4470 matches found
[SECURITY] Fedora 22 Update: libarchive-3.1.2-12.fc22
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
Icecast Remote Denial of Service Vulnerability
Icecast is an open source streaming project and an audio streaming server. Icecast suffers from a remote denial-of-service vulnerability, which allows remote attackers to exploit the vulnerability to crash the application...
Debian DSA-3239-1 : icecast2 - security update
Juliane Holzt discovered that Icecast2, a streaming media server, could dereference a NULL pointer when URL authentication is configured and the streamauth URL is trigged by a client without setting any credentials. This could allow remote attackers to cause a denial of service crash. %NASLMINLEV...
DSA-3239-1 icecast2 - security update
Bulletin has no description...
Debian Security Advisory DSA 3239-1 (icecast2 - security update)
Juliane Holzt discovered that Icecast2, a streaming media server, could dereference a NULL pointer when URL authentication is configured and the streamauth URL is trigged by a client without setting any credentials. This could allow remote attackers to cause a denial of service crash. OpenVAS...
Symantec Workspace Streaming Agent Privilege Escalation Vulnerability
Symantec Workspace Streaming Agent is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...
Symantec Workspace Streaming (SWS) Agent Detection (Windows SMB Login)
Detects the installed version of Symantec Workspace Streaming Agent. The script logs in via smb, searches for SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
Symantec Workspace Streaming Agent Unquoted Service Path Local Privilege Escalation (SYM15-004)
The version of the Symantec Workspace Streaming SWS agent installed on the remote Windows host is affected by a local privilege escalation vulnerability due to an unquoted search path in AppMgrService.exe. A local attacker can exploit this to execute arbitrary code with local system privileges...
Same as TD-9436T camera RTSP protocol buffer overflow vulnerability
Tongwei TD-9436T camera is a product of Shenzhen Tongwei Digital Technology Co. In normal user's mode, if an RTSP packet is sent with a method of setup and the string between two consecutive semicolons in the Transport field is longer than 135, the machine will crash with a buffer overflow. An...
Privacy Goal: More Controls in Users' Hands
SAN FRANCISCO – The same companies that brought, among other things, facial recognition into your living rooms and the ability to record video to your eyewear, swear the next big thing in privacy is putting more controls in your hand. The privacy officers of Microsoft, Google and Facebook said...
Code injection
Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming SWS 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as...
CVE-2015-1484
Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming SWS 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as...
CVE-2015-1484
Symantec Workspace Streaming Agent is affected by a local privilege escalation due to an unquoted search/path in AppMgrService.exe when installed as a service. A Trojan horse executable placed in the system root can be launched at service startup to gain SYSTEM privileges. Affected versions inclu...
CVE-2015-1484
Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming SWS 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as...
Symantec Workspace Streaming Agent 'AppMgrService.exe' Local Elevation of Privilege Vulnerability
Symantec Workspace Streaming enables on-demand application setup, real-time software license management, and instant application upgrades. A local elevation of privilege vulnerability exists in the Symantec Workspace Streaming Agent implementation of 'AppMgrService.exe'. An attacker could exploit...
Microsoft Internet Explorer CVE-2015-1668 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
Microsoft Internet Explorer CVE-2015-1661 ASLR Security Bypass Vulnerability
Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Internet Explorer 6, 7, 8, 9, 10, and 11 are...
Microsoft Windows Task Scheduler CVE-2015-0098 Remote Privilege Escalation Vulnerability
Description Microsoft Windows Kernel is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges within the context of the System account. Technologies Affected Avaya Meeting Exchange - Client Registration Server 5.0 Avaya Meeting Exchan...
Microsoft Internet Explorer CVE-2015-1660 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
Microsoft .NET Framework CVE-2015-1648 Information Disclosure Vulnerability
Description The Microsoft .NET Framework is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya...