99 matches found
Google Fixes More Than a Dozen Flaws in Chrome 27
Google has released Chrome 27, a new version of its browser that includes a long list of security fixes, many of which are for high-risk vulnerabilities. The company handed out more than $14,000 in rewards to researchers who reported bugs fixed in the latest iteration of Chrome. Google’s security...
Stable Channel Release
The Chrome team is excited to announce the promotion of Chrome 27 to the Stable Channel. Chrome 27.0.1453.93 for Windows, Mac, Linux, and Chrome Frame contains number of new items including: Web pages load 5% faster on average chrome.syncFileSystem API Improved ranking of predictions, improved...
Google Chrome < 14.0.835.163 Multiple Vulnerabilities (Sep 2011) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-2838
CVE-2011-2838 affects Google Chrome prior to 14.0.835.163. The vulnerability stems from improper MIME-type handling when loading plug-ins, with unspecified impact and remote attack vectors as described in the Initial Description. Connected documents corroborate that this CVE is part of Chrome/Chr...
SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 2838 / 2841 / 2842)
The SUSE Linux Enterprise 11 Kernel was updated fixing a single regression : The previous update contained an erronous fix which broke the IPv4 GRE tunneling module. This regression is fixed by this update. No other change is contained in this update, if you are not using the module, this update ...
CVE-2010-2838
CVE-2010-2838 affects Cisco Unified Communications Manager (CUCM). The vulnerability is caused by the SendCombinedStatusInfo implementation in CUCM’s SIP handling, where a malformed SIP REGISTER message can trigger a denial of service (process failure). Affected CUCM versions are 7.0(2a)SU3, 7.1(...
F-Secure Products Web Console Buffer Overflow (CVE-2006-2838)
F-Secure Corporation is an established developer of many anti-virus and security-related products. Two of the products provided by F-Secure can be deployed in enterprise environments and managed through a web interface. The web interface allows an administrator access to a console, through which ...
CVE-2009-2838
CVE-2009-2838 describes an integer overflow in Apple Mac OS X 10.5.8’s QuickLook when processing Microsoft Office files, which could allow a remote attacker to execute arbitrary code or cause a denial-of-service through a crafted document. The connected documents confirm the same core issue (Quic...
Apple Mac OS X 2009-006更新修复多个安全漏洞
BUGTRAQ ID: 36956 CVE ID:...
CVE-2008-2838
Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the module parameter...
CVE-2008-2838
creationtimestamp| type| source ---|---|--- 2008-06-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5848...
Debian: Security Advisory (DSA-1327-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-2838
CVE-2007-2838 affects gsambad 0.1.4, where the populate_conns.c routine permits local users to overflow/overwrite arbitrary files by a symlink attack on the /tmp/gsambadtmp temporary file. The underlying issue is unsafe creation/use of temporary files, enabling local privilege concerns (no remote...
Debian DSA-1327-1 : gsambad - insecure temporary files
Steve Kemp from the Debian Security Audit project discovered that gsambad, a GTK+ configuration tool for samba, uses temporary files in an unsafe manner which may be exploited to truncate arbitrary files from the local system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
[Full-disclosure] [SECURITY] [DSA 1327-1] New gsambad packages fix unsafe temporary files
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1327 [email protected] http://www.debian.org/security/ Steve Kemp July 01, 2007 -...
CVE-2006-2838
CVE-2006-2838 affects F-Secure products with a buffer overflow in the Web Console of multiple components, specifically F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40–6.42, and 6.50. The vulnerability allows an unauthenticated, remote attacker to cause a denial of ser...
CVE-2005-4225
Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands via 1 the category parameter in add.php, 2 the catdesc parameter in addcat.php, 3 the level and user parameters in adduser.php, 4 the postid parameter in...
CVE-2005-2838
CVE-2005-2838 affects myBloggie 2.1.3-beta and earlier; login.php is vulnerable to SQL injection via the username parameter, enabling remote command execution. Affected component is login.php; root cause is unsafely constructed SQL from user input. Public documents confirm the vulnerability and d...