47 matches found
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
EUVD-2024-55105
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
PT-2025-48467
Name of the Vulnerable Software and Affected Versions KerOS versions prior to 5.12 Description The wmp-agent service does not correctly validate ‘magic URLs’, potentially allowing a remote attacker without authentication to execute arbitrary operating system commands as root if the service is...
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
CVE-2024-39148
The KerOS operating system (versions prior to 5.12 ) is vulnerable to a security flaw in the wmp-agent service. The service fails to properly validate so-called 'magic URLs' , which could allow an unauthenticated remote attacker to execute arbitrary OS commands with root privileges if the service...
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
CVE-2024-39148: Improper Control of Generation of Code
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:2830-1)
This update for permissions fixes the following issues : whitelist WMP bsc1161335, bsc1176625 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...
SUSE SLES15 Security Update : permissions (SUSE-SU-2020:2814-1)
This update for permissions fixes the following issues : whitelist WMP bsc1161335, bsc1176625 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...
openSUSE Security Update : permissions (openSUSE-2020-1658)
This update for permissions fixes the following issues : - whitelist WMP bsc1161335, bsc1176625 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
OPENSUSE-SU-2020:1658-1 Security update for permissions
This update for permissions fixes the following issues: - whitelist WMP bsc1161335, bsc1176625 This update was imported from the SUSE:SLE-15-SP1:Update update project...
Security update for permissions (moderate)
openSUSE Security Update: Security update for permissions Announcement ID: openSUSE-SU-2020:1658-1 Rating: moderate References: 1161335 1176625 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for permissions fixes the...
SUSE-SU-2020:2830-1 Security update for permissions
This update for permissions fixes the following issues: - whitelist WMP bsc1161335, bsc1176625...
SUSE-SU-2020:2814-1 Security update for permissions
This update for permissions fixes the following issues: - whitelist WMP bsc1161335, bsc1176625...
Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups
No description provided by source. Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on: Windows XP sp3 HTML HEAD SCRIPT...
CVE-2014-2671: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Windows Media Player WMP 11.0.5721.5230 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted WAV file...