SuSE 11.1 Security Update : freetype2 (SAT Patch Number 4089)

Specially crafted font files could crash applications that use freetype2 to render the fonts. CVE-2010-3814 / CVE-2010-3855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...

SuSE Update for acroread SUSE-SA:2011:011

Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2011:011 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

MS11-017: Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (2508062)

The remote host contains a version of the Remote Desktop client that incorrectly restricts the path used for loading external libraries. If an attacker can trick a user on the affected system into opening a specially crafted .rdp file located in the same network directory as a specially crafted...

SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7359)

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586...

Foxit Products ICC Parsing Integer Overflow Vulnerability

Foxit Products is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark CLDAP Dissector DOS

This module causes infinite recursion to occur within the CLDAP dissector by sending a specially crafted UDP packet. Module Options msf use auxiliary/dos/wireshark/cldap msf undefinedcldap show actions ...actions... msf undefinedcldap set ACTION msf undefinedcldap show options ...show and set...

VicFTPS 'LIST' Command Remote Denial of Service Vulnerability

VicFTPS is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Successfully exploiting this issue will allow an attacker to crash the affected application, denying further service to legitimate users. Arbitrary code execution may also be possible;...

Oracle Java XGetSamplePtrFromSnd Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within jsound!XGetSamplePtrFromSnd...

Adobe Flash Player Multiple Vulnerabilities (Feb 2011) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities (Feb 2011)

Adobe Shockwave Player is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

A-V Tronics InetServ POP3 Denial Of Service Vulnerability

A-V Tronics InetServ POP3 Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 7148)

Specially crafted ppt files could cause a heap-based buffer overflow in OpenOfficeorg Impress. Attackers could exploit that to crash OpenOfficeorg or potentially even execute arbitrary code. CVE-2010-2935 / CVE-2010-2936 This update also fixes numerous non-security bugs. Please refer to the packa...

SuSE 10 Security Update : XEmacs (ZYPP Patch Number 6413)

Specially crafted tiff, png and jpeg images could cause integer overflows in xemacs and possible system compromise. CVE-2009-2688 Additionally two non-security bugs were fixed that enable xeamcs to use the configured fonts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description...

Buffer overflow

Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a VideoSpirit project .visprj file containing a valitem element with a long "name" attribute. NOT...

Microsoft Active Directory Denial of Service Vulnerability (953235)

This host is missing a critical security update according to Microsoft Bulletin MS08-035. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cross-site Request Forgery (CSRF) in KaiBB

High-Tech Bridge SA Security Research Lab has discovered vulnerability in KaiBB which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in KaiBB The vulnerability exists due to insufficient validation of the request origin in admin/core/account.ph...

Hewlett-Packard OpenView Network Node Manager nnmRptConfig.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within nnmRptConfig.exe CGI which is exposed by the webserver which listens by defaul...

Mini-Stream 3.0.1.1 - Buffer Overflow Exploit

Mini-Stream 3.0.1.1 Buffer Overflow Exploit. Local exploit for windows platform $Id: ministream.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for mo...

Mongoose 2.11 - Content-Length HTTP Header Remote Denial of Service

Mongoose 2.11 - Content-Length HTTP Header Remote Denial of Service source: https://www.securityfocus.com/bid/45602/info Mongoose is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Successfully exploiting this issue will allow an attacker to...

Adobe Flash Player DefineFunction2 Memory Corruption (APSB10-26; CVE-2010-3646)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. The vulnerability is due to insufficient sanitization of the DefineFunction2 value by the Adobe Flash Player. A remote attacker might exploit this issue by convincing a victim to open a specially...