OpenSSL -- DTLS Denial of Service

The OpenSSL Team reports: A flaw in the fix to CVE-2011-4108 can be exploited in a denial of service attack. Only DTLS applications using OpenSSL 1.0.0f and 0.9.8s are affected...

Ubuntu 11.04 / 11.10 : libav vulnerabilities (USN-1333-1)

Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the...

SuSE 11.1 Security Update : Acrobat Reader (SAT Patch Number 5649)

Acrobat Reader was updated to version 9.4.7 to fix two security issues. CVE-2011-2462 / CVE-2011-4369 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

CVE-2011-3328

The pnghandlecHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service divide-by-zero error and application crash via a malformed PNG image containing a cHRM chunk associated with a certain zero value...

CVE-2011-3328

The CVE-2011-3328 issue affects libpng 1.5.4 with color-correction enabled, where png_handle_cHRM in pngrutil.c mishandles a cHRM chunk with a zero value, allowing a remote attacker to cause a denial of service (divide-by-zero and crash). Connected records confirm this vulnerability and indicate ...

acroread (important)

Acrobat Reader was updated to version 9.4.7 to fix security issues CVE-2011-2462, CVE-2011-4369...

USN-1333-1: Libav vulnerabilities

Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the...

Strawberry Perl Modules Multiple Vulnerabilities - Windows

Strawberry Perl is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome and Apple Safari Apple Webkit Ruby Memory Corruption (CVE-2011-1440)

A memory corruption vulnerability has been reported within Apple WebKit, a component of Apple Safari and Google Chrome web browsers and Apple iTunes...

CentOS 6 : libxml2 (CESA-2012:0018)

Updated libxml2 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Cisco NX-OS Interface Commands Privilege Escalation (CVE-2011-2569)

A command execution vulnerability has been reported in Cisco NX-OS...

Mozilla Firefox 3.6.16 mChannel use after free vulnerability

Exploit for macOS platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

PHP "zend_strndup()"多个空指针引用拒绝服务漏洞

BUGTRAQ ID: 51417 CVE ID: CVE-2011-4153 PHP是一种在电脑上运行的脚本语言，主要用途是在于处理动态网页，包含了命令行运行接口或者产生图形用户界面程序。 PHP在检验zendstrndup调用的返回值的实现上存在多个拒绝服务漏洞，攻击者可利用这些漏洞造成受影响应用崩溃，拒绝服务合法用户。 0 PHP 5.3.8 厂商补丁： PHP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.php.net...

Oracle Database CTXSYS.DRVDISP.TABLEFUNC_ASOWN Buffer Overflow (CVE-2011-2301)

A buffer overflow vulnerability has been reported in Oracle's Database server...

SuSE 11.1 Security Update : OpenSSL (SAT Patch Number 5635)

Various security vulnerabilities have been fixed in OpenSSL : - DTLS plaintext recovery attack. CVE-2011-4108 - double-free in Policy Checks. CVE-2011-4109 - uninitialized SSL 3.0 padding. CVE-2011-4576 - malformed RFC 3779 data can cause assertion failures. CVE-2011-4577 - SGC restart DoS attack...

Unbound < 1.4.14 / 1.4.13p2 Multiple DoS

According to its self-reported version number, the remote Unbound DNS resolver is affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists due to an attempt to free unallocated memory during the processing of duplicate CNAME records in a signed zone. An...

Symantec Endpoint Protection Manager Cross-Site Request Forgery and Cross-Site Scripting

SUMMARY Symantec Endpoint Protection Manager 12.1 web console is susceptible to cross-site scripting and cross-site request forgery that could potentially lead to arbitrary code execution. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Endpoint Protection | 12.1 ...

Fedora Update for kernel FEDORA-2012-0492

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1329-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZDI-12-014 : HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-014 : HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-014 January 12, 2012 - -- CVE ID: CVE-2011-4787 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -...