Nginx 0.7.65/0.8.39 (dev) - Source Disclosure / Download

TITLE: NGINX ENGINE X SERVER http://nginx.org/en/ ref-1 ======TESTED VERSIONS===== Unix versions are not vulnerable it only affects to NTFS file system Windows Stable versions: nginx/0.7.66 -- Not vulnerable nginx/0.7.65 -- Vulnerable nginx/0.7.64 -- Vulnerable nginx/0.7.63 -- Vulnerable...

MS Research Targets Multimedia Snooping

Researchers from Microsoft have come up a sensor widget concept that provides alerts and lets users control and monitor exactly what other users see from their webcams, microphones, and other live data streams. Read the full article. Dark Reading...

Check if NTFS Access Control Lists and NTFS Alternate Data Streams supported

Check if NTFS Access Control Lists and NTFS Alternate Data Streams supported. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Check if NTFS Access Control Lists and NTFS Alternate Data Streams supported

Check if NTFS Access Control Lists and NTFS Alternate Data Streams supported. OpenVAS Vulnerability Test $Id: GSHBSSHSAMBAntfsACLADS.nasl 7152 2017-09-15 14:36:54Z cfischer $ Check if NTFS Access Control Lists and NTFS Alternate Data Streams supported Authors: Thomas Rotter Copyright: Copyright c...

MPlayer integer overflow

Integer overflow on RDT streams playing...

vlc -- unintended code execution with specially crafted data

VideoLAN project reports: VLC media player suffers from various vulnerabilities when attempting to parse malformatted or overly long byte streams...

Debian DSA-1855-1 : subversion - heap overflow

Matt Lewis discovered that Subversion performs insufficient input validation of svndiff streams. Malicious servers could cause heap overflows in clients, and malicious clients with commit access could cause heap overflows in servers, possibly leading to arbitrary code execution in both cases...

acroread: media.newplayer JavaScript API code execution vulnerability (APSB10-02)

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild...

IBM DB2 Database Server Invalid Data Stream Denial of Service (CVE-2009-0173)

IBM DB2 Database is a relational database management system made available for Unix, Windows, and Linux platforms. The product consists of a set of services that work together to provide data processing functionality. IBM DB2 runs various processes including the db2syscs.exe process on Windows...

CVE-2009-4445

Microsoft Internet Information Services IIS, when used in conjunction with unspecified third-party upload applications, allows remote attackers to create empty files with arbitrary extensions via a filename containing an initial extension followed by a : colon and a safe extension, as demonstrate...

CVE-2009-4324

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild...

Design/Logic Flaw

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild...

PT-2009-1122

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 8.x through 8.2 Adobe Reader versions 9.x through 9.3 Adobe Acrobat versions 8.x through 8.2 Adobe Acrobat versions 9.x through 9.3 Description The issue is related to a use-after-free vulnerability in the...

Gentoo Security Advisory GLSA 200912-01 (openssl)

The remote host is missing updates announced in advisory GLSA 200912-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Microsoft Windows Intel Indeo Codec Parsing Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Inte...

Microsoft Windows ATL COM Initialization Code Execution Vulnerability (973525)

This host is missing a critical security update according to Microsoft Bulletin MS09-055. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apple iPhone buffer overflow

Buffer overflow in Audio Codecs on AAC and MP3 streams parsing...

Adobe Acrobat < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities

The version of Adobe Acrobat installed on the remote host is earlier than 9.1 / 8.1.4 / 7.1.1. Such versions are reportedly affected by multiple vulnerabilities : - An integer buffer overflow can be triggered when processing a malformed JBIG2 image stream with the '/JBIG2Decode' filter...

SVN < 1.5.6 / 1.6.0-1.6.3 Multiple Integer Overflows (deprecated)

Binary data 5140.prm...

Microsoft Visual Studio ATL Remote Code Execution Vulnerability (969706)

This host is missing a critical security update according to Microsoft Bulletin MS09-035. OpenVAS Vulnerability Test $Id: secpodms09-035.nasl 6517 2017-07-04 13:34:20Z cfischer $ Microsoft Visual Studio ATL Remote Code Execution Vulnerability 969706 Authors: Sharath S Copyright: Copyright c 2009...