Updated Firefox, Thunderbird & sqlite3 packages fix security vulnerabilities

Updated firefox, thunderbird, and sqlite3 packages fix security vulnerabilities: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of...

Mandriva Linux Security Advisory : sqlite3 (MDVSA-2015:217)

Multiple vulnerabilities has been found and corrected in sqlite3 : SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have...

CVE-2015-3415

The CVE-2015-3415 entry concerns SQLite: the sqlite3VdbeExec function in vdbe.c does not correctly implement comparison operators, enabling context-dependent attackers to trigger a DoS (invalid free) or other unspecified impacts via a crafted CHECK clause (e.g., CHECK(0&O>O) in a CREATE TABLE)...

FreeBSD : sqlite -- multiple vulnerabilities (dec3164f-3121-45ef-af18-bb113ac5082f)

NVD reports : SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service uninitialized memory access and application crash or possibly have unspecified other impact via a crafted COLLATE clause, ...

glibc: Invalid-free when using getaddrinfo()

An invalid free flaw was found in glibc's getaddrinfo function when used with the AIIDN flag. A remote attacker able to make an application call this function could use this flaw to execute arbitrary code with the permissions of the user running the application. Note that this flaw only affected...

Microsoft Windows KTM Invalid Free with Reused Transaction GUID (MS10-047)

No description provided by source. Microsoft Windows KTM Invalid Free with reused transaction GUID ---------------------------------------------------------------------------- CVE-2010-1889 The Kernel Transaction Manager ktm was introduced in Windows Vista and has been included in subsequent...

openSUSE Security Update : libfreetype6 (openSUSE-SU-2010:0549-1)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - CVE-2010-1797: stack-based buffer overflow while processing CFF opcodes - CVE-2010-2497: integer underflow - CVE-2010-2498: invalid free -...

wireshark: Invalid free in the DCP ETSI dissector (wnpa-sec-2013-41)

The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service application crash via a crafted...

Command injection

The libxlDomainGetNumaParameters function in the libxl driver libxl/libxldriver.c in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service invalid free operation and crash or possibly execute arbitrary code via an inactive domain to t...

Fedora 19 : libvirt-1.0.5.6-2.fc19 (2013-17618)

Fix snapshot restore when VM has disabled usb support bz 1011520 - Rebased to version 1.0.5.6 - Fix blockjobinfo python API bz 999077 - CVE-2013-4311: Insecure polkit usage bz 1009539, bz 1005332 - CVE-2013-4296: Invalid free memory stats bz 1006173, bz 1009667 - CVE-2013-4291: Supplementary...

Fedora 18 : libvirt-0.10.2.8-1.fc18 (2013-17305)

Rebased to version 0.10.2.8 - CVE-2013-4311: Insecure polkit usage bz 1009539, bz 1005332 - CVE-2013-4296: Invalid free memory stats bz 1006173, bz 1009667 - CVE-2013-4291: Supplementary groups handling bz 1006509, bz 1006511 - Fix LXC container creation if selinux disabled bz 977114 - Fix virsh...

CentOS Update for libvirt CESA-2013:1272 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for kernel CESA-2013:1166 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 4 : firefox (ELSA-2010-0558)

From Red Hat Security Advisory 2010:0558 : Updated firefox packages that fix a security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

CVE-2013-2864

CVE-2013-2864 affects Google Chrome prior to version 27.0.1453.110, with the PDF functionality being the vector. The issue can cause a denial of service via an invalid free operation and may have unspecified other impact. The NVD assigns a CVSSv2 base score of 7.5 (HIGH) with network attack vecto...

Debian Security Advisory DSA 2577-1 (libssh)

The remote host is missing an update to libssh announced via advisory DSA 2577-1. OpenVAS Vulnerability Test $Id: deb25771.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2577-1 libssh Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

DSA-2577-1 libssh - several

Bulletin has no description...

CVE-2012-3403

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."...

Heap overflow

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."...

CVE-2012-3403

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."...