CVE-2011-1189

Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."...

UBUNTU-CVE-2011-1189

Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."...

CVE-2011-1189

Removed by vendor...

CVE-2011-1189

Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."...

CVE-2011-1189

CVE-2011-1189 affects Google Chrome prior to 10.0.648.127. The vulnerability arises from improper box layout in the browser’s rendering, allowing remote attackers to cause a denial of service or potentially other impact via unknown vectors that lead to a “stale node.” Exploitation details are not...

Fedora 14 : perl-Mail-Box-2.097-1.fc14 (2011-2541)

Update perl-Mail-Box to 2.097. No longer require spamassassin. 2.097 now randomizes boundary string to avoid undemonstrated security risks with boundary guessing. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable h...

[SECURITY] Fedora 14 Update: perl-Mail-Box-2.097-1.fc14

The Mail::Box folder is a modern mail-folder manager -- at least at the moment of this writing ; It is written to replace Mail::Folder, although its interface is different...

Google Chrome Gets Updates: New Interfaces, Faster Browsing !

Tuesday, Google announced a few changes to Chrome, its engineered-for-speed web browser. The super-fast beta version that was announced a few weeks ago has already been updated to a stable version. For the Googlers working on Chrome, speed entails not only faster code the latest version of Chrome...

dir cms width byte injection vulnerability-vulnerability warning-the black bar safety net

| Description: unintentionally black box found dircms there is a wide byte to bring the injection problem, although popular over a period of time, looks like now people are not too concerned about this issue. Tested under found there are two places there is a problem: 1. http://demo. dircms...

[SECURITY] Fedora 15 Update: perl-Mail-Box-2.097-1.fc15

The Mail::Box folder is a modern mail-folder manager -- at least at the moment of this writing ; It is written to replace Mail::Folder, although its interface is different...

Fedora 15 : perl-Mail-Box-2.097-1.fc15 (2011-2493)

Update perl-Mail-Box to 2.097. No longer require spamassassin. 2.097 now randomizes boundary string to avoid undemonstrated security risks with boundary guessing. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable h...

CVE-2011-0132

Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets CSS 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

seamonkey security update

CentOS Errata and Security Advisory CESA-2011:0313 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS ba...

ZDI-11-098: Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability

ZDI-11-098: Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-098 March 2, 2011 -- CVE ID: CVE-2011-0132 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple WebKit -- Vulnerabili...

Mozilla Foundation Security Advisory 2011-02

Mozilla Foundation Security Advisory 2011-02 Title: Recursive eval call causes confirm dialogs to evaluate to true Impact: Critical Announced: March 1, 2011 Reporter: Zach Hoffman Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Security researcher...

RHEL 4 : seamonkey (RHSA-2011:0313)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way th...

Recursive eval call causes confirm dialogs to evaluate to true — Mozilla

Security researcher Zach Hoffman reported that a recursive call to eval wrapped in a try/catch statement places the browser into a inconsistent state. Any dialog box opened in this state is displayed without text and with non-functioning buttons. Closing the window causes the dialog to evaluate t...

New Trojan Targets Mac OS X Users

Researchers have found a new piece of malware that’s designed to attack the Mac OS X platform, an occurrence that’s rare enough still that each new discovery is noted separately. The new Trojan is known as the Black Hole RAT remote administration tool and is capable of giving a remote attacker...

WordPress < 3.0.5 Multiple Vulnerabilities

According to its version number, the installation of WordPress hosted on the remote web server is affected by multiple vulnerabilities : - The application is prone to multiple cross-site scripting vulnerabilities. An attacker can exploit these issues through the 'title' field of the 'Quick/Bulk...