CVE-2007-5617

CVE-2007-5617 concerns VMware Workstation/Player with an unspecified vulnerability in untrusted VM images that prevents launching. Affected products/versions: VMware Player 1.0.x before 1.0.5, 2.0 before 2.0.1; VMware Workstation 5.x before 5.5.5 and 6.x before 6.0.1. The impact is not detailed i...

CVE-2007-5618

CVE-2007-5618 refers to an unquoted Windows search path vulnerability in VMware products (Workstation, Player, Server, ACE) prior to specified fixed versions. The issue allows local users to gain privileges by exploiting improperly quoted paths in Authorization and other services. Affected ranges...

CVE-2007-5337

CVE-2007-5337 affects Mozilla Firefox pre-2.0.0.8 and SeaMonkey pre-1.1.5 on Linux with gnome-vfs. The vulnerability lets a remote attacker cause the target to expose files by creating a page containing URIs using smb: or sftp: that access other files on the server, potentially reading data from ...

CVE-2007-5334

The CVE-2007-5334 entry affects Mozilla Firefox up to version 2.0.0.8 and SeaMonkey up to 1.1.5, per mfsa2007-33. The vulnerability arises from the hidechrome attribute in XUL documents, allowing a window chrome to be hidden and enabling phishing/spoofing against display of the window titlebar. C...

CVE-2007-5338

CVE-2007-5338 is a vulnerability affecting Mozilla Firefox and SeaMonkey. The issue allows remote attackers to execute arbitrary JavaScript with user privileges by abusing Script and modifying XPCNativeWrappers, causing the script to run when a chrome action is performed. The description directly...

CVE-2007-5340

Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service crash via crafted HTML that triggers memory corruption...

CVE-2007-5340

CVE-2007-5340 is part of multiple vulnerabilities in the Javascript engine of Mozilla Firefox (<2.0.0.8), Thunderbird (<2.0.0.8), and SeaMonkey (

CVE-2007-5339

CVE-2007-5339 is in Mozilla Firefox (pre-2.0.0.8), Mozilla Thunderbird (pre-2.0.0.8) and SeaMonkey (pre-1.1.5). The flaws arise from crafted HTML triggering memory corruption or assert errors, leading to remote denial of service (crash); some entries also indicate potential arbitrary code executi...

Apache Tomcat - WebDAV SSL Remote File Disclosure

Apache Tomcat - WebDAV SSL Remote File Disclosure !/usr/bin/perl ================================================================ Apache Tomcat Remote File Disclosure Zeroday Xploit - With support for SSL MoDiFiEd version by : h3rcul3s ORiGiNaL Version by : kcdarookie aka eliteb0y / 2007...

Unfixed XSS vulnerability at equality.ipet.gr

Security researcher St@R-gaZ3r, has submitted on 21/10/2007 a cross-site-scripting XSS vulnerability affecting equality.ipet.gr, which at the time of submission ranked 2885527 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/10/2007. It is...

Unfixed XSS vulnerability at www.cozitravel.com

Security researcher St@R-gaZ3r, has submitted on 21/10/2007 a cross-site-scripting XSS vulnerability affecting www.cozitravel.com, which at the time of submission ranked 5298851 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It is...

Immunity Canvas: REAL_IMPORT

Name| realimport ---|--- CVE| CVE-2007-5601 Exploit Pack| CANVAS Description| Real Player ActiveX Import Overflow Notes| CVE Name: CVE-2007-5601 VENDOR: Real URL: http://www.us-cert.gov/cas/techalerts/TA07-297A.html VersionsAffected: Repeatability: Infinite References: CVE Url:...

CVE-2007-5601

CVE-2007-5601 describes a stack-based buffer overflow in RealNetworks RealPlayer components (MPAMedia.dll) when handling playlist names, exploitable via the IERPCtl ActiveX control (ierpplug.dll) by sending a long Import() string. Affected products include RealOne Player and RealPlayer 10.x (incl...

firefox security update

CentOS Errata and Security Advisory CESA-2007:0979 Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source...

thunderbird security update

CentOS Errata and Security Advisory CESA-2007:0981 Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a...

[SECURITY] [DSA 1392-1] New xulrunner packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1392-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20th, 2007 http://www.debian.org/security/faq -...

Serious holes affecting SiteBar 3.3.8

All, As a result of a short security audit of SiteBar, a number of security holes were found. The holes included code execution, a malicious redirect and multiple cases of Javascript injection. After liasing with the developers, the holes have been patched. Attached are the advisory and patch...

[CAID 35754]: CA Host-Based Intrusion Prevention System (CA HIPS) Server Vulnerability

Title: CAID 35754: CA Host-Based Intrusion Prevention System CA HIPS Server Vulnerability CA Vuln ID CAID: 35754 CA Advisory Date: 2007-10-18 Reported By: David Maciejak Impact: A remote attacker can take unauthorized administrative action. Summary: CA Host-Based Intrusion Prevention System CA HI...

DSA-1392-1 xulrunner - several vulnerabilities

Bulletin has no description...

RealPlayer playlist name stack buffer overflow

Overview RealPlayer contains a stack buffer overflow in the handling of playlist names, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description RealNetworks RealPlayer is a multimedia application that allows users to view local and remote...