openSUSE Security Update : MozillaFirefox (MozillaFirefox-4459)

Mozilla Firefox was updated to the 3.6.17 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances,...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-4458)

Mozilla Thunderbird was updated to the 3.1.10 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain...

CVE-2011-0070

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execut...

Debian DSA-2227-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2011-0069 CVE-2011-0070 CVE-2011-0072 CVE-2011-0074 CVE-2011-0075 CVE-2011-0077 CVE-2011-0078 CVE-2011-0080 CVE-2011-0081 'Scoobidiver', Ian Beer Bob Clary, Henri Sivonen, Marco Bonardo...

[SECURITY] [DSA 2227-1] iceape security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2227-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 30, 2011 http://www.debian.org/security/faq -...

SeaMonkey < 2.0.14 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.14. Such versions are potentially affected by the following security issues : - Multiple use-after-free errors exist in the handling of the object attributes 'mChannel', 'mObserverList' and 'nsTreeRange'. CVE-2011-0065, CVE-2011-0066,...

Mozilla Thunderbird 3.1 < 3.1.10 Multiple Vulnerabilities

The installed version of Thunderbird 3.1 is earlier than 3.1.10. Such versions are potentially affected by the following security issues : - An error in the resource protocol can allow directory traversal. CVE-2011-0071 - Multiple memory safety issues can lead to application crashes and possibly...

RHEL 6 : firefox (RHSA-2011:0471)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0471 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found ...

Mandriva Update for vte MDVSA-2010:161 (vte)

Check for the Version of vte OpenVAS Vulnerability Test Mandriva Update for vte MDVSA-2010:161 vte Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Linux Security Advisory : vte (MDVSA-2010:161)

A vulnerability has been found and corrected in vte : The vtesequencehandlerwindowmanipulation function in vteseq.c in libvte aka libvte9 in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or...

Design/Logic Flaw

The vtesequencehandlerwindowmanipulation function in vteseq.c in libvte aka libvte9 in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a 1 wind...

CVE-2010-2713

The CVE-2010-2713 issue affects VTE (libvte) up to version 0.25.1 (and earlier) used by gnome-terminal. The vulnerability resides in vteseq.c: The vte_sequence_handler_window_manipulation function mishandles escape sequences, enabling a remote attacker to execute arbitrary commands or obtain sens...

CVE-2010-2713

The vtesequencehandlerwindowmanipulation function in vteseq.c in libvte aka libvte9 in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a 1 wind...

CVE-2010-2713

The vtesequencehandlerwindowmanipulation function in vteseq.c in libvte aka libvte9 in VTE 0.25.1 and earlier, as used in gnome-terminal, does not properly handle escape sequences, which allows remote attackers to execute arbitrary commands or obtain potentially sensitive information via a 1 wind...

CVE-2010-0070

CVE-2010-0070 is an Oracle App Server issue affecting Oracle Containers for J2EE in Oracle Application Server 10.1.2.3 and 10.1.3.4. It allows remote integrity impact via unknown vectors; exploitation details are not specified in the documents. The CVE is addressed in Oracle’s January 2010 Critic...

CVE-2009-0070

Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of service application crash, and probably have unspecified other impact via the array index of the arguments array in a JavaScript function, possibly a related issu...

CVE-2009-0070

Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of service application crash, and probably have unspecified other impact via the array index of the arguments array in a JavaScript function, possibly a related issu...

CVE-2009-0070

CVE-2009-0070 corresponds to an issue in Apple Safari where an integer signedness error in the arguments array handling of a JavaScript function can allow remote attackers to read arbitrary memory locations and cause a denial of service (application crash), with possibly other unspecified impacts...

CVE-2009-0070

creationtimestamp| type| source ---|---|--- 2009-01-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7673...

CVE-2008-0070

CVE-2008-0070 affects Orb Networks Orb 2.00.1014 and Winamp Remote BETA. Root cause: integer overflow causing a heap-based buffer overflow when an RPC request specifies a very large number of array dimensions. Impact: remote code execution potential. Exploitation details are not provided in the d...