5689 matches found
K-Meleon Concurrency-related Vulnerability
The newest version of K-Meleon browser is affected to disclosed on Bugtraq recently. When using test link http://lcamtuf.coredump.cx/ffoxdie3.html browser crashed after a delay of some seconds. No user interaction was needed. Affected versions: Vulnerability has been confirmed in K-Meleon 1.0.1 i...
K-Meleon NSS Library Memory Leak Vulnerability
Description: K-Meleon 0.9.13 is susceptible to affected to DoS-type memory leak vulnerability disclosed in Mozilla Network Security Services library implementation. This library is shipped with the newest K-Meleon browser. Reportedly the Network Security Services NSS library will leak 256 bytes o...
US-CERT Technical Cyber Security Alert TA06-167A -- Microsoft Excel Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-167A Microsoft Excel Vulnerability Original release date: June 16, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Excel 2003 Microsoft Excel XP 2002 Microsoft Excel for...
Microsoft DXImageTransform Light filter fails to validate input
Overview The Microsoft DXImageTransform Light COM object fails to validate input, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft COMMicrosoft COM is a technology that allows programmers to create reusable software components that can be...
HP-UX PHSS_33129 : HP-UX Running Motif Applications Remote Arbitrary Code Execution, Denial of Service (DoS) (HPSBUX02119 SSRT4848 rev.1)
s700800 11.00 X/Motif 32bit Runtime Periodic Patch : Potential security vulnerabilities have been identified with Motif applications running on HP-UX. The potential vulnerabilities could be exploited to allow remote execution of arbitrary code or Denial for Service DoS. References: CERT VU537878,...
HP-UX PHNE_32006 : HP-UX Running sendmail, Remote Execution of Arbitrary Code (HPSBUX02108 SSRT061133 rev.15)
s700800 11.00 sendmail1m 8.9.3 patch : A vulnerability has been identified in sendmail which may allow a remote attacker to execute arbitrary code. References: CVE-2006-0058, US-CERT VU834865. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugi...
Internet Explorer Javaprxy.dll heap overflow
Added: 06/05/2006 CVE: CVE-2005-2087 BID: 14087 OSVDB: 17680 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. One such object, the JView Profiler Javaprxy.dll, is a debugger interface for Microsoft...
Internet Explorer Javaprxy.dll heap overflow
Added: 06/05/2006 CVE: CVE-2005-2087 BID: 14087 OSVDB: 17680 Background Windows operating systems use the Component Object Model COM to allow various program components to be run within different applications. One such object, the JView Profiler Javaprxy.dll, is a debugger interface for Microsoft...
[SA20377] Secure Elements Class 5 AVR Message Encryption Security Issue
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
[SECURITY] [DSA 1073-1] New MySQL 4.1 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1073-1 [email protected] http://www.debian.org/security/ Martin Schulze May 22nd, 2006 http://www.debian.org/security/faq -...
US-CERT Technical Cyber Security Alert TA06-139A -- Microsoft Word Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-139A Microsoft Word Vulnerability Original release date: May 19, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Word 2003 Microsoft Word XP 2002 Microsoft Word is includ...
LiveData ICCP Server heap buffer overflow vulnerability
Overview LiveData ICCP Server contains a heap-based buffer overflow. This vulnerability may allow a remote attacker to crash the server. Description Inter-Control Center Communications Protocol ICCP According to the LiveData ICCP Server white paper: The Inter-Control Center Communications Protoco...
US-CERT Technical Cyber Security Alert TA06-132A -- Apple Mac Products Affected by Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-132A Apple Mac Products Affected by Multiple Vulnerabilities Original release date: May 12, 2006 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X version 10.3.9 Panther an...
US-CERT Technical Cyber Security Alert TA06-129A -- Microsoft Windows and Exchange Server Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-129A Microsoft Windows and Exchange Server Vulnerabilities Original release date: May 9, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows Microsoft Exchange Server...
[SA19722] Linksys RT31P2 SIP Messages Denial of Service Vulnerabilities
TITLE: Linksys RT31P2 SIP Messages Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA19722 VERIFY ADVISORY: http://secunia.com/advisories/19722/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Linksys RT31P2 http://secunia.com/product/9456/ DESCRIPTION:...
cachefsd heap overflow
Added: 04/05/2006 CVE: CVE-2002-0033 BID: 4674 OSVDB: 779 Background cachefsd is an RPC service which supports local caching of Network File Systems NFS, thereby improving performance on filesystems mounted from an NFS server. Problem A heap overflow in cachefsd allows remote command execution...
Microsoft Jet Database Engine buffer overflow
Added: 03/24/2006 CVE: CVE-2005-0944 BID: 12960 OSVDB: 15187 Background The Microsoft Jet Database Engine provides data access functionality for a number of applications. Problem An input validation vulnerability in the Microsoft Jet Database Engine could lead to command execution when a user ope...
US-CERT Technical Cyber Security Alert TA06-075A -- Adobe Macromedia Flash Products Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-075A Adobe Macromedia Flash Products Contain Vulnerabilities Original release date: March 16, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows, Apple Mac OS X,...
US-CERT Technical Cyber Security Alert TA06-073A -- Microsoft Office and Excel Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-073A Microsoft Office and Excel Vulnerabilities Original release date: March 14, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Office for Windows and Mac OS X Microsoft...
Safari archive metadata command execution
Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...