firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2012:0387 Updated firefox packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability...

CVE-2012-0464

Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code...

CVE-2011-0464

The CVE-2011-0464 entry concerns Novell Vibe OnPrem 3.0 prior to Hot Patch 1, with a remote code execution vulnerability described as unspecified vectors. The NVD record assigns a CVSS v2 base score of 10.0 (HIGH) and indicates network attack with no authentication required, affecting confidentia...

Fedora 12 : roundcubemail-0.3.1-2.fc12 (2010-1385)

Common Vulnerabilities and Exposures assigned an identifier CVE-2010-0464 to the following vulnerability: Name: CVE-2010-0464 URL: http://cve.mitre.org /cgi-bin/cvename.cgi?name=CVE-2010-0464 Assigned: 20100129 Reference: MISC: https://secure.grepular.com/DNSPrefetchExposureonThunderbirdandW ebma...

Fedora Update for roundcubemail FEDORA-2010-1385

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-0464

Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...

CVE-2009-0464

PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2009-0464

The vulnerability CVE-2009-0464 affects Groone GBook 2.0 and is a PHP remote file inclusion in includes/header.php. The underlying issue is unsanitized input via the abspath parameter, allowing an attacker to cause arbitrary PHP code execution. Connected documents confirm the affected product/ver...

CVE-2009-0464

creationtimestamp| type| source ---|---|--- 2009-02-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7955...

CVE-2008-0464

CVE-2008-0464 affects archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterprise SQL 11.5.1. The issue is a directory traversal via a .. path in the template parameter, enabling remote attackers to read arbitrary files. According to NVD, impact is partial confidentiali...

Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)

The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...

CVE-2007-0464

CFNetwork vulnerability CVE-2007-0464 affects Apple Mac OS X 10.4.x (CFNetwork 129.19) where _CFNetConnectionWillEnqueueRequests incorrectly handles certain HTTP responses. A crafted HTTP 301 response can trigger a NULL pointer dereference, causing remote denial of service (application crash). Th...

CVE-2006-0464

CVE-2006-0464 affects IdeoContent Manager: multiple SQL injection vulnerabilities in index.php allow remote attackers to execute arbitrary SQL via the goto_id or mid parameters. Root cause is unsanitized user input in these parameters, enabling crafted queries. Documents do not specify affected v...

CVE-2005-0464

The CVE concerns SGI IRIX gr_osview (6.5.x, including 6.5.22) which does not drop privileges when opening user-specified description files in debug mode. Local attackers can read a line from arbitrary files by using -d and -D, which prints the line as a formatting error. The core issue is an info...

CVE-2003-0464

...

CVE-2003-0464

The RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow local users to bind to UDP ports that are used by privileged services such as nfsd...

CVE-2002-0464

Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. dot dot in arguments to 1 fileeditor.asp, 2 folderactions.asp, or 3 editoractions.asp...

CVE-2002-0464

CVE-2002-0464 affects Hosting Controller 1.4.1 and earlier. A directory-traversal vulnerability allows remote attackers to read and modify arbitrary files and directories by supplying a ".." in arguments to the vulnerable endpoints: file_editor.asp, folderactions.asp, or editoractions.asp. The in...

CVE-2001-0464

CVE-2001-0464 describes a buffer overflow in the Cyberscheduler component websync.exe . The overflow is triggered by a long tzs (timezone) parameter, allowing a remote attacker to execute arbitrary commands. The vulnerability is rated with a HIGH base score and network attack Vector with no authe...

CVE-2000-0464

CVE-2000-0464 affects Internet Explorer 4.x and 5.x, with a buffer overflow in the ActiveX parameter parsing capability (the “Malformed Component Attribute” vulnerability). The available documents describe remote code execution as the impact but do not provide concrete patch/version details or re...