SuSE 11.1 Security Update : webkit (SAT Patch Number 4765)

Webkit version 1.2.7 fixes several security issues. CVE-2010-2441 / CVE-2010-2901 / CVE-2010-4042 / CVE-2010-4492 / CVE-2010-4493 / CVE-2010-4578 / CVE-2011-0482 / CVE-2011-0778 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : libwebkit (openSUSE-SU-2011:0482-1)

This version upgrade of webkit to 1.2.7 fixes the following bugs : - CVE-2010-2441: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N: Permissions, Privileges, and Access Control CWE-264 - CVE-2010-2901: CVSS v2 Base Score: 3.7 AV:L/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 - CVE-2010-4042:...

Debian: Security Advisory (DSA-2188-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: webkit-gtk2

The remote host is missing an update to the system as announced in the referenced advisory. VID 35ecdcbe-3501-11e0-afcd-0015f2db7bde OpenVAS Vulnerability Test $ Description: Auto generated from VID 35ecdcbe-3501-11e0-afcd-0015f2db7bde Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Fedora 13 : webkitgtk-1.2.7-1.fc13 (2011-1224)

Fixes the following CVEs: CVE-2010-4492 CVE-2010-4493 CVE-2011-0482 CVE-2010-4199 CVE-2010-4578 CVE-2010-4040 CVE-2011-0778 CVE-2010-2901 CVE-2010-4042 - Fixes a regression caused by earlier fix for CVE-2010-1791. This caused webkitgtk to crash on certain sites with JavaScript. Note that Tenable...

CVE-2010-4493

Summary: CVE-2010-4493 is a use-after-free in Google Chrome prior to 8.0.552.215, related to handling of mouse dragging events, causing a denial of service when exploited remotely. The connected sources confirm the issue in Chrome/WebKit contexts and document remediation via browser/webkit update...

CVE-2010-4493

Removed by vendor...

CVE-2010-4493

Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service via vectors related to the handling of mouse dragging events...

CVE-2009-4493

CVE-2009-4493 affects Orion Application Server 2.0.7. The Vulnerability arises from writing to logs without sanitizing non‑printable characters, enabling an attacker to send an HTTP request containing terminal escape sequences that could modify a window title or, in the worst case, execute arbitr...

CVE-2009-4493

Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

Orion Application Server Terminal Escape Sequence in Logs Command Injection Vulnerability

Orion Application Server is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Orion Application Server 2.0.7 is vulnerable; other versions may also be...

CVE-2009-4493

creationtimestamp| type| source ---|---|--- 2010-01-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33503...

CVE-2008-4493

The CVE describes a vulnerability in the Microsoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709) used by Microsoft Digital Image 2006 Starter Edition. The flaw arises from the AddString and Post methods, with a modified PostURL that allows an attacker to construct an HTTP POST request to...

CVE-2008-4493

creationtimestamp| type| source ---|---|--- 2008-10-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6699...

CVE-2007-4493

CVE-2007-4493 affects eZ Publish prior to 3.8.9 and prior to 3.9.3; it arises from improper permission checks on module views that lack a policy function, with unknown impact and attack vectors, demonstrated by a discount vulnerability in the shop module. Remediation exists in the referenced upgr...

IBM Lotus Notes DUNZIP32.dll Buffer Overflow Vulnerability

Networksecurity.fi Security Advisory 06-09-2006 Title: IBM Lotus Notes DUNZIP32.dll buffer overflow vulnerability Criticality: High 3/3 Affected software: IBM Lotus Notes versions 6.5.4, 5.0.10 and prior Author: Juha-Matti Laurio juha-matti.laurio at netti.fi Date: 6th September, 2006 Advisory ID...

CVE-2006-4493

xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4493

xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4493

The affected component is xbiff2 1.9. It creates $HOME/.xbiff2rc in the user’s home directory with insecure permissions, enabling local users to access sensitive information such as login credentials. This summary relies on the CVE description and notes the provenance is unknown (third‑party info...

CVE-2005-4493

CVE-2005-4493 describes a cross-site scripting (XSS) vulnerability in SpearTek 6.0 and earlier . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters . CVSS v2 base score reported as 6.8 (Medium) with network attack vector, no authentication, ...