CentOS 5 / 6 : thunderbird (CESA-2012:0715)

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Firefox 10.0.x < 10.0.5 Multiple Vulnerabilities

The installed version of Firefox 10.0.x is potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist. CVE-2012-1937, CVE-2012-1939 - T...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2012:0710 Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CV...

CVE-2012-1939

jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via crafted JavaScript code...

CVE-2012-1939

CVE-2012-1939 affects Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5. The issue stems from jsinfer.cpp not properly determining data types, allowing crafted JavaScript to cause memory corruption and a crash, with possible remote code execution. The related MiracleLi...

CVE-2012-1939

jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via crafted JavaScript code...

Apple Safari parent.close() Invalid Pointer Code Execution

Added: 05/28/2010 CVE: CVE-2010-1939 BID: 39990 OSVDB: 64482 Background Safari is a web browser for Mac OS X and Windows. Problem Apple Safari 4.0.5 for Windows and probably earlier allows remote attackers to execute arbitrary code by enticing the user to open a crafted HTML document. The crafted...

Apple Safari parent.close() Invalid Pointer Code Execution

Added: 05/28/2010 CVE: CVE-2010-1939 BID: 39990 OSVDB: 64482 Background Safari is a web browser for Mac OS X and Windows. Problem Apple Safari 4.0.5 for Windows and probably earlier allows remote attackers to execute arbitrary code by enticing the user to open a crafted HTML document. The crafted...

CVE-2010-1939

Removed by vendor...

CVE-2010-1939

Apple Safari 4.0.5 for Windows is affected by CVE-2010-1939, a use-after-free vulnerability in window handling where a crafted HTML page opens a popup with window.open and then closes the parent window, triggering an invalid pointer. Exploitation could allow remote code execution. Documents consi...

CVE-2010-1939

creationtimestamp| type| source ---|---|--- 2010-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12573 2010-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12614...

Apple Safari window object invalid pointer vulnerability

Overview Apple Safari contains a vulnerability in the handling of window objects, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple Safari fails to properly handle references to window objects. Safari can allow a window object t...

Debian DSA-1939-1 : libvorbis - several vulnerabilities

Lucas Adamski, Matthew Gregan, David Keeler, and Dan Kaminsky discovered that libvorbis, a library for the Vorbis general-purpose compressed audio codec, did not correctly handle certain malformed ogg files. An attacker could cause a denial of service memory corruption and application crash or...

Debian Security Advisory DSA 1939-1 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory DSA 1939-1. OpenVAS Vulnerability Test $Id: deb19391.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1939-1 libvorbis Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Ipswitch WhatsUp Small Business Application Suite Directory Traversal (CVE-2005-1939)

The Ipswitch WhatsUp Small Business product is an application suite which provides monitoring and protection services for a small network. The program allows a network to be mapped, devices monitored, and failures to be detected. A directory traversal vulnerability exists in the Ipswitch Whatsup...

FreeBSD Ports: joomla15

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-1939

Cross-site scripting XSS vulnerability in the JAPurity template for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1939

CVE-2009-1939 affects Joomla! 1.5.x through 1.5.10 via the JA_Purity template. The vulnerability is a cross-site scripting (XSS) flaw in JA_Purity that allows an unauthenticated, remote attacker to inject arbitrary HTML/script through unspecified vectors, with impact including execution in the co...

Sql injection

SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...