[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256610

 
 

909

 
 

199263

 
 

282

 
 
 
Paid content will be excluded from the download.

Filter
Matches : 44374 Download | Alert*

newsbeuter: open-source RSS/Atom feed reader for text terminals Newsbeuter could be made to crash or run programs as your login if it opened a malicious file.

A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack.

The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.

The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.

The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.

mcabber: small Jabber console client MCabber could be made to modify the roster and intercept messages if it received specially crafted XMPP packets.

collabtive: Web-based project management software Collabtive could be made to run programs if it received specially crafted network traffic from an authenticated user.

Kobus van Schoor discovered that network-manager-ssh, a plugin to provide VPN integration for SSH in NetworkManager, is prone to a privilege escalation vulnerability. A local user with privileges to modify a connection can take advantage of this flaw to execute arbitrary commands as root. This update drops support to pass extra SSH options to the ssh invocation.

CVE-2016-6906: The read_image_tga function in gd_tga.c in the GD Graphics Library before 2.2.4 allows remote attackers to cause a denial of service via a crafted TGA file, related to the decompression buffer.

A denial of service vulnerability was found in Tor, a connection-based low-latency anonymous communication system. For the stable distribution , this problem has been fixed in version 0.3.5.10-1.


Pages:      Start    4182    4183    4184    4185    4186    4187    4188    4189    4190    4191    4192    4193    4194    4195    ..   4437

© SecPod Technologies