RHEL 6 : mesa (RHSA-2013:0897)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0897 advisory. - Mesa: Memory corruption OOB read/write on intel drivers CVE-2013-1872 - Mesa: Multiple integer overflows leading to heap-based bufer...

SuSE 11.2 Security Update : freetype2 (SAT Patch Number 7232)

This update fixes : - OOB access in bdffreefont and bdfparseglyphs CVE-2012-5668 / CVE-2012-5669 As well as the following non-security bugs : - bdf Savannah bug 37905. - src/bdf/bdflib.c bdfparsestart: Reset propssize' to zero in case of allocation error; this value gets used in a loop in - bdf F...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 8433)

This update fixes : - OOB access in bdffreefont CVE-2012-5668 As well as non-security bugs : - bdf Savannah bug 37905. o src/bdf/bdflib.c bdfparsestart: Reset propssize' to zero in case of allocation error; this value gets used in a loop in %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 138208 High CVE-2012-2900: Crash in Skia text rendering. Credit to Atte Kettunen of OUSPG. 147499 Critical CVE-2012-5108: Race condition in audio device handling. Credit to Atte Kettunen of OUSPG. 148692 Medium CVE-2012-5109: OOB read in ICU regex. Credit to Arthur...

RHEL 5 / 6 : ghostscript (RHSA-2012:1256)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1256 advisory. - ghostscript, argyllcms: Array index error leading to heap-based bufer OOB write CVE-2012-4405 Note that Nessus has not tested for this issue bu...

Mandriva Linux Security Advisory : mozilla (MDVSA-2012:110-1)

Security issues were identified and fixed in mozilla firefox and thunderbird : Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain...

qemu-kvm security and bug fix update

qemu-kvm-0.12.1.2-2.160.el61.2 - kvm-virtio-guard-against-negative-vq-notifies.patch bz717403 - Resolves: bz717403 qemu-kvm: OOB memory access caused by negative vq notifies rhel-6.1.z qemu-kvm-0.12.1.2-2.160.el61 - kvm-Fix-phys-memory-client-pass-guest-physical-address-n.patch bz701771 -...

Google Chrome 4.1 OOB Array Indexing Bug

Exploit for windows platform in category dos / poc ======================================== Google Chrome 4.1 OOB Array Indexing Bug ======================================== Author: Tobias Klein tk at trapkit.de Affected Software: Google Chrome = 4.1.249.1042 Build 42199 Remotely Exploitable: Yes...

Google Chrome 4.1 - Out-of-Bounds Array Indexing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Google Chrome OOB Array Indexing Bug Advisory ID: TKADV2010-004 Revision: 1.0 Release Date: 2010/03/31 Last Modified: 2010/03/31 Date Reported: 2010/03/21 Author: Tobias Klein tk at trapkit.de Affected Software: Google Chrome = 4.1.249.1042...

kernel security and bug fix update

2.6.9-67.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

Heimdal ftpd/tnftpd/lukemftpd signal handling race conditions

Problem with OOB data processing...

Multiple Vendor Out Of Band Data DoS (WinNuke)

It was possible to crash the remote host using the 'Winnuke' attack, that is to send an OOB message to this port. An attacker may use this flaw to make this host crash continuously, preventing the system from working properly. C Tenable Network Security, Inc. include"compat.inc"; if description...