Apple Safari 5.1和5.0.6之前版本多个安全漏洞

BUGTRAQ ID: 48808 CVE ID: CVE-2011-0218,CVE-2011-0221,CVE-2011-0222,CVE-2011-0225,CVE-2011-0232,CVE-2011-0233,CVE-2011-0234,CVE-2011-0235,CVE-2011-0237,CVE-2011-0238,CVE-2011-0240,CVE-2011-0253,CVE-2011-0254,CVE-2011-0255,CVE-2011-1288,CVE-2011-1453,CVE-2011-1457,CVE-2011-1462,CVE-2011-1797...

iDefense Security Advisory 07.20.11: Apple Safari innerText Use-After-Free Vulnerability

iDefense Security Advisory 07.20.11 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 20, 2011 I. BACKGROUND Safari is Apple's web browser, and is based on the open source WebKit browser engine. MobileSafari is Safari for Apple's mobile devices including the iPad and iPhone. For more...

CVE-2011-0234

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1...

CVE-2011-0234

CVE-2011-0234 affects WebKit as used by Apple Safari prior to 5.0.6. A crafted web site can trigger memory corruption in WebKit, enabling remote code execution or a denial of service (application crash). Mitigation noted in public Apple advisories; remedy is to update Safari/WebKit to 5.0.6 or la...

CVE-2010-0234

The CVE-2010-0234 entry concerns a Windows kernel denial-of-service vulnerability caused by insufficient validation of a registry-key argument passed to a kernel system call. The issue affects Windows 2000 SP4, XP SP2/SP3, Server 2003 SP2, Vista (Gold, SP1, SP2), and Server 2008 (Gold, SP2). Expl...

CVE-2010-0234

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key argument to an unspecified system call, which allows local users to cause a denial of service reboot via a crafted applicatio...

Microsoft Windows Kernel Could Allow Elevation of Privilege (979683)

This host is missing an important security update according to Microsoft Bulletin MS10-021. OpenVAS Vulnerability Test $Id: secpodms10-021.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Kernel Could Allow Elevation of Privilege 979683 Authors: Veerendra G Updated By: Madhuri D on...

Microsoft Windows DNS/WINS服务器多个欺骗漏洞（MS09-008）

BUGTRAQ ID: 34013,33982,33988,33989 CVECAN ID: CVE-2009-0093,CVE-2009-0094,CVE-2009-0233,CVE-2009-0234 Microsoft Windows是微软发布的非常流行的操作系统。 Windows DNS服务器和WINS服务器存在多个漏洞，可能会允许远程攻击者将Internet上发送给系统的网络通信重定向至攻击者自己的系统。 1 Windows DNS服务器没有正确地重新使用缓存的响应，特制的DNS查询可以向DNS缓存投毒，重新定向网络通讯。 2 Windows...

CVE-2009-0234

The DNS Resolver Cache Service aka DNSCache in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS responses, which makes it easier for remote attackers to predict transaction IDs and poison caches by sending many crafted...

CVE-2009-0234

CVE-2009-0234 concerns the DNS Resolver Cache Service (DNSCache) in Windows DNS Server. The vulnerability arises from the DNS server’s handling of crafted DNS responses, where improper caching could let remote attackers predict transaction IDs and poison caches by sending numerous crafted queries...

Gentoo Security Advisory GLSA 200405-02 (lha)

The remote host is missing updates announced in advisory GLSA 200405-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200405-02 (lha)

The remote host is missing updates announced in advisory GLSA 200405-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: lha

The remote host is missing an update to the system as announced in the referenced advisory. VID a2ffb627-9c53-11d8-9366-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Apple Quicktime Player < 7.50.51 Multiple Vulnerabilities

Apple Quicktime Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

CVE-2008-0234

CVE-2008-0234 concerns a buffer overflow in Apple QuickTime Player (notably 7.3.1.70 and older than 7.4.1) when RTSP tunneling is enabled. A long Reason-Phrase in an RTSP response (e.g., via a crafted 404 message) can allow a remote attacker to execute arbitrary code on affected systems (Mac OS X...

CVE-2007-0234

CVE-2007-0234 is rejected/not used and does not represent an active vulnerability entry.

CVE-2007-0234

...

CVE-2006-0234

SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...

CVE-2006-0234

CVE-2006-0234 documents a SQL injection vulnerability in the web application component: index.php of the microBlog 2.0 RC-10 release. The underlying issue is an injection flaw that allows remote attackers to append arbitrary SQL commands via the two parameters, (1) month and (2) year. The vulnera...

CVE-2005-0234

The CVE-2005-0234 issue affects Safari (IDN support) version 1.2.5, where punycode-encoded Internationalized Domain Names could be decoded in URLs and SSL certificates in a way that enables homograph-based domain spoofing. This could allow phishing by misleading users about the site they are visi...