Microsoft Windows XP Professional SP3 English Summary: REAKTOR 5 PLAYER is...

Mandriva Linux Security Advisory : cups (MDVSA-2010:232)

Multiple vulnerabilities were discovered and corrected in cups : Cross-site request forgery CSRF vulnerability in the web interface in CUPS, allows remote attackers to hijack the authentication of administrators for requests that change settings CVE-2010-0540. The WriteProlog function in texttops...

Integer overflow

Integer overflow in librpc.dll in portmap.exe aka the ISM Portmapper service in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server IDS 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a...

CVE-2010-4070

The CVE-2010-4070 issue is an Integer overflow in librpc.dll (portmap.exe) used by the ISM Portmapper service in IBM Informix Dynamic Server (IDS). The overflow occurs via a crafted parameter size and can lead to remote code execution or a denial of service (heap memory corruption). Affected IDS ...

PT-2010-5274

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server IDS versions 7.x through 7.31.xD10 IBM Informix Dynamic Server IDS versions 9.x through 9.40.xC9 IBM Informix Dynamic Server IDS versions 10.00 through 10.00.xC7 IBM Informix Dynamic Server IDS versions 11.10 throug...

Microsoft Internet Explorer 'mshtml.dll' Information Disclosure Vulnerability

This host is installed with Internet Explorer and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmsieinfodiscvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer 'mshtml.dll' Information Disclosure Vulnerability Authors: Sooraj KS...

SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6866)

Mozilla XUL Runner engine 1.9.0 was upgraded to version 1.9.0.8, fixing various bugs and security issues. The following security issues have been fixed : - Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some o...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6867)

Mozilla Firefox was upgraded to version 3.5.8, fixing various bugs and security issues. The following security issues have been fixed : - Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes...

SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 6776)

Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer overflow leads to heap memory corruption CVE-2009-4212. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2010-3886

The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory...

Design/Logic Flaw

The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory...

CVE-2010-3886

The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory...

CVE-2010-3886

The CVE-2010-3886 issue affects Microsoft Internet Explorer (mshtml.dll), specifically the CTimeoutEventList::InsertIntoTimeoutList function. The vulnerability arises from using a pointer value as part of Timer ID generation for setTimeout/setInterval in VBScript and JScript, enabling information...

PT-2010-5140

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 8 Description The issue allows remote attackers to obtain sensitive information about the heap memory addresses used by an application. This is due to the CTimeoutEventList::InsertIntoTimeoutList function in Microso...

CVE-2010-3886: Exposure of Sensitive Information to an Unauthorized Actor

The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory...

CVE-2010-3736

Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service heap memory consumption by using a different code page than the database server...

Memory corruption

Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service heap memory consumption by using a different code page than the database server...

CVE-2010-3442

Multiple integer overflows in the sndctlnew function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow local users to cause a denial of service heap memory corruption or possibly have unspecified other impact via a crafted 1 SNDRVCTLIOCTLELEMADD or 2...

Adobe Shockwave Player Director File FFFFFF88 Record Integer Overflow (CVE-2010-2876; CVE-2010-4192)

Adobe Shockwave is a multimedia player that allows users to view interactive web content such as games, business presentations, entertainment, and advertisements from the web browser. It allows Adobe Director applications to be published on the Internet and viewed in a web browser on systems whic...