Buffer overflow

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function...

PYSEC-2010-30

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function...

CVE-2010-1666

Removed by vendor...

CVE-2010-1666

CVE-2010-1666 affects python-cjson 1.0.5 with UCS-4 encoding enabled. A buffer overflow in cjson.encode may allow a context-dependent attacker to trigger a denial of service (crash) or potentially other impact via crafted Unicode input. Public-visibility details in connected docs include: Fedora ...

CVE-2010-1666

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function...

Fedora 12 : cronie-1.4.3-4.fc12 (2010-2751)

CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

Fedora 12 : fuse-2.8.1-4.fc12 (2010-1159)

Fixed CVE-2009-3297 rhbz 558833 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 11 : DevIL-1.7.8-4.fc11 (2009-13255)

Fri Dec 4 2009 Hans de Goede 1.7.8-4 - Fix DICOM Processing Buffer Overflow Vulnerability CVE-2009-3994 542700 - Fri Aug 21 2009 Hans de Goede 1.7.8-3 - Switch Source0 to respun upstream tarbal added a missing header - Fri Jul 24 2009 Fedora Release Engineering - 1.7.8-2 - Rebuilt for...

Fedora 12 : pdfedit-0.4.3-4.fc12 (2010-1377)

Add patch from upstream to fix several security issues in xpdf code: CVE-2009-1188/CVE-2009-3603, CVE-2009-3604, CVE-2009-3606, CVE-2009-3608, CVE-2009-3609 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

This Week in Security: Patchapalooza, iOS 4 and the Irrelevance of Full Disclosure

This week was one of the ones that my colleague Ryan Naraine often refers to as a Patchapalooza, with each day bringing a new set of fixes for Firefox, Opera, the iPhone or some other device or application. And it didn’t even include Microsoft or Adobe. Go figure. The week also included the...

Apple Releases iOS 4

Apple has released iOS 4 for iPhone 3G and later, and iPod touch 2nd generation and later, to address multiple vulnerabilities across several packages. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, disclose sensitive information, bypas...

RHEL 3 / 4 : seamonkey (RHSA-2010:0499)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Hardcoded credentials

WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAME element, which allows remote attackers to spoof the user interface via a crafted HTML document...

Softbiz Resource Repository Script - Blind SQL Injection

Softbiz Resource Repository Script - Blind SQL Injection $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ Softbiz Resource repository script Blind SQL Vulnerability Normal version $ Author : Sangteamtham $ Home : Hcegroup.net & vnbrain.net $ Download...

CentOS 3 / 4 / 5 : cups (CESA-2010:0490)

Updated cups packages that fix three security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Chrome Engine 4 - Denial of Service

source: https://www.securityfocus.com/bid/40945/info Chrome Engine 4 is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. Chrome Engine version 4 is vulnerable; other versions may also be affecte...

Chrome Engine 4 - Denial of Service

Chrome Engine 4 - Denial of Service source: https://www.securityfocus.com/bid/40945/info Chrome Engine 4 is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. Chrome Engine version 4 is vulnerable...

CentOS 5 : openoffice.org (CESA-2010:0459)

Updated openoffice.org packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 4 : kernel (RHSA-2010:0474)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0474 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: a NULL pointer dereference flaw was...

AIX 6.1 TL 4 : bos.net.nfs.client (U833953)

The remote host is missing AIX PTF U833953, which is related to the security of the package bos.net.nfs.client. An integer overflow vulnerability was reported in the rpc.pcnfsd service within the several systems. The rpc.pcnfsd daemon handles requests from PC-NFS clients for authentication servic...