New Version of Flashback Mac Trojan Found Using Java Exploits

A new version of the Flashback Trojan that targets Macs has appeared, and this one uses a drive-by download technique to attempt exploits of two Java vulnerabilities. The Flashback.G malware also tries to trick users into accepting a fake digital certificate, which will install the malware if the...

Mozilla Thunderbird 10.x < 10.0.1 Memory Corruption

The installed version of Thunderbird 10.x is earlier than 10.0.1 and is, therefore, potentially affected by a memory corruption vulnerability. A use-after-free error exists in the method 'nsXBLDocumentInfo::ReadPrototypeBindings' and XBL bindings are not properly removed from a hash table in the...

Firefox 10.x < 10.0.1 Memory Corruption

The installed version of Firefox 10.x is earlier than 10.0.1 and is, therefore, potentially affected by a memory corruption vulnerability. A use-after-free error exists in the method 'nsXBLDocumentInfo::ReadPrototypeBindings' and XBL bindings are not properly removed from a hash table in the even...

Google Chrome < 17.0.963.46 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 17.0.963.46 and is, therefore, affected by the following vulnerabilities: - Clipboard monitoring after a paste action is possible. CVE-2011-3953 - Application crashes are possible with excessive database usage, killing an...

Google Chrome < 17.0.963.46 Multiple Vulnerabilities

Binary data 800936.prm...

Google Chrome < 17.0.963.46 Multiple Vulnerabilities

Binary data 6312.pasl...

Wireshark 1.6.x < 1.6.5 Multiple Vulnerabilities

The installed version of Wireshark is 1.6.x before 1.6.5. This version is affected by the following vulnerabilities : - Errors exist in the parsers for '5views', 'i4b', 'iptrace', 'netmon2' and 'novell' packets that can lead to application crashes. Issues 6663, 6666, 6667, 6668, 6669, 6670 - An...

Wireshark 1.4.x < 1.4.11 Multiple Vulnerabilities

The installed version of Wireshark is 1.4.x before 1.4.11. This version is affected by the following vulnerabilities : - Errors exist in the parsers for '5views', 'i4b', 'iptrace', 'netmon2' and 'novell' packets that can lead to application crashes. Issues 6663, 6666, 6667, 6668, 6669, 6670 - An...

Firefox 8.x Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox 8.x is potentially affected by the following security issues : - An out-of-bounds memory access error exists in the 'SVG' implementation and can be triggered when 'SVG' elements are removed during a 'DOMAttrModified' event handler. CVE-2011-3658 - Various memory...

Pidgin < 2.10.1 Multiple Vulnerabilities

The version of Pidgin installed on the remote host is earlier than 2.10.1 and is potentially affected by the following issues : - A failure to validate input during the processing of UTF-8 SILC protocol messages can cause the application to crash. CVE-2011-3594, CVE-2011-4603 - A failure to...

Important: jasper

Issue Overview: Two heap-based buffer overflow flaws were found in the way JasPer decoded JPEG 2000 compressed image files. An attacker could create a malicious JPEG 2000 compressed image file that, when opened, would cause applications that use JasPer such as Nautilus to crash or, potentially,...

Adobe Acrobat < 9.4.7 Multiple Memory Corruption Vulnerabilities (APSB11-30)

The remote Windows host contains a version of Adobe Acrobat earlier than 9.4.7. Such versions are affected by multiple memory corruption vulnerabilities related to the 'Universal 3D' U3D file format and the 'Product Representation Compact' PRC component. A remote attacker could exploit this by...

Adobe Reader < 9.4.7 Multiple Memory Corruption Vulnerabilities (APSB11-30)

The remote Windows host contains a version of Adobe Reader earlier than 9.4.7. Such versions are affected by multiple memory corruption vulnerabilities related to the 'Universal 3D' U3D file format and the 'Product Representation Compact' PRC component. A remote attacker could exploit this by...

MySQL User-Defined Functions Multiple Vulnerabilities

User-defined functions in MySQL can allow a database user to cause binary libraries on the host to be loaded. The insert privilege on the table 'mysql.func' is required for a user to create user-defined functions. When running on Windows and possibly other operating systems, MySQL is potentially...

Mozilla Thunderbird < 8.0 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 8.0 and thus, is potentially affected by the following security issues : - Certain invalid sequences are not handled properly in 'Shift-JIS' encoding and can allow cross-site scripting attacks. CVE-2011-3648 - The addition of the 'Azure' graphi...

Firefox < 8.0 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 8.0 and thus, is potentially affected by the following security issues : - Certain invalid sequences are not handled properly in 'Shift-JIS' encoding, which can allow cross-site scripting attacks. CVE-2011-3648 - Profiling JavaScript files with man...

Firefox < 8.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 8.0 and thus, is potentially affected by the following security issues : - Certain invalid sequences are not handled properly in 'Shift-JIS' encoding and can allow cross-site scripting attacks. CVE-2011-3648 - The addition of the 'Azure' graphics...

CentOS Update for libpng CESA-2009:0333-01 centos2 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Opera < 11.10 Multiple Vulnerabilities

Binary data 5988.prm...

Opera < 11.10 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.10 and thus is potentially affected by the following vulnerabilities : - An unspecified vulnerability allows remote attackers to hijack searches and customizations using unspecified third-party applications. CVE-2011-263...