JVN Info.

Id
12676  
Name
JVNDB-2014-001551  
Title
Apache Cordova および Adobe PhoneGap におけるイベントベースのブリッジのデバイスリソース制限を回避される脆弱性  
Summary
Apache Cordova および Adobe PhoneGap には、イベントベースのブリッジのデバイスリソース制限を回避される脆弱性が存在します。  
Nvdinfo
CVE-2014-1882  
Cvssv2
7.5  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001551.html  
Published Date
2014-01-24  
Registered Date
2014-03-04  
Last Updated Date
2014-03-04  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51838 H28_MUN_DWEB_Q4_172_16_240_seg.csv 12676 89739 CVE-2010-1142 10 Critical 172.16.240.115 tcp 443 VMware ESX Multiple Vulnerabilities (VMSA-2010-0007) (remote check) The remote VMware ESX host is missing a security-related patch. The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - A format string flaw exists in the VMware Remote Console that allows a remote attacker to execute arbitrary code. (CVE-2009-3732) - A flaw exists in VMware Tools due to improper access to libraries. A remote attacker can exploit this to execute arbitrary code by convincing a Windows guest OS user into clicking on a file that is stored on a network share. (CVE-2010-1141) - A flaw exists in VMware Tools due to improper loading of VMware programs. An attacker with access to a Windows guest OS can escalate privileges by placing a Trojan horse program at an unspecified location on the guest OS disk. (CVE-2010-1142) Apply the appropriate patch according to the vendor advisory that pertains to ESX version 3.5 / 4.0. https://www.vmware.com/security/advisories/VMSA-2010-0007 http://lists.vmware.com/pipermail/security-announce/2010/000091.html Version : ESX 4.0 Installed build : 208167 Fixed build : 236512
57419 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 12676 89739 CVE-2010-1142 10 Critical 172.16.240.115 tcp 443 VMware ESX Multiple Vulnerabilities (VMSA-2010-0007) (remote check) The remote VMware ESX host is missing a security-related patch. The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - A format string flaw exists in the VMware Remote Console that allows a remote attacker to execute arbitrary code. (CVE-2009-3732) - A flaw exists in VMware Tools due to improper access to libraries. A remote attacker can exploit this to execute arbitrary code by convincing a Windows guest OS user into clicking on a file that is stored on a network share. (CVE-2010-1141) - A flaw exists in VMware Tools due to improper loading of VMware programs. An attacker with access to a Windows guest OS can escalate privileges by placing a Trojan horse program at an unspecified location on the guest OS disk. (CVE-2010-1142) Apply the appropriate patch according to the vendor advisory that pertains to ESX version 3.5 / 4.0. https://www.vmware.com/security/advisories/VMSA-2010-0007 http://lists.vmware.com/pipermail/security-announce/2010/000091.html Version : ESX 4.0 Installed build : 208167 Fixed build : 236512