Mandriva Linux Security Advisory : libxml2 (MDVSA-2012:098)

A vulnerability has been discovered and corrected in libxml2 : An Off-by-one error in libxml2 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via unknown vectors CVE-2011-3102. The updated packages have been patched to correct thi...

Mandriva Update for libxml2 MDVSA-2012:098 (libxml2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-2913

Off-by-one error in the CSoundFile::ReadAMS function in src/loadams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service stack memory corruption and possibly execute arbitrary code via a crafted AMS file with a large number of samples...

DEBIAN-CVE-2011-2915

Off-by-one error in the CSoundFile::ReadAMS2 function in src/loadams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted AMS file with a large number of instruments...

CVE-2011-2914

CVE-2011-2914 affects libmodplug’s DSM file handling: Off-by-one in CSoundFile::ReadDSM (src/load_dms.cpp) before 0.8.8.4 may allow a remote attacker to cause memory corruption, leading to denial of service and potential arbitrary code execution via crafted DSM files with many samples. Public rep...

CVE-2011-2913

Off-by-one error in the CSoundFile::ReadAMS function in src/loadams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service stack memory corruption and possibly execute arbitrary code via a crafted AMS file with a large number of samples...

CVE-2011-2915: Undefined Security Weakness

Off-by-one error in the CSoundFile::ReadAMS2 function in src/loadams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted AMS file with a large number of instruments...

CVE-2011-2913: Undefined Security Weakness

Off-by-one error in the CSoundFile::ReadAMS function in src/loadams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service stack memory corruption and possibly execute arbitrary code via a crafted AMS file with a large number of samples...

CVE-2011-2914: Undefined Security Weakness

Off-by-one error in the CSoundFile::ReadDSM function in src/loaddms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a crafted DSM file with a large number of samples...

Ubuntu Update for libxml2 USN-1447-1

Ubuntu Update for Linux kernel vulnerabilities USN-1447-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14471.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libxml2 USN-1447-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2011-3102: Undefined Security Weakness

Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via unknown vectors...

CVE-2011-3102

Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via unknown vectors...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : thunderbird vulnerabilities (USN-1430-3)

USN-1430-1 fixed vulnerabilities in Firefox. This update provides the corresponding fixes for Thunderbird. Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory safety issues affecting...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID 380e8c56-8e32-11e1-9580-4061862b8c22 OpenVAS Vulnerability Test $ Description: Auto generated from VID 380e8c56-8e32-11e1-9580-4061862b8c22 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Firefox 10.0.x < 10.0.4 Multiple Vulnerabilities

The installed version of Firefox 10.0.x is potentially affected by the following security issues : - An off-by-one error exists in the 'OpenType Sanitizer' which can lead to out-bounds-reads and possible code execution. CVE-2011-3062 - Memory safety issues exist that could lead to arbitrary code...

Off-by-one error in OpenType Sanitizer — Mozilla

Mateusz Jurczyk of the Google Security Team discovered an off-by-one error in the OpenType Sanitizer using the Address Sanitizer tool. This can lead to an out-of-bounds read and execution of an uninitialized function pointer during parsing and possible remote code execution...

CVE-2011-3062

Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file...

CVE-2011-3062

Removed by vendor...

CVE-2011-3062: Incorrect Calculation

Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file...

PT-2012-1623

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 18.0.1025.142 Description The issue is caused by an off-by-one error in the OpenType Sanitizer, allowing remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted...