Debian DSA-2381-1 : squid3 - invalid memory deallocation

It was discovered that the IPv6 support code in Squid does not properly handle certain DNS responses, resulting in deallocation of an invalid pointer and a daemon crash. The squid package and the version of Squid 3 shipped in lenny lack IPv6 support and are not affected by this issue. %NASLMINLEV...

DSA-2381-1 squid3 - invalid memory deallocation

Bulletin has no description...

libxml2: Crash (stack frame overflow or NULL pointer dereference) by traversal of XPath axis

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service application crash via a...

MetaServer RT 3.2.1.450 - Multiple Vulnerabilities

MetaServer RT 3.2.1.450 - Multiple Vulnerabilities Luigi Auriemma Application: MetaServer RT http://www.traderssoft.com/ts/msrt/ Versions: = 3.2.1.450 Platforms: Windows Bugs: A heap overflow B various Denials of Service Exploitation: remote Date: 19 Sep 2011 Author: Luigi Auriemma e-mail:...

Opera Browser 'SELECT' HTML Tag Remote Memory Corruption Vulnerability (Windows)

The host is installed with Opera browser and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gboperamemcorrvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Opera Browser 'SELECT' HTML Tag Remote Memory Corruption Vulnerability Windows Authors: Madhuri D Copyright:...

CVE-2011-1323

Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service device reboot via a crafted option that triggers...

CVE-2011-1552

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service application crash via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764...

Integer overflow

Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service application crash via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid...

CVE-2011-1553

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service application crash via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different...

Google Chrome < 10.0.648.127 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 10.0.648.127. Such versions are reportedly affected by multiple vulnerabilities : - It may be possible to navigate or close the top location in a sandboxed frame. Issue 42574, 42765 - A cross-origin error message leak exist...

Google Chrome < 10.0.648.127 Multiple Vulnerabilities

Binary data 5812.pasl...

Debian Security Advisory DSA 2162-1 (openssl)

The remote host is missing an update to openssl announced via advisory DSA 2162-1. OpenVAS Vulnerability Test $Id: deb21621.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2162-1 openssl Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Ubuntu Update for openssl vulnerability USN-1064-1

Ubuntu Update for Linux kernel vulnerabilities USN-1064-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10641.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for openssl vulnerability USN-1064-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

[SECURITY] [DSA 2162-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2162-1 [email protected] http://www.debian.org/security/ Nico Golde February 14, 2011 http://www.debian.org/security/faq -...

Vulnerabilities in GDI Could Allow Remote Code Execution (925902)

This host is missing a critical security update according to Microsoft Bulletin MS07-017. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Chrome multiple vulnerabilities - November 10(Linux)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov10lin.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - November 10Linux Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Google Chrome Multiple Vulnerabilities (Nov 2010) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 7.0.517.44 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 7.0.517.44. Such versions are reportedly affected by multiple vulnerabilities : - A use-after-free error exists in text editing. Issue 51602 - A memory corruption error exists relating to enormous text area. Issue 55257 - A...

Google Chrome < 7.0.517.44 Multiple Vulnerabilities

Binary data 5698.pasl...

CVE-2010-4057

solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service invalid memory access and daemon crash via ...