Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

Mozilla Thunderbird 3.1.x < 3.1.11 Multiple Vulnerabilities

Binary data 5966.prm...

Firefox 3.6 < 3.6.18 Multiple Vulnerabilities

The installed version of Firefox 3.6 is earlier than 3.6.18. Such versions are potentially affected by the following security issues : - Multiple memory safety issues can lead to application crashes and possibly remote code execution. CVE-2011-2374, CVE-2011-2376, CVE-2011-2364, CVE-2011-2365 - A...

Mozilla Thunderbird 3.1 < 3.1.11 Multiple Vulnerabilities

The installed version of Thunderbird 3.1 is earlier than 3.1.11. Such versions are potentially affected by the following security issues : - Multiple memory safety issues can lead to application crashes and possibly remote code execution. CVE-2011-2374, CVE-2011-2376, CVE-2011-2364, CVE-2011-2365...

[security bulletin] HPSBUX02556 SSRT100014 rev.1 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02288473 Version: 1 HPSBUX02556 SSRT100014 rev.1 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon ...

CVE-2010-0083

CVE-2010-0083 maps to a Solaris/OpenSolaris vulnerability in the ToolTalk rpc.ttdbserverd database parser, enabling remote exploitation via crafted .rec files. The HP advisory notes remote code execution by disabling rpc.ttdbserver (inetd.config entry), and the PacketsStorm PoCs show SPARC/x86 ex...

MS09-006: Vulnerabilities in Windows Kernel Could Allow Remote Code Execution (958690)

The remote host contains a version of the Windows kernel that is affected by vulnerabilities : - A remote code execution vulnerability exists due to improper validation of input passed from user mode through the kernel component of GDI. Successful exploitation requires that a user on the affected...

Apache终端转义序列过滤漏洞

CVECAN ID: CVE-2003-0083 Apache是一款广泛使用的开放源代码WEB服务程序。 Apache对日志中的转义序列处理存在问题，攻击者可能利用恶意的日志信息在服务器执行任意命令。 Apache无法过滤错误日志中以ASCII（0x1B）序列开始且带有一系列参数的终端转义序列。如果攻击者能够向Apache错误日志中注入转义序列的话，就可能对远程用户发动各种攻击，包括拒绝服务，文件修改和执行任意命令。 Apache Group Apache 1.3.9 Apache Group Apache 1.3.6 Apache Group Apache 1.3.4 Apache...

Gentoo Security Advisory GLSA 200402-02 (200402-02)

The remote host is missing updates announced in advisory GLSA 200402-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200402-02 (200402-02)

The remote host is missing updates announced in advisory GLSA 200402-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: linux_base

The remote host is missing an update to the system as announced in the referenced advisory. VID bf2e7483-d3fa-440d-8c6e-8f1f2f018818 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Microsoft VBScript和JScript脚本引擎远程溢出漏洞（MS08-022）

BUGTRAQ ID: 28551 CVECAN ID: CVE-2008-0083 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的VBScript和JScript脚本引擎在处理畸形数据时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Windows的VBScript和JScript脚本引擎在解码网页中的脚本时允许脚本加载到内存中运行，这可能导致缓冲区溢出。如果用户打开了特制文件或访问正在运行特制脚本的网站，则此漏洞可能允许远程执行代码。 Microsoft VBScript/JScript 5.1 - Microsoft Windows 2000...

CVE-2008-0083

The 1 VBScript VBScript.dll and 2 JScript JScript.dll scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not properly decode script, which allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2008-0083

CVE-2008-0083 affects Microsoft VBScript/JScript scripting engines (VBScript.dll and JScript.dll) version 5.1 and 5.6 used in Windows 2000 SP4, XP SP2, and Server 2003 SP1/SP2. A vulnerability in decoding scripts in Web pages and in memory loading could allow remote code execution through unknown...

Microsoft Windows Scripting Engines Script Encoding Code Execution (MS08-022; CVE-2008-0083)

VBScript stands for Microsoft Visual Basic Scripting Edition that includes Web client scripting in Microsoft Internet Explorer and Web server scripting in Microsoft Internet Information Service. JScript is the Microsoft implementation of the ECMA 262 language specification ECMAScript Edition 3. T...

MS08-022: Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution (944338)

The remote host is running a version of Windows that contains a flaw in JScript. An attacker may be able to execute arbitrary code on the remote host by constructing a malicious JScript and enticing a victim to visit a web site or view a specially crafted email message. C Tenable Network Security...

CVE-2007-0083

CVE-2007-0083 affects Nuked Klan 1.7 and earlier. The vulnerability is a cross-site scripting (XSS) flaw exploitable via a javascript: URI in a getURL statement within a .swf file, enabling remote script/HTML injection as demonstrated by “Remote Cookie Disclosure.” The NVD entry lists a CVSS v2 b...

[SECURITY] [DSA 930-2] New smstools packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 930-2 [email protected] http://www.debian.org/security/ Steve Kemp January 10, 2006 http://www.debian.org/security/faq -...

CVE-2006-0083

Format string vulnerability in the logging code of SMS Server Tools smstools 1.14.8 and earlier allows local users to execute arbitrary code via unspecified attack vectors...

CVE-2006-0083

CVE-2006-0083 affects SMS Server Tools (smstools) with a format-string vulnerability in the logging code, allowing local users to execute arbitrary code with root privileges on affected releases. Public details consistently reference smstools 1.14.8 and earlier. Debian and OpenVAS advisories docu...