oracle solaris 11.2 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Pillow prior to 2.7.0 allows remote malicious users to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.

Python Pillow Oracle Solaris 11.2 Fedoraproject Fedora 21 Opensuse Opensuse 13.2

4.3

CVSSv2

GNU patch 2.7.1 allows remote malicious users to write to arbitrary files via a symlink attack in a patch file.

Opensuse Opensuse 13.2 Opensuse Opensuse 13.1 Oracle Solaris 11.2 Gnu Patch 2.7.1

3.5

CVSSv2

The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) prior to 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string "\03...

Gnome Gnome-terminal Opensuse Opensuse 12.1 Opensuse Opensuse 11.4 Oracle Solaris 11.2

3.6

CVSSv2

The PEAR_REST class in REST.php in PEAR in PHP up to and including 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.

Php Php Oracle Solaris 11.2 Opensuse Evergreen 11.4 Opensuse Opensuse 12.3 Opensuse Opensuse 13.1

7.5

CVSSv2

Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and previous versions allow remote malicious users to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function.

Sound Exchange Project Sound Exchange Debian Debian Linux 7.0 Debian Debian Linux 8.0 Oracle Solaris 11.2

5

CVSSv2

epan/proto.c in Wireshark 1.12.x prior to 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote malicious users to cause a denial of service (assertion failure and application exit) via a crafted packet that is improperly handled by ...

Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Wireshark Wireshark 1.12.0 Wireshark Wireshark 1.12.2 Wireshark Wireshark 1.12.1 Wireshark Wireshark 1.12.3 Oracle Solaris 11.2

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 prior to 2014.2.4 and 2015.1.x prior to 2015.1.1 allows remote malicious users to inject arbitrary web script or HTML via the description parameter in a heat templa...

Debian Debian Linux 8.0 Openstack Horizon 2014.2.0 Openstack Horizon 2014.2.1 Openstack Horizon 2015.1.0 Openstack Horizon 2014.2.2 Openstack Horizon 2014.2.3 Oracle Solaris 11.2

5.8

CVSSv2

Array index error in the parse_fond function in base/ftmac.c in FreeType prior to 2.5.4 allows remote malicious users to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.

Oracle Solaris 11.2 Oracle Solaris 10.0 Debian Debian Linux 7.0 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 10.04 Freetype Freetype Opensuse Opensuse 13.2 Opensuse Opensuse 13.1

7.5

CVSSv2

cff/cf2intrp.c in the CFF CharString interpreter in FreeType prior to 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote malicious users to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted...

Oracle Solaris 10.0 Oracle Solaris 11.2 Freetype Freetype Fedoraproject Fedora 21 Fedoraproject Fedora 20 Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 10.04

2.1

CVSSv2

The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows malicious users to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.

Libsndfile Project Libsndfile Opensuse Opensuse 13.1 Opensuse Opensuse 13.2 Debian Debian Linux 9.0 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 15.10 Oracle Solaris 11.2

Get Started

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook