iTunes < 9.2 Multiple Vulnerabilities

Binary data 5573.prm...

Apple iTunes < 9.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.2. As such, it may be affected by multiple vulnerabilities : - A heap-based buffer overflow in the handling of images with an embedded ColorSync profile may lead to an application crash or arbitrary code execution...

FreeBSD : tiff -- Multiple integer overflows (8816bf3a-7929-11df-bcce-0018f3e2eb82)

Tielei Wang : Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large 1 width and 2 height values, which triggers a heap-based buffer overflow in the a...

CVE-2010-2167

Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed 1 GIF or 2 JPEG data...

CVE-2010-2167

Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed 1 GIF or 2 JPEG data...

CVE-2010-2167

CVE-2010-2167 is a vulnerability in Adobe Flash Player (before 9.0.277.0 and 10.x before 10.1.53.64) and Adobe AIR (before 2.0.2.12610) where heap-based overflows in GIF/JPEG data could lead to arbitrary code execution. The initial description specifies the vectors as malformed GIF/JPEG data, wit...

CVE-2010-2167

Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed 1 GIF or 2 JPEG data...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2010:0324-1)

This update of libtiff fixes several integer overflows that could lead to a corrupted heap memory. This bug can be exploited remotely with a crafted TIFF file to cause an application crash or probably to execute arbitrary code. CVE-2010-1411 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2010:0324-1)

This update of libtiff fixes several integer overflows that could lead to a corrupted heap memory. This bug can be exploited remotely with a crafted TIFF file to cause an application crash or probably to execute arbitrary code. CVE-2010-1411 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2010:0324-1)

This update of libtiff fixes several integer overflows that could lead to a corrupted heap memory. This bug can be exploited remotely with a crafted TIFF file to cause an application crash or probably to execute arbitrary code. CVE-2010-1411 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

flash-plugin: multiple security flaws (APSB10-14)

Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed 1 GIF or 2 JPEG data...

CVE-2010-1411

Multiple integer overflows in the Fax3SetupState function in tiffax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a...

flash-plugin: multiple security flaws (APSB10-14)

Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed 1 GIF or 2 JPEG data...

Mandriva Update for glibc MDVSA-2010:112 (glibc)

Check for the Version of glibc OpenVAS Vulnerability Test Mandriva Update for glibc MDVSA-2010:112 glibc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for glibc MDVSA-2010:111 (glibc)

Check for the Version of glibc OpenVAS Vulnerability Test Mandriva Update for glibc MDVSA-2010:111 glibc Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Debian DSA-2058-1 : glibc, eglibc - multiple vulnerabilities

Several vulnerabilities have been discovered in the GNU C Library aka glibc and its derivatives. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1391, CVE-2009-4880, CVE-2009-4881 Maksymilian Arciemowicz discovered that the GNU C library did not...

[SECURITY] [DSA 2058-1] New glibc packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2058-1 [email protected] http://www.debian.org/security/ Aurelien Jarno June 10, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2058-1] New glibc packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2058-1 [email protected] http://www.debian.org/security/ Aurelien Jarno June 10, 2010 http://www.debian.org/security/faq -...

Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

Mandriva Linux Security Advisory : glibc (MDVSA-2010:111)

Multiple vulnerabilities was discovered and fixed in glibc : Multiple integer overflows in the strfmon implementation in the GNU C Library aka glibc or libc6 2.10.1 and earlier allow context-dependent attackers to cause a denial of service memory consumption or application crash via a crafted...