[SECURITY] Fedora 11 Update: bltk-1.0.8-3.fc11

This tool kit is used to measure battery life and performance under different workloads on Linux. Test can be used with various workloads to simulate different types of laptop usage. The following workloads are currently implemented: a Idle workload - collect statistics only b Developer workload ...

[SECURITY] Fedora 12 Update: bltk-1.0.9-7.fc12

This tool kit is used to measure battery life and performance under different workloads on Linux. Test can be used with various workloads to simulate different types of laptop usage. The following workloads are currently implemented: a Idle workload - collect statistics only b Developer workload ...

Adobe Shockwave Player 3D Model Buffer Overflow Vulnerabilities

Adobe Shockwave Player is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla 3D Cloud Cross Site Scripting

Hello Bugtraq! I want to warn you about Cross-Site Scripting vulnerability in 3D Cloud mod3dcloud plugin for Joomla. Which I found and disclosed at 22.01.2010. It is similar to XSS vulnerability in JVClouds3D for Joomla http://websecurity.com.ua/3839/. About millions of flash files tagcloud.swf...

Joomla! Component 3D Cloud - tagcloud.swf Cross-Site Scripting

Joomla! Component 3D Cloud - tagcloud.swf Cross-Site Scripting source: https://www.securityfocus.com/bid/37958/info The 3D Cloud component for Joomla! is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage...

Joomla! Component 3D Cloud - 'tagcloud.swf' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37958/info The 3D Cloud component for Joomla! is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

Vulnerability in 3D Cloud for Joomla

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting уязвимости в плагине 3D Cloud mod3dcloud для Joomla. Данная уязвимость идентична XSS уязвимости в JVClouds3D для Joomla http://websecurity.com.ua/3839/. Про миллионы флешек tagcloud.swf уязвимых к XSS атакам я упоминал в своей статье XSS...

Integer overflow

Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...

Heap overflow

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...

CVE-2009-4003

Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via 1 an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via 2 an unspecified 3D...

CVE-2009-4002

Adobe Shockwave Player is affected by CVE-2009-4002 (buffer overflow in 3D model processing) in versions prior to 11.5.6.606. The vulnerability allows remote code execution and is discussed alongside CVE-2009-4003 (integer overflows) in multiple advisories. Affected software: Shockwave Player on ...

CVE-2009-4002

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...

Secunia Research: Adobe Shockwave Player 3D Model Buffer Overflow

====================================================================== Secunia Research 20/01/2010 - Adobe Shockwave Player 3D Model Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2009-4002: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.6.606 allows remote attackers to execute arbitrary code via a crafted 3D model in a Shockwave file...

CVE-2009-3954

The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a "DLL-loading vulnerability."...

Google SketchUp 'lib3ds' 3DS Importer Memory Corruption

Advisory ID Internal CORE-2009-1209 1. Advisory Information Title: Google SketchUp 'lib3ds' 3DS Importer Memory Corruption Advisory Id: CORE-2009-1209 Advisory URL:www.coresecurity.com/core-labs/advisories/google-sketchup-vulnerability Date published: 2010-01-13 Date of last update: 2010-01-12...

Blender: Untrusted search path

Background Blender is a 3D Creation/Animation/Publishing System. Description Steffen Joeris reported that Blender's BPYinterface calls PySysSetArgv in such a way that Python prepends sys.path with an empty string. Impact A local attacker could entice a user to run "blender" from a directory...

DAZ Studio - Arbitrary Command Execution

DAZ Studio - Arbitrary Command Execution -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ DAZ Studio Arbitrary Command Execution 1. Advisory Information Title: DAZ Studio Arbitrary Command Execution Advisory Id:...

CVE-2009-3577

Autodesk 3D Studio Max 3DSMax 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks."...

CVE-2009-3577

Autodesk 3DS Max applications (versions 6–9 and 2008–2010) are affected by a vulnerability in MaxScript application callbacks that allows remote code execution when a crafted .max file embeds a MAXScript statement invoking DOSCommand. Root cause: unsanitized data binding of MaxScript to callbacks...