23 matches found
EUVD-2016-7170
Malware in sbrugna...
EUVD-2010-2939
Malware in sbrugna...
Integer overflow
Integer truncation error in the amapalloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...
CVE-2016-6240
CVE-2016-6240 describes an integer truncation in OpenBSD 5.8/5.9’s amap_alloc kernel function, enabling local privilege escalation to kernel level via a large size value. The vulnerability affects the kernel space and is documented in NVD and OpenBSD errata pages; exploitation details are not pro...
IBM Domino 8.5.x < 8.5.3 Fix Pack 6 Interim Fix 4 GIF Code Execution
According to its banner, the version of IBM Domino formerly IBM Lotus Domino running on the remote host is 8.5.x prior to 8.5.3 Fix Pack 6 FP6 Interim Fix 4 IF4. It is, therefore, potentially affected by an integer truncation error when processing GIF files. A remote attacker, using a crafted GIF...
IBM Domino 8.5.x < 8.5.3 Fix Pack 6 Interim Fix 4 GIF Code Execution (credentialed check)
The version of IBM Domino formerly IBM Lotus Domino installed on the remote host is 8.5.x prior to 8.5.3 Fix Pack 6 FP6 Interim Fix 4 IF4. It is, therefore, potentially affected by an integer truncation error when processing GIF files. A remote attacker, using a crafted GIF file, could exploit th...
IBM Domino 9.0.x < 9.0.1 Fix Pack 3 Interim Fix 2 GIF Code Execution (credentialed check)
The version of IBM Domino formerly IBM Lotus Domino installed on the remote host is 9.0.x prior to 9.0.1 Fix Pack 3 FP3 Interim Fix 2 IF2. It is, therefore, potentially affected by an integer truncation error when processing GIF files. A remote attacker, using a crafted GIF file, could exploit th...
Thunderbird < 24.1 NSS and NSPR Multiple Vulnerabilities (Mac OS X)
The installed version of Thunderbird is earlier than 24.1.1 and is, therefore, potentially affected by the following vulnerabilities : - An error exists related to handling input greater than half the maximum size of the 'PRUint32' value. CVE-2013-1741 - An error exists in the 'NullCipher' functi...
SeaMonkey < 2.22.1 NSS and NSPR Multiple Vulnerabilities
The installed version of SeaMonkey is a version prior to 2.22.1 and is, therefore, potentially affected by the following vulnerabilities : - An error exists related to handling input greater than half the maximum size of the 'PRUint32' value. CVE-2013-1741 - An error exists in the 'NullCipher'...
Heap overflow
Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted TZNAME variable in a VCALENDAR attachment in an e-mail message, related to a...
Secunia Research: Novell GroupWise Internet Agent "TZNAME" Parsing Vulnerability
====================================================================== Secunia Research 27/09/2011 - Novell GroupWise Internet Agent "TZNAME" Parsing Vulnerability - ====================================================================== Table of Contents Affected...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (2393802)
This host is missing a critical security update according to Microsoft Bulletin MS11-011. OpenVAS Vulnerability Test $Id: secpodms11-011.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows Kernel Elevation of Privilege Vulnerability 2393802 Authors: Madhuri D Copyright: Copyright c 2011 SecPod...
Microsoft Windows Kernel Elevation of Privilege Vulnerability (2393802)
This host is missing a critical security update according to Microsoft Bulletin MS11-011. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2011-0682
CVE-2011-0682 is an Opera vulnerability caused by an integer truncation in opera.dll that can be triggered by an HTML form with a select element containing a large number of children. The issue could allow remote arbitrary code execution or memory corruption. Opera 11.01 addresses this vulnerabil...
Opera Closes Critical Security Flaw With Version 11.01
Opera has released a new version of its flagship browser, which, among other things, fixes a remotely exploitable critical vulnerability that was disclosed late last week. Opera 11.01 also includes some other stability upgrades. The new version of Opera for Windows has fixes for a total of five...
Critical Bug Found in Opera Browser
There is a critical vulnerability in the Opera browser that could be used by an attacker to execute arbitrary code on vulnerable machines. The bug affects the latest version of Opera running on Windows 7, as well as Windows XP SP3. The vulnerability surfaced Friday and it has been confirmed by...
CentOS Update for openoffice.org CESA-2010:0643 centos3 i386
Check for the Version of openoffice.org OpenVAS Vulnerability Test CentOS Update for openoffice.org CESA-2010:0643 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...
RedHat Update for openoffice.org RHSA-2010:0643-01
Check for the Version of openoffice.org OpenVAS Vulnerability Test RedHat Update for openoffice.org RHSA-2010:0643-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
CVE-2010-2935
simpress.bin in the Impress module in OpenOffice.org OOo 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PowerPoi...
Heap overflow
simpress.bin in the Impress module in OpenOffice.org OOo 2.x and 3.x before 3.3 does not properly handle integer values associated with dictionary property items, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PowerPoi...