CVE-2011-3919

CVE-2011-3919 is a heap-based buffer overflow in libxml2 used by Chrome up to v16.0.912.75. The flaw occurs when decoding entity references with long names, potentially crashing the application or allowing arbitrary code execution. Public advisories across multiple vendors (Red Hat/CentOS RHSA-20...

CVE-2011-3921

CVE-2011-3921: A use-after-free in Google Chrome prior to 16.0.912.75 affects the browser’s handling of animation frames, allowing remote-triggered denial of service and potentially other impact. Affected software: Google Chrome (pre-16.0.912.75). Root cause: use-after-free in animation-frame pro...

CVE-2011-3921

Removed by vendor...

Design/Logic Flaw

kcheckpass passes a user-supplied argument to the pamstart function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122...

CVE-2011-5054

kcheckpass passes a user-supplied argument to the pamstart function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122...

CVE-2011-5054

Technical details for CVE-2011-5054 are not publicly available in the provided connected documents. Monitor for updates. The description here reiterates a PAM-related issue involving kcheckpass but no further specifics are included.

CVE-2011-5053

The CVE-2011-5053 issue concerns Wi-Fi Protected Setup (WPS) external registrar PIN authentication, where failed PINs leak information via EAP-NACK messages, enabling an attacker within range to brute-force the 8-digit PIN and obtain the network password or reconfigure the AP. Documented impact i...

Adobe Plans Critical Security Updates for Reader, Acrobat Next Week

Adobe said on Friday that it will issue critical fixes for its popular Reader and Acrobat products on Tuesday, January 10. The company said it is planning to release updates for Adobe Reader and Acrobat versions X and earlier for both the Windows and Macintosh platforms to fix a slew of critical...

CVE-2011-4616

Cross-site scripting XSS vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of greater than and less than characters...

CVE-2011-4616

Cross-site scripting XSS vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of greater than and less than characters...

CVE-2011-4616

The CVE-2011-4616 issue is a Cross-site scripting (XSS) vulnerability in the Perl module HTML-Template-Pro, caused by improper handling of in template parameters. Affected releases were before 0.9507; Fedora advisories FEDORA-2012-15482/15490 reference fixed packages such as perl-HTML-Template-P...

CVE-2011-4616

Cross-site scripting XSS vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of greater than and less than characters...

DEBIAN-CVE-2011-4619

The Server Gated Cryptography SGC implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

DEBIAN-CVE-2011-4108

The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack...

CVE-2011-4576

OpenSSL CVE-2011-4576 affects SSL 3.0 padding initialization: the implementation does not properly initialize data structures for block cipher padding, allowing a remote attacker to potentially recover plaintext by decrypting the padding data. Affected releases: OpenSSL before 0.9.8s and 1.x befo...

CVE-2011-4109

CVE-2011-4109 affects OpenSSL 0.9.8 prior to 0.9.8s. The double-free occurs when X509_V_FLAG_POLICY_CHECK is enabled, allowing remote attackers to trigger a policy-check failure with an unspecified impact. Mitigation: upgrade to OpenSSL 0.9.8s or newer (as reflected in multiple advisories; apply ...

CVE-2011-4619

OpenSSL CVE-2011-4619 concerns the Server Gated Cryptography (SGC) handshake restart handling. The vulnerability exists in OpenSSL prior to 0.9.8s and in 1.x prior to 1.0.0f, where improper handling of handshake restarts can allow remote attackers to cause a denial-of-service (CPU consumption). C...

CVE-2011-4108

The CVE-2011-4108 issue concerns the DTLS implementation in OpenSSL. Affected versions are OpenSSL before 0.9.8s and OpenSSL 1.x before 1.0.0f, where a MAC check is performed only if certain padding is valid, enabling a padding oracle that can aid plaintext recovery. This is explicitly described ...

Fedora 16 : python-virtualenv-1.7-1.fc16 (2011-17289)

This update fixes : - Bug 769067 - CVE-2011-4617 python-virtualenv XSS Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2011-4191

creationtimestamp| type| source ---|---|--- 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18327 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18328 2012-01-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18351...