CVE-2011-3019

CVE-2011-3019 : A heap-based buffer overflow in Google Chrome prior to 17.0.963.56 allows remote attackers to cause denial of service or potentially other impact via a crafted Matroska (MKV) file. Affected product: Google Chrome. Root cause: heap-based overflow in MKV parsing. Impact: crash or po...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Medium: httpd

Issue Overview: It was discovered that the fix for CVE-2011-3368 did not completely address the problem. An attacker could bypass the fix and make a reverse proxy connect to an arbitrary server not directly accessible to the attacker by sending an HTTP version 0.9 request, or by using a...

Moderate: Red Hat Security Advisory: texlive security update

Updated texlive packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CVE-2012-0758

CVE-2012-0758 is tied to a heap-based buffer overflow in Adobe Shockwave Player prior to version 11.6.4.634. The vulnerability could allow arbitrary code execution and is listed as a critical issue (Windows and macOS). Affected versions include Shockwave Player 11.6.3.633 and earlier, with exploi...

CVE-2012-0848

Heap-based buffer overflow in the wssnddecodeframe function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a denial of service application crash via a crafted media file, related to an incorrect calculation, aka "wrong samples count."...

ZDI-12-021 : Adobe Reader BMP Resource Signedness Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-021 : Adobe Reader BMP Resource Signedness Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-021 February 8, 2012 - -- CVE ID: CVE-2011-4373 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...

Debian Security Advisory DSA 2388-1 (t1lib)

The remote host is missing an update to t1lib announced via advisory DSA 2388-1. OpenVAS Vulnerability Test $Id: deb23881.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2388-1 t1lib Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2394-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 2394-1. OpenVAS Vulnerability Test $Id: deb23941.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2394-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2011-3448

CoreMedia in Apple Mac OS X is affected by a heap-based buffer overflow prior to 10.7.3, exploitable via a crafted H.264 movie file and potentially enabling remote code execution or a denial of service. The issue is addressed by OS X 10.7.3 / Security Update 2012-001 (Mac OS X Lion 10.7.3 and rel...

Medium: t1lib

Issue Overview: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics AFM files. If a specially-crafted font file was opened by an application linked against t1lib, it could cause the application to crash or, potentially, execute arbitrary code with the...

CentOS 6 : glibc (CESA-2012:0058)

Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2012-0029

Heap-based buffer overflow in the processtxdesc function in the e1000 emulation hw/e1000.c in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service QEMU crash and possibly execute arbitrary code via crafted legacy mode packets...

CVE-2012-0029

Heap-based buffer overflow in the processtxdesc function in the e1000 emulation hw/e1000.c in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service QEMU crash and possibly execute arbitrary code via crafted legacy mode packets...

CVE-2012-0029

CVE-2012-0029 is confirmed in connected documents as a heap-based buffer overflow in the e1000 emulation (hw/e1000.c) of qemu-kvm 0.12 (and possibly other versions). The vulnerability affects guest OS users through crafted legacy mode packets, enabling denial of service (QEMU crash) and potential...

FreeBSD : acroread9 -- Multiple Vulnerabilities (fa2f386f-4814-11e1-89b4-001ec9578670)

The Adobe Security Team reports : An unspecified vulnerability in the U3D component allows remote attackers to execute arbitrary code or cause a denial of service attack via unknown vectors. A heap-based buffer overflow allows attackers to execute arbitrary code via unspecified vectors...

SuSE 11.1 Security Update : libxml2 (SAT Patch Number 5654)

A heap-based buffer overflow during decoding of entity references with overly long names has been fixed. CVE-2011-3919 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

DSA-2394-1 libxml2 - several

Bulletin has no description...

Google Chrome Multiple Vulnerabilities - Jan12 (Windows)

The host is installed with Google Chrome and is prone multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromenavigationentrymultvulnwin.nasl 6018 2017-04-24 09:02:24Z teissa $ Google Chrome Multiple Vulnerabilities - Jan12 Windows Authors: Antu Sanadi Copyright: Copyright c...

Google Chrome Multiple Vulnerabilities (Jan 2012) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...