CVE-2011-3912

CVE-2011-3912 describes a use-after-free in Google Chrome SVG filters that could cause a denial of service or other impact. Affected: Chrome prior to 16.0.912.63. Remediation: upgrade to Chromium/Chrome 16.0.912.75 or newer (as reflected in Gentoo GLSA 201201-03 and related advisories). If exploi...

CVE-2011-3913

Removed by vendor...

CVE-2011-3907

Chromium and V8 are affected by multiple vulnerabilities including CVE-2011-3907 (URL bar spoofing) as part of the Chromium/Chromium-based web engine family. Public entries in Gentoo GLSA-201201-03 describe that a number of issues could allow a context‑dependent attacker to lure a user to a craft...

CVE-2011-3910

CVE-2011-3910 concerns Google Chrome/Chromium prior to 16.0.912.63, where improper handling of YUV video frames could enable a remote attacker to trigger an out-of-bounds read and cause a denial of service. The connected advisories indicate this vulnerability is addressed by updating Chromium to ...

CVE-2011-3917

CVE-2011-3917: A stack-based buffer overflow in Chrome’s FileWatcher (affected product: Chrome/Chromium) allows remote denial of service or possibly other impact for builds before 16.0.912.63. The connected advisories document public patches and upgrades for Chromium, recommending upgrade to Chro...

CVE-2011-3909

Technical details for CVE-2011-3909 are not publicly provided in the connected documents. Monitor for updates.

CVE-2011-3914

CVE-2011-3914 affects the i18n functionality in Google V8 used by Chrome/Chromium prior to version 16.0.912.63, enabling a remote attacker to trigger an out-of-bounds write that can cause a denial of service and possibly other impact. The connected Gentoo GLSA notes multiple Chromium/V8 vulnerabi...

CVE-2011-3916

Technical details about CVE-2011-3916 are not publicly available in the provided documents. Monitor for updates.

Description of the update for Lync Server 2010: December 2011

Describes the update for Lync Server 2010 that is dated December 2011.SummaryThis article describes the update for Microsoft Lync Server 2010 that is dated December 2011. ResolutionMicrosoft Download CenterThe following file is available for download from the Microsoft Download Center:Download th...

Design/Logic Flaw

Untrusted search path vulnerability in FFFTP before 1.98d allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file, a...

CVE-2011-4202

CVE-2011-4202 affects the Tadasoft Restorepoint 3.2 evaluation image. The vulnerability is privilege escalation due to insecure file permissions: scripts writable by www allow local users to modify a script and gain root via sudo-executed scripts. Public disclosures indicate this applies to the 3...

CVE-2011-4201

CVE-2011-4201 affects Tadasoft Restorepoint 3.2-evaluation: remote_support.cgi in the stop_remote_support action accepts shell metacharacters via pid1 or pid2, enabling an unauthenticated remote attacker to execute commands with www user privileges. Impact can include root access before license a...

CVE-2011-4266

CVE-2011-4266 affects FFFTP prior to version 1.98d, via an untrusted search path that lets local users gain privileges using a Trojan horse executable in the same directory read to load an extensionless file (demonstrated with README.exe). The vulnerability is rooted in unsafe loading of executab...

Microsoft Publisher Malformed File Parsing Memory Corruption (MS11-091; CVE-2011-3412)

A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is due to an error in the way Microsoft Publisher handles memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to open a...

Microsoft PowerPoint OfficeArt Shape Remote Code Execution (MS11-094; CVE-2011-3413)

A remote code execution vulnerability has been reported in Microsoft PowerPoint. The vulnerability is due to memory corruption in PowerPoint while reading an invalid record in a specially crafted PowerPoint file. A remote attacker may exploit this vulnerability by convincing a target user to open...

Medium: nginx

Issue Overview: Heap-based buffer overflow in compression-pointer processing in core/ngxresolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service daemon crash or possibly have unspecified other impact via a long response. Affected Packages: nginx Issue Correction: Run...

KLA10322 RLF & WLF vulnerabilities in Serv-U

A directory traversal was found in Serv-U FTP Server. By exploiting this vulnerability malicious users can read and write arbitrary files. This vulnerability can be exploited remotely via a specially designed path. Original advisories - Exploitation Public exploits exist for this vulnerability...

MS11-089: Description of the security update for Visio 2010: December 13, 2011

Describes the security update for Microsoft Visio 2010 that was released on December 13, 2011.INTRODUCTIONMicrosoft has released security bulletin MS11-089. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Unfixed XSS vulnerability at www.webrankinfo.com

Security researcher Atmon3r, has submitted on 13/12/2011 a cross-site-scripting XSS vulnerability affecting www.webrankinfo.com, which at the time of submission ranked 2141 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

Microsoft Windows OLE Property CVE-2011-3400 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...