CVE-2011-3041

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of class attributes...

CVE-2011-3032

CVE-2011-3032 is a use-after-free vulnerability in Google Chrome's SVG value handling, affecting Chrome versions prior to 17.0.963.65. Remote attackers could cause a denial of service or possibly other impact via SVG value handling vectors. The issue is mitigated by updating Chrome to 17.0.963.65...

CVE-2011-3036

CVE-2011-3036 affects Google Chrome prior to 17.0.963.65, where a bad cast during line box handling could allow a remote attacker to cause a denial of service (and possibly other impact) via a crafted document. Root cause: bad cast in line box handling. Remediation: update Chrome to 17.0.963.65 o...

CVE-2011-3038

CVE-2011-3038 is a use-after-free in multi-column handling affecting Chromium/Chrome as documented in connected advisories. OpenSUSE notes a patch in openSUSE-SU-2012:0374-1 for Chromium v8, addressing High CVE-2011-3038 among others, and lists updates to Chromium 19.0.1060–19.0.1066 with related...

CVE-2011-3042

CVE-2011-3042 is aUse-after-free in table section handling in Chrome/Chromium prior to 17.0.963.65. Connected updates (openSUSE-SU-2012:0374-1) patch Chromium, upgrading to around 19.x and addressing multiple CVEs including 2011-3042. Remediation: apply the openSUSE security update to obtain the ...

CVE-2011-3039

Removed by vendor...

CVE-2011-3038

Removed by vendor...

CVE-2011-3034

Removed by vendor...

Google Chrome < 17.0.963.65 Multiple Vulnerabilities

Binary data 800899.prm...

HP Network Node Manager i Multiple Cross-Site Scripting (CVE-2011-4155)

Multiple cross-site scripting vulnerabilities have been reported in HP Network Node Manager i NNMi...

Debian DSA-2425-1 : plib - buffer overflow

It was discovered that PLIB, a library used by TORCS, contains a buffer overflow in error message processing, which could allow remote attackers to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Apache HTTPD mod_proxy Security Bypass (CVE-2011-3368)

A security bypass vulnerability has been reported in Apache HTTP Server...

CVE-2011-3043

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a flexbox aka flexible box in conjunction with the floating of elements...

[SECURITY] [DSA 2425-1] plib security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2425-1 [email protected] http://www.debian.org/security/ Florian Weimer March 04, 2012 http://www.debian.org/security/faq -...

Important: libpng

Issue Overview: A heap-based buffer overflow flaw was found in libpng. An attacker could create a specially-crafted PNG image that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of the user running the application...

Medium: texlive

Issue Overview: TeX Live embeds a copy of t1lib. The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics AFM files. If a specially-crafted...

CVE-2011-1385

IBM AIX 5.3, 6.1, and 7.1, and VIOS 2.1.x and 2.2.x, allows remote attackers to cause a denial of service system crash via an ICMP Echo Reply packet that contains 1 in the Identifier field, a different vulnerability than CVE-2012-0194...

CVE-2012-0321

CVE-2012-0321 reports a DoS vulnerability in the device driver of Kingsoft Internet Security 2011. The issue allows local users to crash the system via a crafted application. Affected product: Kingsoft Internet Security 2011 (device driver component). Root cause details are not explicitly describ...

CVE-2011-4189

Novell GroupWise Client 8.x before 8.0.2 post-HP3 is vulnerable to a heap/ buffer overflow while parsing Address Book (.nab) files with an overly long email address. This could allow a remote attacker to execute arbitrary code or cause a crash by persuading a user to open a crafted NAB file. The ...

CVE-2011-1385

CVE-2011-1385 affects IBM AIX platforms (AIX 5.3, 6.1, 7.1 and VIOS 2.1.x/2.2.x). A remote attacker could cause a denial of service (system crash) by sending a crafted ICMP Echo Reply with Identifier = 1. Connected advisories also map CVE-2012-0194 to the AIX bos.net.tcp.client component, where e...