Browse CVEs

HIGH 9.3 CVE-2012-4170EPSS 11% Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file. Photoshop Cs6 Mitigation only Fix from $1,9502012-08-31 MEDIUM 5.0 CVE-2011-5129EPSS 8% Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary cod… Xchat after 2.8.9 Fix from $1,6002012-08-30 HIGH 10.0 CVE-2012-3966EPSS 5% Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 a… Firefox after 14.0 Fix from $1,9502012-08-29 HIGH 10.0 CVE-2012-3971EPSS 5% Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12, allows … Firefox after 14.0 Fix from $1,9502012-08-29 HIGH 10.0 CVE-2012-1970EPSS 6% Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, T… Firefox 10.0.7 / 15.0+ Fix from $1,9502012-08-29 MEDIUM 5.0 CVE-2012-0855 Heap-based buffer overflow in the get_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a… Ffmpeg after 0.9 Fix from $1,6002012-08-27 MEDIUM 5.0 CVE-2012-1176 Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application … Pyfribidi after 0.10.9 Fix from $1,6002012-08-26 HIGH 10.0 CVE-2011-5124EPSS 55% Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote att… Proxyone Mitigation only Fix from $1,9502012-08-26 MEDIUM 5.0 CVE-2009-5128 The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (memory consumption and process crash) via a large fi… Websense V10000 Mitigation only Fix from $1,6002012-08-26 MEDIUM 5.0 CVE-2009-5129 The Websense V10000 appliance before 1.0.1 allows remote attackers to cause a denial of service (intermittent LDAP authentication outage) via a login… Websense V10000 after 1.0.0 Fix from $1,6002012-08-26 MEDIUM 5.0 CVE-2012-3518 The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allo… Tor after 0.2.2.37 Fix from $1,6002012-08-26 MEDIUM 5.0 CVE-2012-3501 The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system … Squidclamav Patch available Fix from $1,6002012-08-25 HIGH 10.0 CVE-2012-2864 Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chro… Chrome Os Mitigation only Fix from $1,9502012-08-22 HIGH 10.0 CVE-2012-4163EPSS 6% Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux,… Flash Player 3.4.0.2540 / 10.3.183.23+ Fix from $1,9502012-08-21 HIGH 10.0 CVE-2012-4164EPSS 6% Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux,… Flash Player 3.4.0.2540 / 10.3.183.23+ Fix from $1,9502012-08-21 HIGH 10.0 CVE-2012-4165EPSS 6% Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux,… Flash Player 3.4.0.2540 / 10.3.183.23+ Fix from $1,9502012-08-21 MEDIUM 6.8 CVE-2011-3945 The decode_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x bef… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-4364EPSS 5% Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; … Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 5.0 CVE-2012-0854 The dpcm_decode_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which allows re… Ffmpeg after 0.9 Fix from $1,6002012-08-20 MEDIUM 5.0 CVE-2012-0857 Multiple buffer overflows in the get_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers to cause a… Ffmpeg after 0.9 Fix from $1,6002012-08-20 HIGH 7.5 CVE-2012-3455EPSS 5% Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3.3 and ea… Koffice after 2.3.3 Fix from $1,9502012-08-20 HIGH 7.5 CVE-2012-3456EPSS 20% Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and e… Calligra after 2.4.3 Fix from $1,9502012-08-20 MEDIUM 6.8 CVE-2011-3940 nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-3947 Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6… Ffmpeg Mitigation only Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-3951 The dpcm_decode_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.6,… Ffmpeg after 0.9.1 Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0851 The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, … Ffmpeg after 0.9 Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0852 The adpcm_decode_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7… Ffmpeg after 0.9 Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0859 The render_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (ap… Ffmpeg after 0.9 Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2012-0947 Heap-based buffer overflow in the vqa_decode_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x before 0.6… Libav No fix yet Fix from $1,6002012-08-20 MEDIUM 6.8 CVE-2011-3929 The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x befo… Ffmpeg Mitigation only Fix from $1,6002012-08-20