Ubuntu 11.04 : firefox vulnerabilities (USN-1157-1)

Bob Clary, Kevin Brosnan, Gary Kwong, Jesse Ruderman, Christian Biesinger, Bas Schouten, Igor Bukanov, Bill McCloskey, Olli Pettay, Daniel Veditz and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could possibly execute arbitrary code with the...

RHEL 4 / 5 : thunderbird (RHSA-2011:0887)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:0887 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. A flaw was found in the way Thunderbird handled malformed JPEG images. An...

RHEL 4 : seamonkey (RHSA-2011:0888)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

Mozilla Thunderbird 3.1.x < 3.1.11 Multiple Vulnerabilities

Binary data 5966.prm...

Firefox 3.6 < 3.6.18 Multiple Vulnerabilities

The installed version of Firefox 3.6 is earlier than 3.6.18. Such versions are potentially affected by the following security issues : - Multiple memory safety issues can lead to application crashes and possibly remote code execution. CVE-2011-2374, CVE-2011-2376, CVE-2011-2364, CVE-2011-2365 - A...

Mozilla Thunderbird 3.1 < 3.1.11 Multiple Vulnerabilities

The installed version of Thunderbird 3.1 is earlier than 3.1.11. Such versions are potentially affected by the following security issues : - Multiple memory safety issues can lead to application crashes and possibly remote code execution. CVE-2011-2374, CVE-2011-2376, CVE-2011-2364, CVE-2011-2365...

CVE-2010-2377

CVE-2010-2377 affects Oracle’s PeopleSoft Enterprise PeopleTools component (PeopleTools 8.49.27 and 8.50.10) and allows remote authenticated users to compromise integrity via unspecified vectors. The connected Oracle July 2010 Critical Patch Update documents this CVE among vulnerabilities fixed i...

SLES10: Security update for Websphere Community Edition

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: websphere-asce More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText:...

CVE-2009-2377

The CVE-2009-2377 entry concerns the AVAX-software Avax Vector ActiveX 1.3 with the ActiveX control avPreview.ocx. A buffer overflow can be triggered in the PrinterName property, allowing remote attackers to cause a denial of service (application crash). Affected component: Avax Vector ActiveX 1....

CVE-2009-2377

creationtimestamp| type| source ---|---|--- 2009-06-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33066...

FreeBSD : gnutls -- 'gnutls_handshake()' Denial of Service (d864a0a7-6f27-11dd-acfe-00104b9e1a4a)

Secunia reports : A vulnerability has been reported in GnuTLS, which can potentially be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to a use-after-free error when an application calls 'gnutlshandshake' for an already valid session and can...

CVE-2008-2377

CVE-2008-2377 is a use-after-free in GNU TLS: the _gnutls_handshake_hash_buffers_clear function in libgnutls (GnuTLS 2.3.5–2.4.0) can allow a remote attacker to crash the service or potentially run arbitrary code during TLS handshakes, due to improper handling of a deallocated libgcrypt handle. A...

SuSE 10 Security Update : Mono (ZYPP Patch Number 2377)

By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2002-2377

The provided data confirms a cross-site scripting (XSS) vulnerability in ZAP 1.0.3, specifically in addentry.cgi. The flaw allows remote attackers to inject arbitrary SSI directives, web scripts, and HTML through the entry field. Affected component: addentry.cgi function of ZAP 1.0.3. Underlying ...

CVE-2007-2377

The CVE-2007-2377 vulnerability affects the Getahead Direct Web Remoting (DWR) framework up to version 1.1.4, where JSON data is exchanged without an accompanying protection scheme. This enables JavaScript Hijacking: an attacker can retrieve sensitive data by loading a page that fetches data via ...

CVE-2004-2377

The CVE-2004-2377 entry affects Alcatel OmniSwitch 7000 and 7800. It permits remote attackers to cause a denial of service (reboot) via certain network scans, demonstrated with a Nessus scan of ports 1–1024 with safe-checks disabled. The NVD/CVE records note a network-accessible impact with parti...

CVE-2005-2377

CVE-2005-2377 concerns nss_ldap, where versions 181 through 212 (before 213) used in Mandrake Corporate Server, Mandrake 10.0, and other OSes fail to handle a SIGPIPE when issuing an LDAP search. This can allow a remote attacker to cause a denial of service by making the LDAP server unavailable, ...

CVE-2004-2377

Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service reboot via certain network scans, as demonstrated using a Nessus port scan of ports 1 through 1024 with safe-checks disabled...