Preemptive Protection against Adobe Reader JavaScript getAnnots Method Memory Corruption Vulnerability

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. A remote attacker can exploit this vulnerability to execute arbitrary code on an affected system via a specially crafted PDF file. Portable Document Format PDF is an open file format created by Adobe Systems. It is...

MDKA-2007:114 : eclipse

The Eclipse IDE provided with 2008.0 does not run, instead outputting a glibc error or JVM termination error. This update fixes that, and some other bugs in the package. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix...

Update Protection against Microsoft Windows GDIplus GpFont.SetData Integer Overflow

A vulnerability has been reported in Microsoft Windows Graphics Device Interface GDI. GDI is a Microsoft standard for representing graphical objects and outputting these representations to devices such as monitors and printers. The vulnerability occurs when an application that uses the affected...

CVE-2008-6705

The CVE refers to a vulnerability in S.T.A.L.K.E.R.: Shadow of Chernobyl (version 1.0006 and earlier) where MultipacketReciever::RecievePacket accepts a crafted packet lacking an expected 0xe0 or 0xe1 value. This caused a denial of service via triggering the INT3 instruction, potentially terminat...

Mandriva Update for eclipse MDKA-2007:114 (eclipse)

Check for the Version of eclipse OpenVAS Vulnerability Test Mandriva Update for eclipse MDKA-2007:114 eclipse Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mozilla Seamonkey XSL Parsing Vulnerability (Linux)

The host is installed with Mozilla Seamnkey and is prone to XSL File Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbseamonkeyxslparsingvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey XSL Parsing Vulnerability Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbo...

Firefox XSL Parsing Vulnerability (mfsa2009-12) - Linux

Mozilla Firefox browser is prone to an XSL file parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Seamonkey < 1.1.16 XSL Parsing Vulnerability - Windows

Mozilla Seamonkey is prone to an XSL file parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firefox XSL Parsing Vulnerability (Windows)

The host is installed with Mozilla Firefox browser and is prone to XSL File Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxxslparsingvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Firefox XSL Parsing Vulnerability Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone...

Microsoft Office Visio File Multiple Memory Corruptions (MS09-005; CVE-2009-0095; CVE-2009-0096; CVE-2009-0097)

Microsoft Visio is a diagram creation software for Microsoft Windows. Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. A remote attacker could trigger these flaws by convincing the victim to open a specially crafted Visio file. Successful exploitation of these...

Integer overflow

Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service stack corruption and application termination via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka t...

CVE-2009-1217

The CVE-2009-1217 issue affects Microsoft GDI+ (gdiplus.dll) on Windows XP, where the GPFont::SetData function can overflow when parsing an EMF file, leading to a denial of service via stack corruption. All sources consistently describe an off-by-one/integer overflow condition triggered by specia...

Design/Logic Flaw

Sun Java System Identity Manager IdM 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to "ssl termination devices" and lack of support for relative URLs...

Oracle Secure Backup NDMP Packet Handling Multiple Denial of Service (CVE-2008-5441)

Oracle Database Server is an enterprise-level relational database application suite. Oracle Secure Backup is a backup solution allowing for single point of management of data present on network attached storage NAS devices and distributed hosts. Oracle Secure Backup is using NDMP protocol to...

Ubuntu: Security Advisory (USN-730-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-730-1: libpng vulnerabilities

It was discovered that libpng did not properly perform bounds checking in certain operations. An attacker could send a specially crafted PNG image and cause a denial of service in applications linked against libpng. This issue only affected Ubuntu 8.04 LTS. CVE-2007-5268, CVE-2007-5269 Tavis...

CentOS Update for python CESA-2007:1077-01 centos2 i386

Check for the Version of python OpenVAS Vulnerability Test CentOS Update for python CESA-2007:1077-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

GMail, GTalk phishing scam underway

Attention GMail and GTalk users: There’s a major spam run underway with social engineering lures to steal your login cretentials. This image shows a GMail message that purports to be an account termination warning from Google but, if a user is tricked into clicking on the link, he/she is redirect...

Enomaly ECP多个安全漏洞

BUGTRAQ ID: 33544 CVECAN ID: CVE-2008-4990,CVE-2009-0390 Enomaly ECP（之前名为Enomalism）是用于管理虚拟机的软件。 ECP的enomalism2.sh中存在多个安全漏洞，本地攻击者可以通过符号链接攻击以root用户权限覆盖任意系统文件、向kill命令注入参数以终止任意进程或向进程发送信号，或导致虚拟机无法启动。 Enomaly Elastic Computing Platform 2.1 临时解决方法： 将PIDFILE从/tmp/enomalism2.pid更改为/var/run/enomalism2.pid。...

CVE-2009-0020

Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted resource fork that triggers memory corruption...