[SECURITY] Fedora 19 Update: kde-baseapps-4.10.4-1.fc19

Core applications for KDE 4, including: dolphin : File manager kdepasswd : Changes a UNIX password. kdialog : Nice dialog boxes from shell scripts keditbookmarks : Bookmark oranizer and editor kfind : File find utility kfmclient : Tool for opening URLs from the command line konqueror : Web browse...

[SECURITY] Fedora 19 Update: gwenview-4.10.4-1.fc19

An image viewer...

FreeBSD : chromium -- multiple vulnerabilities (4865d189-cd62-11e2-ae11-00262d5ed8ee)

Google Chrome Releases reports : 242322 Medium CVE-2013-2855: Memory corruption in dev tools API. Credit to 'daniel.zulla'. 242224 High CVE-2013-2856: Use-after-free in input handling. Credit to miaubiz. 240124 High CVE-2013-2857: Use-after-free in image handling. Credit to miaubiz. 239897 High...

Google Chrome < 27.0.1453.110 Multiple Vulnerabilities

Binary data 6858.pasl...

Google Chrome < 27.0.1453.110 Multiple Vulnerabilities

Binary data 801017.prm...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 242322 Medium CVE-2013-2855: Memory corruption in dev tools API. Credit to "daniel.zulla". 242224 High CVE-2013-2856: Use-after-free in input handling. Credit to miaubiz. 240124 High CVE-2013-2857: Use-after-free in image handling. Credit to miaubiz. 239897 High...

Stable Channel Update

The Stable channel has been updated to 27.0.1453.110 for Windows, Macintosh, Linux and Chrome Frame platforms. Security fixes and rewards: Please see the Chromium security page for more information. Note that the referenced bugs may be kept private until a majority of our users are up to date wit...

CVE-2013-0549

Cross-site scripting XSS vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x through 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote attackers to inject arbitrary web script or HTML via a...

ERS Viewer 2013 ERS File Handling Buffer Overflow

This module exploits a buffer overflow vulnerability found in ERS Viewer 2013. The vulnerability exists in the module ermapperu.dll, where the function rfreporterror handles user provided data in an insecure way. It results in arbitrary code execution under the context of the user viewing a...

CVE-2013-1335

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...

CVE-2013-1335

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."...

CVE-2013-1335

CVE-2013-1335 affects Microsoft Word 2003 SP3 and Word Viewer, where parsing of crafted shape data in Word documents can lead to remote code execution. The root cause is a memory-corruption/shape-data handling issue used to execute arbitrary code when a user opens a malicious Word file. Impact is...

Attempt to launch Veeam Backup and Replication fails

Challenge An attempt to launch Veeam Backup & Replication fails with the message that Veeam Backup and Replication service is not running: The service can actually be seen as running: The following entries can be seen in VeeamShell.log: Timestamp Info ------- Started new session of Veeam Shell...

Microsoft Office Wordview Remote Code Execution Vulnerability (2830399)

This host is missing a important security update according to Microsoft Bulletin MS13-043. OpenVAS Vulnerability Test $Id: secpodwinwordviewms13-043.nasl 6079 2017-05-08 09:03:33Z teissa $ Microsoft Office Wordview Remote Code Execution Vulnerability 2830399 Authors: Antu Sanadi Copyright:...

MS13-043: Vulnerability in Microsoft Word Could Allow Remote Code Execution (2830399)

The version of Office and/or Microsoft Word Viewer installed on the remote host is affected by a remote code execution vulnerability due to the way that Microsoft Word parses content in Word files. To exploit this issue, an attacker would need to trick a user into opening a specially crafted file...

VMAX Web Viewer Default Credentials (HTTP)

VMAX Web Viewer is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ERS Viewer 2011 - '.ERS' File Handling Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ERS Viewer 2011 E...

CVE-2013-1223

The log viewer in Cisco Unified Customer Voice Portal CVP Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted 1 HTTP or 2 HTTPS request, aka Bug ID CSCub38372...

ERS Viewer 2011 ERS File Handling Buffer Overflow Vulnerability

This Metasploit module exploits a buffer overflow vulnerability found in ERS Viewer 2011 version 11.04. The vulnerability exists in the module ermapperu.dll where the function ERMconverttocorrectwebpath handles user provided data in an insecure way. It results in arbitrary code execution under th...

ERS Viewer 2011 ERS File Handling Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ERS Viewer 2011 E...