CVE-2017-11762

This CVE (CVE-2017-11762) is a remote code execution vulnerability in the Microsoft Windows Graphics Component that is triggered by specially crafted embedded fonts. Affected products span Windows client and server lines listed in the CVE entry (e.g., Windows 7, 8.1, 10 variants, Server 2008/2012...

CVE-2017-11824

The CVE-2017-11824 entry describes an Elevation of Privilege in the Windows Graphics Component due to improper handling of objects in memory, allowing code execution with elevated privileges. The Connected documents (KB/MS updates) indicate this vulnerability is among a broader set addressed by c...

CVE-2017-11777

CVE-2017-11777 affects Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Enterprise Server 2016. It describes a cross-site scripting (XSS) vulnerability arising from how SharePoint Server sanitizes web requests, enabling an attacker to craft a request to an affected SharePoint server...

CVE-2017-11775

CVE-2017-11775 / CVE-2017-11777 / CVE-2017-11820 describe a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Enterprise Server 2013 SP1 and SharePoint Enterprise Server 2016. The issue stems from how SharePoint Server sanitizes web requests, allowing an attacker to craft a request...

EulerOS 2.0 SP1 : libxml2 (EulerOS-SA-2017-1237)

According to the version of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to...

Security update for dnsmasq (important)

This update for dnsmasq fixes the following security issues: - CVE-2017-14491: 2 byte heap based overflow. bsc1060354 - CVE-2017-14492: heap based overflow. bsc1060355 - CVE-2017-14493: stack based overflow. bsc1060360 - CVE-2017-14494: DHCP - info leak. bsc1060361 - CVE-2017-14495: DNS - OOM DoS...

Microsoft Exchange Server Multiple Vulnerabilities (KB4036108)

This host is missing an important security update according to Microsoft KB4036108 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SUSE-SU-2017:2443-1 Security update for Linux Kernel Live Patch 9 for SLE 12 SP1

This update for the Linux Kernel 3.12.67-606418 fixes several issues. The following security bugs were fixed: - CVE-2017-1000112: Prevent a race condition in net-packet code that could have been exploited by unprivileged users to gain root access bsc1052368...

CVE-2017-8629

CVE-2017-8629 affects Microsoft SharePoint Server 2013 SP1 and is an elevation of privilege vulnerability caused by improper sanitization of crafted web requests, enabling cross-site scripting and potential unauthorized actions in the user’s security context. Connected sources confirm the vulnera...

Remote Code Execution Vulnerability in Multiple Microsoft Products

Microsoft PowerPoint 2007 SP3 are products of Microsoft Corporation.Microsoft PowerPoint 2007 SP3 is a document presentation tool in the Office suite; SharePoint Server 2013 SP1 is an enterprise business collaboration platform; Office Web Apps 2010 SP2 is a Web-based office software suite. A remo...

Description of the Security Only update for the .NET Framework 4.5.2 for Windows 7 SP1, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2: September 12, 2017

Description of the Security Only update for the .NET Framework 4.5.2 for Windows 7 SP1, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2: September 12, 2017 View products that this article applies to. Summary This security update resolves a vulnerability in the Microsoft .NET Framework...

Description of the security update for Office 2013: September 12, 2017

Description of the security update for Office 2013: September 12, 2017 Summary There is a Microsoft Office update for defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV170015. Note To apply this security update, yo...

Description of the security update for PowerPoint 2013: September 12, 2017

Description of the security update for PowerPoint 2013: September 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

Security and Quality Rollup for the .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1: September 12, 2017

Security and Quality Rollup for the .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1: September 12, 2017 View products that this article applies to. Summary This security update resolves a vulnerability in the Microsoft .NET Framework that...

EulerOS 2.0 SP1 : glibc (EulerOS-SA-2017-1199)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack overflow vulnerability was found in nan functions that could cause applications, which process long strings with the nan function, to cra...

EulerOS 2.0 SP1 : gnutls (EulerOS-SA-2017-1203)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A double-free flaw was found in the way GnuTLS parsed certain X.509 certificates with Proxy Certificate Information extension. An attacker could...

EulerOS 2.0 SP1 : libsoup (EulerOS-SA-2017-1209)

According to the version of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A stack-based buffer overflow flaw was discovered within the HTTP processing of libsoup. A remote attacker could exploit this flaw to cause a cras...

EulerOS 2.0 SP1 : subversion (EulerOS-SA-2017-1175)

According to the version of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A shell command injection flaw related to the handling of 'svn+ssh' URLs has been discovered in Subversion. An attacker could use this flaw to...

EulerOS 2.0 SP1 : libtasn1 (EulerOS-SA-2017-1171)

According to the versions of the libtasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overflow flaw was found in the way the libtasn1 library decoded certain DER-encoded inputs. A specially crafted DER-encode...

EulerOS 2.0 SP1 : tomcat (EulerOS-SA-2017-1191)

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Realm implementations did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to...