CVE-2012-4447

Heap-based buffer overflow in tifpixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted TIFF image using the PixarLog Compression format...

HP Operations Agent Opcode coda.exe 0x34 Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'HP Operations Agent Opcode coda.exe...

[ MDVSA-2012:168 ] hostapd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:168 http://www.mandriva.com/security/ Package : hostapd Date : October 22, 2012 Affected: 2011. Problem Description: Multiple vulnerabilities has been discovered and corrected in hostapd: hostapd 0.7.3, and...

Adobe Flash Player Video File Heap Buffer Overflow (APSB12-19; CVE-2012-4167)

A remote code execution vulnerability has been reported in Adobe Flash Player...

Realplayer Watchfolders Long Filepath Overflow

Realplayer Watchfolders Long Filepath Overflow Realplayer is vulnerable to a stack buffer overflow vulnerability in the 'Watch Folders' facility CVE-2012-4987. Details here: http://www.reactionpenetrationtesting.co.uk/realplayer-watchfolders.html Research:...

[SECURITY] [DSA 2564-1] tinyproxy security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2564-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 23, 2012 http://www.debian.org/security/faq -...

[security bulletin] HPSBHF02819 SSRT100920 rev.2 - HP, 3COM, and H3C Routers & Switches, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03515685 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03515685 Version: 2 HPSBHF02819...

[SECURITY] [DSA 2562-1] cups-pk-helper security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2562-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 23, 2012 http://www.debian.org/security/faq -...

Oracle Java Runtime Bytecode Verifier Cache Code Execution (CVE-2012-1723)

An input validation error vulnerability has been reported in Oracle Java Runtime JRE. The vulnerability is due to a type confusion error. A remote attacker can exploit this issue by enticing a target user to open a specially crafted web page containing a Java applet or running a Java Archive JAR...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2012:1407 Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CV...

Perl 5 Memory Corruption Vulnerability

The Perl 5 interpreter is vulnerable to a memory corruption vulnerability which results in memory disclosure and potentially arbitrary code execution when large values are supplied to the x operator. Author: Tim Brown URL: / Product: Perl 5 prior to 5.15.5 Vendor: Perl Risk: Medium Summary The Pe...

Security fix for the ALT Linux 7 package libexif version 0.6.21-alt1

Oct. 27, 2012 Dmitriy Khanzhin 0.6.21-alt1 - 0.6.21 - fixed CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841, CVE-2012-2845...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

[SECURITY] [DSA 2568-1] rtfm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2568-1 [email protected] http://www.debian.org/security/ Florian Weimer October 26, 2012 http://www.debian.org/security/faq -...

USN-1619-1: OpenJDK vulnerabilities

Several information disclosure vulnerabilities were discovered in the OpenJDK JRE. CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075, CVE-2012-5077, CVE-2012-5085 Vulnerabilities were discovered in the OpenJDK JRE related to information disclosure and data integrity. CVE-2012-4416,...

CVE-2012-5470

libpngplugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service application crash via a crafted PNG file...

CVE-2012-4019

Cross-site scripting XSS vulnerability in tokyobbs.cgi in Come on Girls Interface CGI Tokyo BBS allows remote attackers to inject arbitrary web script or HTML via vectors related to the error page...

[SECURITY] [DSA 2566-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2566-1 [email protected] http://www.debian.org/security/ Nico Golde October 25, 2012 http://www.debian.org/security/faq -...

CVE-2012-5470

CVE-2012-5470 affects VLC Media Player via its libpng_plugin. A crafted PNG file can trigger a denial of service (application crash) in VLC before version 2.0.4 due to an input-validation issue in the PNG handling code. Reported by multiple sources, the vulnerability base score is 4.3 (MEDIUM) wi...

CVE-2012-4729

Wing FTP Server prior to 4.1.1 is vulnerable to an authenticated denial-of-service caused by parsing two ZIP commands, leading to daemon crash. Affected: Wing FTP Server versions before 4.1.1. Root cause: vulnerability arises during processing of multiple ZIP commands. Mitigation: upgrade to vers...