CVE-2010-1968

CVE-2010-1968 is a CSRF vulnerability in HP Insight Software Installer for Windows, fixed in version 6.1+. The flaw allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Affected software: HP Insight Software Installer for Windows prior to v6.1. The HP s...

CVE-2010-1970

HP Insight Software Installer for Windows (pre-6.1) is affected by CVE-2010-1970. The vulnerability allows local users to read or modify data and potentially gain privileges due to an unspecified flaw in the installer component. Affected product line is HP Insight Software Installer for Windows, ...

CVE-2010-1971

Cross-site request forgery CSRF vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1968...

Nuance OmniPage 16 Professional installs multiple vulnerable Microsoft runtime libraries

Nuance Communications, Inc. offer on their german web page http://www.nuance.de/kostenlose-ocr-software-test/download.asp a trial version of OmniPage 16 Professional for download. The installer OPPro16TD.exe a self-extracting RAR archive was published "Tue, 30 Jun 2009 14:38:28 GMT" according to...

SuSE9 Security Update : IBM Java 1.4.2 (YOU Patch Number 12621)

IBM Java 1.4.2 was updated to Version U13 FP 4 iFixes, to fix the SSL renegotiation flaw reported as CVE-2009-3555, and also SAP installer related bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Fedora Update for kdenetwork FEDORA-2010-6077

Check for the Version of kdenetwork OpenVAS Vulnerability Test Fedora Update for kdenetwork FEDORA-2010-6077 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2010-0532

Apple iTunes for Windows prior to version 9.1 is affected by a race-condition vulnerability in the installation package that can let a local user replace a file and gain SYSTEM privileges during install. Root cause: race condition during installation; impact: local privilege escalation. Remediati...

CSS Web Installer CSSWEBLib.Installer ActiveX InstallProduct1 Method Overflow

The CSS Web Installer ActiveX control, a component of the Authentium Command On Demand virus scanner, installed on the remote Windows host reportedly is affected by a buffer overflow involving the 'InstallProduct1' method, and possibly the 'InstallProduct' and 'InstallProduct2' methods as well. I...

Authentium Command On Demand ActiveX Control - Multiple Buffer Overflow Vulnerabilities

Authentium Command On Demand ActiveX Control - Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/38544/info The CSS Web Installer ActiveX control in Authentium Command On Demand Online scanner is prone to multiple buffer-overflow vulnerabilities. An attacker can...

Authentium Command On Demand ActiveX Control - Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/38544/info The CSS Web Installer ActiveX control in Authentium Command On Demand Online scanner is prone to multiple buffer-overflow vulnerabilities. An attacker can exploit these issues by enticing a victim to view a malicious webpage. Successful exploit...

Debian DSA-1901-1 : mediawiki1.7 - several vulnerabilities

Several vulnerabilities have been discovered in mediawiki1.7, a website engine for collaborative work. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5249 David Remahl discovered that mediawiki1.7 is prone to a cross-site scripting attack. -...

Mandriva Update for drakxtools MDVA-2010:062-1 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2010:062-1 drakxtools Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

Mandriva Update for drakxtools MDVA-2010:062-1 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2010:062-1 drakxtools Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

Stack overflow

Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arbitrary code via a long string in a malformed DSSETUPSERVICECMDUNINSTALL command to the...

CVE-2009-4643

Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arbitrary code via a long string in a malformed DSSETUPSERVICECMDUNINSTALL command to the...

Design/Logic Flaw

The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote...

CVE-2009-3735

The ActiveScan Installer ActiveX control in as2stubie.dll before 1.3.3.0 in PandaActiveScan Installer 2.0 in Panda ActiveScan downloads software in an as2guiie.cab archive located at an arbitrary URL, and does not verify the archive's digital signature before installation, which allows remote...

Mandriva Update for drakx-installer-stage2 MDVA-2010:020 (drakx-installer-stage2)

Check for the Version of drakx-installer-stage2 OpenVAS Vulnerability Test Mandriva Update for drakx-installer-stage2 MDVA-2010:020 drakx-installer-stage2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Mandriva Update for drakx-installer-stage2 MDVA-2010:020 (drakx-installer-stage2)

Check for the Version of drakx-installer-stage2 OpenVAS Vulnerability Test Mandriva Update for drakx-installer-stage2 MDVA-2010:020 drakx-installer-stage2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Nokia Application Installer 6.81.13.0 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =========================================================== Nokia Application Installer 6.81.13.0 DLL Hijacking Exploit ===========================================================...