Mozilla Thunderbird does not adequately restrict HTML elements in email message content

Overview Mozilla Thunderbird does not adequately restrict HTML elements in email content, which could allow an attacker to execute arbitrary script when a specially-crafted email message is forwarded or replied to. Description Vulnerability Lab has reported a vulnerability in the way Mozilla...

Threat Outbreak Alert: Fake Photograph Sharing Email Messages on January 17, 2014

Medium Alert ID: 32482 First Published: 2014 January 17 20:27 GMT Last Updated: 2014 January 22 14:59 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a photo for the recipient. The text in the email message attempts to...

BlackPOS Malware used in TARGET Data Breach developed by 17-Year Old Russian Hacker

The Holiday data breach at TARGET appeared to be part of a broad and highly sophisticated international hacking campaign against multiple retailers, involving the heist of possibly 110 million Credit-Debit cards, and personal information. Target confirmed last weekend that a malicious software wa...

Solaris 10 (x86) : 147144-17 (deprecated)

SunOS 5.10x86: iSCSI patch. Date this patch was last updated by Sun : Feb/18/13 This plugin has been deprecated and either replaced with individual 147144 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 9 (x86) : 142786-17

Oracle Communications Calendar Server 7u5-17.22x86: core patch. Date this patch was last updated by Sun : Feb/21/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 142785-17

Oracle Communications Calendar Server 7u5-17.22: core patch. Date this patch was last updated by Sun : Feb/21/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

GLSA-201311-17 : Perl: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201311-17 Perl: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details. Impact : A local attacker could cause a Denial of Service condition or...

Avira Internet Security - avipbb.sys Filter Bypass Privilege Escalation

Avira Internet Security - avipbb.sys Filter Bypass Privilege Escalation Exploit Title: Avira internet security avipbb.sys filter bypass and privilege escalation - 0Day Date: 2013-10-17 Exploit Author: Ahmad Moghimi http://mallocat.com , https://twitter.com/mall0cat Vendor Homepage:...

Mac OS X : Java for Mac OS X 10.6 Update 17

The remote Mac OS X host has a version of Java for Mac OS X 10.6 that is missing Update 17, which updates the Java version to 1.6.065. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary code with the...

Mozilla Thunderbird ESR 17.x < 17.0.9 Multiple Vulnerabilities

The installed version of Thunderbird ESR 17.x is earlier than 17.0.9 and is, therefore, potentially affected the following vulnerabilities: - Memory issues exist in the browser engine that could allow for denial of service or arbitrary code execution. CVE-2013-1718, CVE-2013-1719 - Multiple...

Firefox ESR 17.x < 17.0.9 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox ESR 17.x is earlier than 17.0.9 and is, therefore, potentially affected by the following vulnerabilities : - Memory issues exist in the browser engine that could result in a denial of service or arbitrary code execution. CVE-2013-1718, CVE-2013-1719 - Multiple...

CVE-2013-1737

Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbird before 24.0, Thunderbird ESR 17.x before 17.0.9, and SeaMonkey before 2.21 do not properly identify the "this" object during use of user-defined getter methods on DOM proxies, which might allow remote attackers to bypass...

PT-2013-3357 · Mozilla +2 · Firefox Esr +6

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 24.0 Firefox ESR versions prior to 17.0.9 Thunderbird versions prior to 24.0 Thunderbird ESR versions prior to 17.0.9 SeaMonkey versions prior to 2.21 Description: The issue allows local users to gain...

Amazon Linux AMI : perl-libwww-perl (ALAS-2011-17)

The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof...

Firefox XMLSerializer Use After Free Vulnerability

This Metasploit module exploits a vulnerability found on Firefox 17.0 'Firefox XMLSerializer Use After Free', 'Description' = %q This module exploits a vulnerability found on Firefox 17.0 MSFLICENSE, 'Author' = 'regenrecht', Vulnerability Discovery, Analysis and PoC...

Adobe Flash Player PCM Buffer Integer Overflow (APSB13-17; CVE-2013-3347)

An integer overflow vulnerability has been reported in Adobe Flash Player...

Adobe Flash Player Parameter Memory Corruption (APSB13-17; CVE-2013-3345)

A memory corruption vulnerability has been reported in Adobe Flash Player...

Mozilla Thunderbird ESR 17.x < 17.0.8 Multiple Vulnerabilities

The installed version of Thunderbird ESR 17.x is earlier than 17.0.8 and is, therefore, potentially affected the following vulnerabilities: - Various errors exist that could allow memory corruption conditions. CVE-2013-1701 - Errors exist related to the update service and 'maintenanceservice.exe'...

Firefox ESR 17.x < 17.0.8 Multiple Vulnerabilities

The installed version of Firefox ESR 17.x is earlier than 17.0.8, and is, therefore, potentially affected by the following vulnerabilities : - Various errors exist that could allow memory corruption conditions. CVE-2013-1701 - Errors exist related to the update service and 'maintenanceservice.exe...

Firefox onreadystatechange Event DocumentViewerImpl Use After Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Firefox...