CVE-2011-1189: Undefined Security Weakness

Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."...

PT-2011-2931

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue is related to improper box layout handling, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This can occur v...

Fedora 14 : perl-Mail-Box-2.097-1.fc14 (2011-2541)

Update perl-Mail-Box to 2.097. No longer require spamassassin. 2.097 now randomizes boundary string to avoid undemonstrated security risks with boundary guessing. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable h...

[SECURITY] Fedora 14 Update: perl-Mail-Box-2.097-1.fc14

The Mail::Box folder is a modern mail-folder manager -- at least at the moment of this writing ; It is written to replace Mail::Folder, although its interface is different...

Google Chrome Gets Updates: New Interfaces, Faster Browsing !

Tuesday, Google announced a few changes to Chrome, its engineered-for-speed web browser. The super-fast beta version that was announced a few weeks ago has already been updated to a stable version. For the Googlers working on Chrome, speed entails not only faster code the latest version of Chrome...

dir cms width byte injection vulnerability-vulnerability warning-the black bar safety net

| Description: unintentionally black box found dircms there is a wide byte to bring the injection problem, although popular over a period of time, looks like now people are not too concerned about this issue. Tested under found there are two places there is a problem: 1. http://demo. dircms...

[SECURITY] Fedora 15 Update: perl-Mail-Box-2.097-1.fc15

The Mail::Box folder is a modern mail-folder manager -- at least at the moment of this writing ; It is written to replace Mail::Folder, although its interface is different...

Fedora 15 : perl-Mail-Box-2.097-1.fc15 (2011-2493)

Update perl-Mail-Box to 2.097. No longer require spamassassin. 2.097 now randomizes boundary string to avoid undemonstrated security risks with boundary guessing. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable h...

CVE-2011-0132

Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets CSS 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes before 10.2 on Windows and Apple Safari, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of...

seamonkey security update

CentOS Errata and Security Advisory CESA-2011:0313 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS ba...

Mozilla Foundation Security Advisory 2011-02

Mozilla Foundation Security Advisory 2011-02 Title: Recursive eval call causes confirm dialogs to evaluate to true Impact: Critical Announced: March 1, 2011 Reporter: Zach Hoffman Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Security researcher...

ZDI-11-098: Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability

ZDI-11-098: Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-098 March 2, 2011 -- CVE ID: CVE-2011-0132 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple WebKit -- Vulnerabili...

Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way th...

RHEL 4 : seamonkey (RHSA-2011:0313)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Recursive eval call causes confirm dialogs to evaluate to true — Mozilla

Security researcher Zach Hoffman reported that a recursive call to eval wrapped in a try/catch statement places the browser into a inconsistent state. Any dialog box opened in this state is displayed without text and with non-functioning buttons. Closing the window causes the dialog to evaluate t...

New Trojan Targets Mac OS X Users

Researchers have found a new piece of malware that’s designed to attack the Mac OS X platform, an occurrence that’s rare enough still that each new discovery is noted separately. The new Trojan is known as the Black Hole RAT remote administration tool and is capable of giving a remote attacker...

WordPress < 3.0.5 Multiple Vulnerabilities

Binary data 5785.prm...

WordPress < 3.0.5 Multiple Vulnerabilities

According to its version number, the installation of WordPress hosted on the remote web server is affected by multiple vulnerabilities : - The application is prone to multiple cross-site scripting vulnerabilities. An attacker can exploit these issues through the 'title' field of the 'Quick/Bulk...

Emerson Network Power Cross Site Scripting

Found this search box last month which is not sanitizing any input : http://www.emersonnetworkpower.com/en-US/SearchCenter/Pages/AllResults.aspx?k=%3Cscript%3Ealertdocument.cookie%3C/script%3E&s=Network%20Power%20Contenten-USen-US Have contacted the owner but there isn't any response. May be the...

pango: Heap-based buffer overflow by rendering glyph box for certain FT_Bitmap objects

Heap-based buffer overflow in the pangoft2fontrenderboxglyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code...