549 matches found
Mozilla Firefox/Firefox ESR/Thunderbird nsZipArchive::BuildFileList Function Information Disclosure Vulnerability
Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. An information disclosure vulnerability exists in the Mozilla Firefox/Firefox ESR/Thunderbird nsZipArchive::BuildFileList function, which can be exploited by a remote attacker to gain access to arbitrary memory locatio...
Mozilla: Vulnerabilities found through code inspection (MFSA 2015-66)
nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified impact via a crafted ZIP archive...
Directory Traversal Vulnerability in Multiple Samsung Galaxy Devices
The Samsung Galaxy S4 and others are smart mobile devices released by the South Korean company Samsung Samsung. A directory traversal vulnerability exists in the SwiftKey language-pack upgrade implementation of multiple Samsung Galaxy devices. A remote attacker can leverage the control privileges...
[SECURITY] Fedora 22 Update: libarchive-3.1.2-12.fc22
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
Fedora 21 : libzip-0.11.2-5.fc21 (2015-4699)
CVE-2015-2331: integer overflow when processing ZIP archives 1204676,1204677 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] Fedora 21 Update: libzip-0.11.2-5.fc21
libzip is a C library for reading, creating, and modifying zip archives. Fi les can be added from data buffers, files, or compressed data copied directly f rom other zip archives. Changes made without closing the archive can be reverte d. The API is documented by man pages...
[SECURITY] Fedora 22 Update: libzip-0.11.2-5.fc22
libzip is a C library for reading, creating, and modifying zip archives. Fi les can be added from data buffers, files, or compressed data copied directly f rom other zip archives. Changes made without closing the archive can be reverte d. The API is documented by man pages...
Amazon Linux AMI : php54 (ALAS-2015-506)
A use-after-free flaw was found in the way PHP's unserialize function processed data. If a remote attacker was able to pass crafted input to PHP's unserialize function, they could cause the PHP interpreter to crash or, possibly, execute arbitrary code. CVE-2015-0231 An integer overflow flaw,...
Fedora 22 : libzip-0.11.2-5.fc22 (2015-4553)
CVE-2015-2331: integer overflow when processing ZIP archives 1204676,1204677 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] Fedora 20 Update: mingw-libzip-0.11.2-3.fc20
libzip is a C library for reading, creating, and modifying zip archives. Fi les can be added from data buffers, files, or compressed data copied directly f rom other zip archives. Changes made without closing the archive can be reverte d. The API is documented by man pages...
[SECURITY] Fedora 21 Update: mingw-libzip-0.11.2-3.fc21
libzip is a C library for reading, creating, and modifying zip archives. Fi les can be added from data buffers, files, or compressed data copied directly f rom other zip archives. Changes made without closing the archive can be reverte d. The API is documented by man pages...
[SECURITY] Fedora 22 Update: mingw-libzip-0.11.2-3.fc22
libzip is a C library for reading, creating, and modifying zip archives. Fi les can be added from data buffers, files, or compressed data copied directly f rom other zip archives. Changes made without closing the archive can be reverte d. The API is documented by man pages...
[SECURITY] [DSA 3198-2] php5 regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3198-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 28, 2015 http://www.debian.org/security/faq -...
php: integer overflow
An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way libzip, which is embedded in PHP, processed certain ZIP archives. If an attacker were able to supply a specially crafted ZIP archive to an application using libzip, it could cause the application to crash or,...
DSA-3198-2 php5 - regression update
Bulletin has no description...
Debian DSA-3198-1 : php5 - security update
Multiple vulnerabilities have been discovered in the PHP language : - CVE-2015-2301 Use-after-free in the phar extension. - CVE-2015-2331 Emmanuel Law discovered an integer overflow in the processing of ZIP archives, resulting in denial of service or potentially the execution of arbitrary code...
[SECURITY] [DSA 3198-1] php5 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3198-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 20, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3198-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3198-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 20, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3198-1 (php5 - security update)
Multiple vulnerabilities have been discovered in the PHP language: CVE-2015-2301 Use-after-free in the phar extension. CVE-2015-2331 Emmanuel Law discovered an integer overflow in the processing of ZIP archives, resulting in denial of service or potentially the execution of arbitrary code. OpenVA...