Asterisk Heap-Based Buffer Overflow in Skinny Channel Driver (AST-2012-005)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote attacker to crash the server, or possibly inject arbitrary code by sending repeated KEYPADBUTTONMESSAGE events over a Skinny channel ...

CVE-2012-0708

Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and 8.0.0 before 8.0.0.2 allows remote attackers to execute arbitrary code via a crafted web page that leverages a...

SuSE 11.1 Security Update : libtiff (SAT Patch Number 6106)

This update of tiff fixes an issue where specially crafted tiff files could have triggered an integer overflow which would have lead to a heap-based buffer overflow. CVE-2012-1173 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Microsoft Office Remote Code Execution Vulnerability (2639185)

This host is missing an important security update according to Microsoft Bulletin MS12-028. OpenVAS Vulnerability Test $Id: secpodms12-028.nasl 5912 2017-04-10 09:01:51Z teissa $ Microsoft Office Remote Code Execution Vulnerability 2639185 Authors: Madhuri D Copyright: Copyright c 2012 SecPod,...

CentOS 5 / 6 : libtiff (CESA-2012:0468)

Updated libtiff packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

WellinTech KingView Multiple Vulnerabilities

Overview Independent researchers Carlos Mario Penagos Hollman and Dillon Beresford identified multiple vulnerabilities in WellinTech’s KingView and a single vulnerability in WellinTech’s KingHistorian application. These vulnerabilities are exploitable remotely. WellinTech has created a patch and...

CVE-2012-0257

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA...

CVE-2012-0257

The CVE-2012-0257 issue is a heap-based buffer overflow in the WWCabFile ActiveX component used by Wonderware System Platform and several associated products (e.g., Wonderware Application Server 2012, Foxboro Control Software 3.1, InFusion CE/FE/SCADA 2.5, Wonderware Information Server 4.5, Arche...

CVE-2012-0258

The CVE-2012-0258 issue is a heap-based buffer overflow in the WWCabFile ActiveX Component used by Wonderware System Platform and related products (Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Informatio...

libzip: Multiple vulnerabilities

Background libzip is a library for manipulating zip archives. Description Two vulnerabilities have been found in the "zipreadcdir" function in zipopen.c of libzip: An incorrect loop construct, which could cause a heap-based buffer overflow CVE-2012-1162. An integer overflow, which may not restric...

CVE-2012-1836

Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression...

RedHat Update for libpng RHSA-2012:0407-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

VLC Media Player < 2.0.1 Multiple Vulnerabilities

The version of VLC media player installed on the remote host is earlier than 2.0.1. Such versions are affected by multiple vulnerabilities: - The function 'MMSOpen' in the MMS access plugin contains a boundary error that can allow a stack-based buffer overflow when maliciously crafted MMS streams...

Integer overflow

Integer signedness error in the db2dasrrm process in the DB2 Administration Server DAS in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow...

CVE-2012-1776

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Real RTSP stream...

CVE-2012-1776

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Real RTSP stream...

CVE-2012-1776

Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Real RTSP stream...

Samba 'AndX' Request Heap-Based Buffer Overflow

Binary data sambaandxheapoverflow.nbin...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID 2f5ff968-5829-11e1-8288-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID 2f5ff968-5829-11e1-8288-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

SuSE 10 Security Update : Samba (ZYPP Patch Number 7985)

This update of Samba fixes a heap-based buffer overflow that could be exploited by remote, unauthenticated attackers to crash the smbd daemon or potentially execute arbitrary code via specially crafted SMB AndX request packets. CVE-2012-0870 Also fixed two non security bugs : - Fix to handle doma...