VMSA-2011-0009.3 VMware hosted product updates, ESX patches and VI Client update resolve multiple security issues

The remote ESXi is missing one or more security related Updates from VMSA-2011-0009.3. Summary VMware hosted product updates, ESX patches and VI Client update resolve multiple security issues. Relevant releases VMware Workstation 7.1.3 and earlier VMware Player 3.1.3 and earlier VMware Fusion 3.1...

Gentoo Security Advisory GLSA 201201-10 (JasPer)

The remote host is missing updates announced in advisory GLSA 201201-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201201-10 (JasPer)

The remote host is missing updates announced in advisory GLSA 201201-10. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2011-3446

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

Code injection

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

CVE-2011-3446

Summary: CVE-2011-3446 affects Apple Type Services (ATS) in Mac OS X up to 10.7.3. The vulnerability stems from improper memory management for data-font files, enabling remote code execution or a denial of service when a crafted font is opened by Font Book. Affected product/component: Apple Mac O...

CVE-2011-3446

Apple Type Services ATS in Apple Mac OS X before 10.7.3 does not properly manage memory for data-font files, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted font that is accessed by Font Book...

[SECURITY] Fedora 15 Update: nspr-4.8.9-2.fc15

NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing and calendar time, basic memory management malloc and free and shared library linking...

CVE-2011-4528

Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service daemon crash via a crafted response...

BSD libc/regcomp(3) Memory Management / Recursion

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple BSD libc/regcomp3 Multiple Vulnerabilities Author: Maksymilian Arciemowicz http://www.netbsd.org/donations/ http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 05.10.2011 - - Pub.: 04.11.2011 CVE: CVE-2011-3336 Affected Software: - -...

CVE-2011-1998

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that was not properly initialized, aka "Jscript9.dll Remote Code Execution Vulnerability."...

Debian Security Advisory DSA 2296-1 (iceweasel)

The remote host is missing an update to iceweasel announced via advisory DSA 2296-1. OpenVAS Vulnerability Test $Id: deb22961.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2296-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

kernel: ksm: race between ksmd and exiting task

Race condition in the scangetnextrmapitem function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging KSM is enabled, allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via a crafted application...

[BSA-046] Security Update for icedove

Christoph Göhre uploaded new packages for icedove which fixed the following security problems: CVE-2011-0084 "regenrecht" discovered that incorrect pointer handling in the SVG processing code could lead to the execution of arbitrary code. CVE-2011-2378 "regenrecht" discovered that incorrect memor...

Debian DSA-2297-1 : icedove - several vulnerabilities

Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client. - CVE-2011-0084 'regenrecht' discovered that incorrect pointer handling in the SVG processing code could lead to the execution of arbitrary code. - CVE-2011-2378 'regenrecht'...

DSA-2296-1 iceweasel - several

Bulletin has no description...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 4884 / 4888 / 4889)

The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.43 and fixes various bugs and security issues. The following security issues were fixed : - The normal mmap paths all avoid creating a mapping where the pgoff inside the mapping could wrap around due to overflow. However, an...

JustSystems Ichitaro Memory Management Program Remote Heap Buffer Overflow Vulnerability

Description JustSystems Ichitaro is prone to a remote buffer-overflow vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

java security update

CentOS Errata and Security Advisory CESA-2011:0857 Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring Syst...

RedHat Update for java-1.6.0-openjdk RHSA-2011:0857-01

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.6.0-openjdk RHSA-2011:0857-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...