CVE-2010-1118

Technical details for CVE-2010-1118 are not publicly available in the provided connected documents. The Initial Description notes an unspecified vulnerability in IE8 on Windows 7. Monitor for updates for any concrete impact, affected products, or fixes.

CVE-2010-1119

CVE-2010-1119 is a WebKit use-after-free vulnerability in Safari (various OS/browser versions) triggered by attribute manipulation. The issue can allow remote code execution, denial of service (application crash), or data exposure (e.g., SMS database) as demonstrated in Pwn2Own 2010. Connected Ne...

CVE-2010-1120

CVE-2010-1120 is tied to an unchecked index issue in Apple Type Services’ handling of embedded fonts, allowing remote code execution in affected Apple OS X components. Publicly documented impact includes Safari 4 on Mac OS X 10.6 and Apple Preview (libFontParser.dylib) with a SpecialEncoding heap...

CVE-2010-1117

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 20...

CVE-2010-1120

Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Charlie Miller during a Pwn2Own competition at CanSecWest 2010...

CVE-2010-1121

CVE-2010-1121 affects Mozilla Firefox 3.6.x prior to 3.6.3. The issue is a DOM scope handling flaw when nodes are moved across documents, enabling use-after-free conditions that can lead to remote code execution. Exploitation was demonstrated in a Pwn2Own event; no explicit exploit details are pr...

Researchers Finding New Ways to Bypass Exploit Mitigations

VANCOUVER–Software makers, led by Microsoft, have spent the last few years steadily adding new memory-protection and exploit-mitigation technologies such as ASLR, DEP and SafeSEH to their products. But the state of the art in exploitation has advanced just as steadily and, as researchers showed a...

Charlie Miller on Pwn2Own

Charlie Miller won his third consecutive Pwn2Own contest at the CanSecWest conference in Vancouver this week. In this video he talks about the contest, the state of Apple security and the bug-finding and reporting process...

CVE-2010-1121

Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collectio...

Mozilla Fast-Tracks Fix For Critical Firefox Flaw

Mozilla has fast-tracked a patch for a critical vulnerability affecting its flagship Firefox browser. The patch, which was originally slated for release on March 30, fixes a vulnerability that could allow remote code execution attacks. The flaw was originally released into the VulnDisco exploit...

On This Year's CanSecWest, Pwn2Own and the Latest Firefox Zero-day

Dennis Fisher and Ryan Naraine preview this year’s CanSecWest conference, the Pwn2Own contest and talk about the recent zero-day flaw in Firefox. Subscribe to the News Wrap podcast on Podcast audio courtesy of The New Radio Tough Road Ahead for Adobe on Security...

Pwn2Own Predictions: Apple iPhone Will Fall

Hackers at this year’s CanSecWest Pwn2Own contest will definitely break into an Apple iPhone by exploiting a remote code execution vulnerability. That’s the prediction from Charlie Miller and Aaron Portnoy, two security researchers who are monitoring events leading to next week’s hacker challenge...

Apple Snags former Mozilla Security Chief

Apple has hired former Microsoft and Mozilla security specialist Window Snyder to help secure its Mac ecosystem. Snyder, who last worked as Mozilla’s security chief, confirmed she is joining Apple as senior product manager for security. At Mozilla, Snyder introduced the concept of threat modeling...

Hacker Report 'High Risk' Flaws in Safari Browser

Over the last two weeks, security researchers have reported eight different zero-day vulnerabilities in Apple’s Safari browser. Details of these vulnerabilities, all rated “high risk,” have been sold to Tippingpoint’s Zero Day Initiative ZDI, a program that purchases the rights to vulnerability...

CanSecWest Pwn2Own Hacker Contest Targets Smartphones

The organizers of this year’s CanSecWest Pwn2Own have painted a big bulls-eye on mobile devices, offering up an whopping $60,000 in prizes to entice hackers to exploit vulnerabilities on iPhones, Android, Nokia and BlackBerry smartphones. At Pwn2Own 2010, which takes place in Vancouver on March 2...

SuSE 11 Security Update : MozillaFirefox (SAT Patch Number 747)

The Mozilla Firefox Browser was updated to the 3.0.8 release. It fixes several security issues : - Security researcher Nils reported via TippingPoint's Zero Day Initiative that the XUL tree method moveToEdgeShift was in some cases triggering garbage collection routines on objects which were still...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-745)

The Mozilla Firefox Browser was updated to the 3.0.8 release. It fixes several security issues : MFSA 2009-13 / CVE-2009-1044: Security researcher Nils reported via TippingPoint's Zero Day Initiative that the XUL tree method moveToEdgeShift was in some cases triggering garbage collection routines...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-745)

The Mozilla Firefox Browser was updated to the 3.0.8 release. It fixes several security issues : MFSA 2009-13 / CVE-2009-1044: Security researcher Nils reported via TippingPoint's Zero Day Initiative that the XUL tree method moveToEdgeShift was in some cases triggering garbage collection routines...

Microsoft unleashes 31 fixes on Patch Tuesday

From ZDNet Ryan Naraine Microsoft’s batch of patches this month is a big one: 10 bulletins covering a total of 31 documented vulnerabilities affecting the Windows OS, the Internet Explorer browser and the Microsoft Office productivity suite Word, Works and Excel. Five of the 10 bulletins are rate...

SuSE Security Advisory SUSE-SA:2009:022 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:022. OpenVAS Vulnerability Test $Id: susesa2009022.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:022 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...