Debian DSA-2528-1 : icedove - several vulnerabilities

Several vulnerabilities were discovered in Icedove, Debian's version of the Mozilla Thunderbird mail and news client. - CVE-2012-1948 Multiple unspecified vulnerabilities in the browser engine were fixed. - CVE-2012-1950 The underlying browser engine allows address bar spoofing through...

CVE-2012-1015

The kdchandleprotectednegotiation function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute...

CVE-2012-1015

The kdchandleprotectednegotiation function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x, 1.9.x before 1.9.5, and 1.10.x before 1.10.3 attempts to calculate a checksum before verifying that the key type is appropriate for a checksum, which allows remote attackers to execute...

Mandriva Update for gnutls MDVSA-2012:040 (gnutls)

Check for the Version of gnutls OpenVAS Vulnerability Test Mandriva Update for gnutls MDVSA-2012:040 gnutls Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for libtasn1 MDVSA-2012:039 (libtasn1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for libtasn1 MDVSA-2012:039 (libtasn1)

Check for the Version of libtasn1 OpenVAS Vulnerability Test Mandriva Update for libtasn1 MDVSA-2012:039 libtasn1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

PT-2012-1074

Name of the Vulnerable Software and Affected Versions krb5 versions 1.8.x through 1.9.x before 1.9.5 krb5 versions 1.10.x before 1.10.3 krb5-1.9 versions krb5-workstation-1.9 versions krb5-debuginfo-1.9 versions krb5-libs-1.9 versions krb5-devel-1.9 versions krb5-server-1.9 versions...

CVE-2012-1954

Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service heap memory...

Design/Logic Flaw

Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service heap memory...

CVE-2012-1954

Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service heap memory...

CVE-2012-1951

Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service heap...

CVE-2012-1951

CVE-2012-1951 is an actual security issue described in the connected MiracleLinux AXSA:2012-874 advisory as a Use-after-free in Mozilla Firefox 4.x–13.0 (and Firefox ESR 10.x before 10.0.6) affecting nsSMILTimeValueSpec::IsEventBased, with Thunderbird 5.0–13.0 and SeaMonkey before 2.11 also impli...

PT-2012-3681

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 13.0 Firefox ESR versions 10.x before 10.0.6 Thunderbird versions 5.0 through 13.0 Thunderbird ESR versions 10.x before 10.0.6 SeaMonkey versions prior to 2.11 Description The issue is related to a...

CVE-2012-1951

Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 allows remote attackers to cause a denial of service heap...

CVE-2012-3890

The inmod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a .IT file...

CVE-2012-3890

The CVE-2012-3890 issue affects Winamp prior to version 5.63, due to a flaw in the in_mod.dll when parsing Impulse Tracker (.it) files, allowing remote attackers to trigger heap memory corruption and potentially other impacts. Microsoft’s advisory MSVR12-011 notes multiple vulnerabilities in Winamp

CVE-2012-3890

The inmod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a .IT file...

CVE-2012-3890: Improper Restriction of Operations within the Bounds of a Memory Buffer

The inmod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via a .IT file...

PT-2012-5064

Name of the Vulnerable Software and Affected Versions Winamp versions prior to 5.63 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via a .IT file, due to heap memory corruption in the in mod plugin. Recommendations For versions prior to...

SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 8066)

This update of GnuTLS fixes multiple vulnerabilities : - remote attackers could cause a denial of service heap memory corruption and application crash via an issue in the asn1getlengthder function. CVE-2012-1569 - crafted GenericBlockCipher structures allow remote attackers to cause a denial of...