SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 3358 / 3361 / 3362)

This security update of the SUSE Linux Enterprise 11 GA kernel updates the kernel to 2.6.27.54 and fixes various security issues and other bugs. The following security issues were fixed : - Multiple integer signedness errors in net/rose/afrose.c in the Linux kernel allowed local users to cause a...

Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption

Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 5.5.1 R10584 or 5.5.1.10584 Tested on: Microsoft...

Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability

Summary REAKTOR 5 PLAYER is your free entry point to the award-winning and avant-garde audio world of REAKTOR 5 - the super-powerful modular sound studio that made Native Instruments famous. Description The NI's Reaktor 5 Player suffers from multiple file handling vulnerability when processing .e...

Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption

Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 5.5.1 R10584 or 5.5.1.10584 Tested on: Microsoft Windows XP Professional SP3 English Summary: REAKTOR 5 PLAYER is...

Mandriva Linux Security Advisory : cups (MDVSA-2010:232)

Multiple vulnerabilities were discovered and corrected in cups : Cross-site request forgery CSRF vulnerability in the web interface in CUPS, allows remote attackers to hijack the authentication of administrators for requests that change settings CVE-2010-0540. The WriteProlog function in texttops...

Integer overflow

Integer overflow in librpc.dll in portmap.exe aka the ISM Portmapper service in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server IDS 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a...

CVE-2010-4070

The CVE-2010-4070 issue is an Integer overflow in librpc.dll (portmap.exe) used by the ISM Portmapper service in IBM Informix Dynamic Server (IDS). The overflow occurs via a crafted parameter size and can lead to remote code execution or a denial of service (heap memory corruption). Affected IDS ...

PT-2010-5274

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server IDS versions 7.x through 7.31.xD10 IBM Informix Dynamic Server IDS versions 9.x through 9.40.xC9 IBM Informix Dynamic Server IDS versions 10.00 through 10.00.xC7 IBM Informix Dynamic Server IDS versions 11.10 throug...

Microsoft Internet Explorer 'mshtml.dll' Information Disclosure Vulnerability

This host is installed with Internet Explorer and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmsieinfodiscvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer 'mshtml.dll' Information Disclosure Vulnerability Authors: Sooraj KS...

SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6866)

Mozilla XUL Runner engine 1.9.0 was upgraded to version 1.9.0.8, fixing various bugs and security issues. The following security issues have been fixed : - Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some o...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6867)

Mozilla Firefox was upgraded to version 3.5.8, fixing various bugs and security issues. The following security issues have been fixed : - Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes...

SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 6776)

Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer overflow leads to heap memory corruption CVE-2009-4212. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

CVE-2010-3886

The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory...

Design/Logic Flaw

The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory...

CVE-2010-3886

The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory...

CVE-2010-3886

The CVE-2010-3886 issue affects Microsoft Internet Explorer (mshtml.dll), specifically the CTimeoutEventList::InsertIntoTimeoutList function. The vulnerability arises from using a pointer value as part of Timer ID generation for setTimeout/setInterval in VBScript and JScript, enabling information...

PT-2010-5140

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 8 Description The issue allows remote attackers to obtain sensitive information about the heap memory addresses used by an application. This is due to the CTimeoutEventList::InsertIntoTimeoutList function in Microso...

CVE-2010-3886: Exposure of Sensitive Information to an Unauthorized Actor

The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory...

CVE-2010-3736

Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service heap memory consumption by using a different code page than the database server...

Memory corruption

Memory leak in the Relational Data Services component in IBM DB2 UDB 9.5 before FP6a, when the connection concentrator is enabled, allows remote authenticated users to cause a denial of service heap memory consumption by using a different code page than the database server...