Mandriva Linux Security Advisory : firefox (MDVSA-2009:338)

Security issues were identified and fixed in firefox 3.5.x : liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service application crash or execute arbitrary code via unspecified vectors, related to memory safe...

openSUSE Security Update : kernel (openSUSE-SU-2010:0397-1)

The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.48 fixing various bugs and security issues. CVE-2010-1641: The dogfs2setflags function in fs/gfs2/file.c in the Linux kernel does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a...

Outlook PR_ATTACH_METHOD file execution vulnerability

------------------------------------------------------------------------ Outlook PRATTACHMETHOD file execution vulnerability ------------------------------------------------------------------------ Yorick Koster, October 2009 -----------------------------------------------------------------------...

Microsoft Security Bulletin MS10-044 - Critical Vulnerabilities in Microsoft Office Access ActiveX Controls Could Allow Remote Code Execution (982335)

Microsoft Security Bulletin MS10-044 - Critical Vulnerabilities in Microsoft Office Access ActiveX Controls Could Allow Remote Code Execution 982335 Published: July 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in...

Cumulative Security Update for Internet Explorer (937143)

Unspecified vulnerability in the pdwizard.ocx ActiveX object for Internet Explorer 5.01, 6 SP1, and 7 allows remote attackers to execute arbitrary code via unknown vectors related to Microsoft Visual Basic 6 objects and memory corruption, aka ActiveX Object Memory Corruption Vulnerability...

Cumulative Security Update for Internet Explorer (931768)

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4, 6 SP1 on Windows 2000 SP4, 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2, and possibly 7 on Windows Vista does not properly instantiate certain COM objects as ActiveX controls, which allows remote attackers to execute...

Fedora 12 : rpm-4.7.2-2.fc12 (2010-10617)

Wed Jun 30 2010 Panu Matilainen - 4.7.2-2 - Fix CVE-2010-2059 598775 and CVE-2010-2198 601955 - Tue Dec 8 2009 Panu Matilainen - 4.7.2-1 - update to 4.7.2 http://rpm.org/wiki/Releases/4.7.2 - fix posix chmod test to unbreak %fixperms macro 543035 - avoid looking into OpenPGP subkeys 436812 - dont...

SuSE9 Security Update : IBM Java 1.5.0 (YOU Patch Number 12623)

This update of IBM Java 1.5.0 to SR11 FP2 to fixes the following security issues : - Various unspecified and undocumented vulnerabilities that allows remote attackers to affect confidentiality, integrity and availability via various unknown vectors. CVE-2010-0084, CVE-2010-0085, CVE-2010-0087,...

[Backports-security-announce] Security Update for xulrunner

Alexander Reichle-Schmehl uploaded new packages for packagename which fixed the following security problems: CVE-2008-5913 The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number...

[Backports-security-announce] Security Update for xulrunner

Alexander Reichle-Schmehl uploaded new packages for packagename which fixed the following security problems: CVE-2008-5913 The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, uses a random number...

Google Chrome 'WebKit' Multiple Vulnerabilities (Jun 2010) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 5 : perl (CESA-2010:0458)

Updated perl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)

This host is missing a critical security update according to Microsoft Bulletin MS10-038. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel Mode Drivers Privilege Escalation Vulnerabilities (979559)

This host is missing a critical security update according to Microsoft Bulletin MS10-032. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Security Bulletin MS10-035 - Critical Cumulative Security Update for Internet Explorer (982381)

Microsoft Security Bulletin MS10-035 - Critical Cumulative Security Update for Internet Explorer 982381 Published: June 08, 2010 Version: 1.0 General Information Executive Summary This security update resolves five privately reported vulnerabilities and one publicly disclosed vulnerability in...

Microsoft Security Bulletin MS10-034 - Critical Cumulative Security Update of ActiveX Kill Bits (980195)

Microsoft Security Bulletin MS10-034 - Critical Cumulative Security Update of ActiveX Kill Bits 980195 Published: June 08, 2010 Version: 1.0 General Information Executive Summary This security update addresses two privately reported vulnerabilities for Microsoft software. This security update is...

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)

About the security content of Safari 5.0 and Safari 4.1 Last Modified: June 07, 2010 Article: HT4196 Email this article Print this page Summary This document describes the security content of Safari 5.0 and Safari 4.1. For the protection of our customers, Apple does not disclose, discuss, or...

RHEL 4 : perl (RHSA-2010:0457)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0457 advisory. Perl is a high-level programming language commonly used for system administration utilities and web programming. The Safe extension module...

RHEL 5 : perl (RHSA-2010:0458)

Updated perl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

openSUSE Security Update : seamonkey (openSUSE-SU-2010:0273-1)

This update brings Mozilla SeaMonkey to 1.1.19 fixing various bugs and security issues. Following security issues are fixed: MFSA 2010-07: Mozilla developers took fixes from previously fixed memory safety bugs in newer Mozilla-based products and ported them to the Mozilla 1.8.1 branch so they can...