GLSA-201206-19 : NVIDIA Drivers: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201206-19 NVIDIA Drivers: Privilege escalation A vulnerability has been found in the way NVIDIA drivers handle read/write access to GPU device nodes, allowing access to arbitrary system memory locations. NOTE: Exposure to this...

CVE-2011-1021

drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custommethod file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347...

CVE-2011-2707

The ptracesetxregs function in arch/xtensa/kernel/ptrace.c in the Linux kernel before 3.1 does not validate user-space pointers, which allows local users to obtain sensitive information from kernel memory locations via a crafted PTRACESETXTREGS request...

CVE-2012-0946

The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...

CVE-2012-0946

The CVE-2012-0946 issue affects the NVIDIA UNIX driver (pre-295.40). The vulnerability arises from how the driver handles read/write access to GPU device nodes, enabling local users to access arbitrary system memory locations. This can lead to local privilege escalation or arbitrary memory disclo...

CVE-2012-0946

The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-node read/write privileges...

CVE-2012-0012

Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."...

Information disclosure

Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka "Null Byte Information Disclosure Vulnerability."...

Cross site request forgery (csrf)

miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 aka TIA portal before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle UR...

Mandriva Linux Security Advisory : t1lib (MDVSA-2012:004)

Multiple vulnerabilities has been found and corrected in t1lib : A heap-based buffer overflow flaw was found in the way AFM font file parser, used for rendering of DVI files, in GNOME evince document viewer and other products, processed line tokens from the given input stream. A remote attacker...

Mandriva Linux Security Advisory : php (MDVSA-2011:197)

Multiple vulnerabilities has been discovered and corrected in php : Integer overflow in the exifprocessIFDTAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via ...

CVE-2011-3179

The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command...

CVE-2011-3179

CVE-2011-3179 affects Novell Messenger Server (formerly GroupWise Messenger): versions 2.1 and 2.2.x prior to 2.2.1, and GroupWise Messenger 2.04 and earlier, are vulnerable to an information-disclosure flaw that allows a remote attacker to read arbitrary memory locations via a crafted command. T...

CVE-2011-4566

CVE-2011-4566 is an integer overflow in the exif extension (exif_process_IFD_TAG) of PHP, triggered on 32‑bit platforms by a crafted EXIF header in a JPEG. This allows remote attackers to read arbitrary memory or cause a denial of service. The CVE is acknowledged in multiple advisories (Debian, C...

Novell Messenger Server < 2.2.1 Memory Information Disclosure

Binary data 6057.prm...

CVE-2011-3220

QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file...

CVE-2011-3220

QuickTime in Apple Mac OS X before 10.7.2 does not properly process URL data handlers in movie files, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file...

Ubuntu Update for linux-mvl-dove USN-1159-1

Ubuntu Update for Linux kernel vulnerabilities USN-1159-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11591.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-mvl-dove USN-1159-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

CVE-2011-1552

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service application crash via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764...

CVE-2011-1416

The Research In Motion RIM BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of memory locations via unknown vectors, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011...