SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 6224)

Mozilla Firefox was updated to the 10.0.4 ESR release to fix various bugs and security issues. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under...

CVE-2012-0878

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

Multiple security flaws fixed in FreeType v2.4.9 — Mozilla

Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType...

Miscellaneous memory safety hazards (rv:12.0/ rv:10.0.4) — Mozilla

Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be...

Google raises Hackers bounties to $20,000

Google raises Hackers bounties to $20,000 Google on Monday raised to $20,000 its bounty on software bugs that hackers could exploit for cyber attacks on the Internet giant's online services. The maximum reward for exposing a vulnerability that would let an intruder's code get up to mischief in a...

New Version of WordPress Fixes Slew of Security Bugs

A new version of the WordPress software is available, and the update includes fixes for a number of security vulnerabilities, including a bug in components that are used to upload media to WordPress sites. Version 3.3.2 also has some other fixes for cross-site scripting and other flaws. WordPress...

CVE-2012-2270

Open redirect vulnerability in index.php aka the Login Page in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirecturl parameter...

CentOS 5 : kernel (CESA-2012:0480)

Updated kernel packages that fix one security issue, various bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 8034)

The following security issue has been fixed : - Specially crafted MIME headers could cause OpenSSL's ans1 parser to dereference a NULL pointer leading to a Denial of Service CVE-2006-7250 or fail verfication. CVE-2012-1165 Additionally, two other bugs have been fixed : - free headers after use in...

HITB2011KUL - Skype Vulnerabilities 0Day Exploitation

Document Title: =============== HITB2011KUL - Skype Vulnerabilities 0Day Exploitation References: =========== Download: http://www.vulnerability-lab.com/resources/videos/394.wmv View: http://www.youtube.com/watch?v=K4g86hVQ1wk Release Date: ============= 2012-03-30 Vulnerability Laboratory ID...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 8029)

Mozilla Firefox was updated to 3.6.28 to fix various bugs and security issues. The following security issues have been fixed : - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 6007)

Mozilla Firefox was updated to 10.0.3 ESR to fix various bugs and security issues. The following security issues have been fixed : - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed...

Security fix for the ALT Linux 7 package openssl10 version 1.0.0h-alt1

March 23, 2012 Dmitry V. Levin 1.0.0h-alt1 - Updated to 1.0.0h fixes CVE-2012-0050, CVE-2012-0884 and other bugs...

Various Banks Cross Site Scripting

Title: Some bank websites that suffer from Cross-site scripting vulnerabilities. Author: Sony and Flexxpoint Data: 21.03.2012 Sony Blog: http://st2tea.blogspot.com Flexxpoint Blog : http://flexxpoint.blogspot.com/ Site: http://insecurity.ro We staged an experiment out of interest. We looked throu...

Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28) — Mozilla

Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be...

SuSE 10 Security Update : Samba (ZYPP Patch Number 7985)

This update of Samba fixes a heap-based buffer overflow that could be exploited by remote, unauthenticated attackers to crash the smbd daemon or potentially execute arbitrary code via specially crafted SMB AndX request packets. CVE-2012-0870 Also fixed two non security bugs : - Fix to handle doma...

RedHat Update for xen RHSA-2012:0370-01

Check for the Version of xen OpenVAS Vulnerability Test RedHat Update for xen RHSA-2012:0370-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Google Patches Chrome Bugs Used in Pwnium Contest

VANCOUVER–Google has already patched the bugs used by researcher Sergey Glazunov to compromise Chrome on Wednesday as part of the company’s Pwnium contest at the CanSecWest conference here. The vulnerability that Glazunov was ablt to exploit is a universal XSS and bad history navigation bug in th...

Fedora 15 : postgresql-9.0.7-1.fc15 (2012-2589)

Update to latest Postgres releases --- resolves some security and data loss bugs http://www.postgresql.org/docs/9.1/static/release-9-1-3.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html Note that Tenable Network Security has extracted the preceding description block directly from...

RHEL 5 : xen (RHSA-2012:0370)

Updated xen packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...