Nasty Data-Stealing Bug Haunts Internet Explorer 8

There’s an unpatched vulnerability in Internet Explorer 8 that enables simple data-stealing attacks by Web-based attackers and could lead to an attacker hijacking a user’s authenticated session on a third-party site. The flaw, which a researcher said may have been known since 2008, lies in the wa...

SuSE9 Security Update : freetype2 (YOU Patch Number 12630)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - stack-based buffer overflow while processing CFF opcodes. CVE-2010-1797 - integer underflow. CVE-2010-2497 - invalid free. CVE-2010-2498 - buffer...

Mod-X Cross Site Request Forgery / Cross Site Scripting

Got bored and decided to break the new website of the company I work for. Throughout I'll be dropping two new exploits that were chained to allow the changing of the administrative password of a default mod-x install. This is not a full review of mod-x, my main goal was just to break something, s...

openSUSE Security Update : freetype2 (openSUSE-SU-2010:0549-1)

This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges : - CVE-2010-1797: stack-based buffer overflow while processing CFF opcodes - CVE-2010-2497: integer underflow - CVE-2010-2498: invalid free -...

Apple Fixes 13 Bugs in Major OS X Patch Release

Apple released a patch Tuesday that fixes more than a dozen bugs, including a critical remote code-execution flaw in Apple Type Services. The patch release also includes a fix for a flaw in CFNetwork that enabled an attacker to intercept user credentials and other sensitive data silently on a...

Mandriva Update for freetype2 MDVSA-2010:157 (freetype2)

Check for the Version of freetype2 OpenVAS Vulnerability Test Mandriva Update for freetype2 MDVSA-2010:157 freetype2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2010-2807

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

Integer overflow

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2807

CVE-2010-2807 affects FreeType up to version 2.4.2, where improper integer bounds checking in the font processing code can lead to a crash or potentially arbitrary code execution via a crafted font file. Connected advisories reference the 2.4.2 release as the fix. Remediation: upgrade to FreeType...

CVE-2010-2807

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CA BrightStor ARCserve Backup Message Engine Stack Overflow (CVE-2007-5327)

There exists a buffer overflow vulnerability in CA BrightStor ARCserve Backup Message Engine. The vulnerability is due to insufficient boundary checking when processing strings supplied in RPC requests. Successful exploitation of this vulnerability allows a remote unauthenticated attacker to...

Microsoft Windows RRAS Memory Corruption (CVE-2006-2370)

Microsoft Remote Access Connection Manager service, RASMAN, provides the functionality to remotely configure and manage various services. One such service that can be managed remotely is the Routing and Remote Access Service, RRAS. Routing and Remote Access Service makes it possible for a compute...

Shadowserver Starts Free Binary-Checking Service

A non-profit group that tracks malicious activity online has just started a new free service that enables users to check executable files against a database of known good applications and to help determine whether a given file is malicious. The service, offered by the Shadowserver Foundation, is ...

CVE-2010-2807

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

Microsoft Office Word sprmCMajority Record Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must open a malicious document. The specific flaw exists in the parsing of sprmCMajority records...

Ghostscript 'iscan.c' PDF Handling Remote Buffer Overflow Vulnerability

This host is installed with Ghostscript and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbghostscriptbofvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ Ghostscript 'iscan.c' PDF Handling Remote Buffer Overflow Vulnerability Authors: Madhuri D Copyright: Copyright c 201...

Apple Ships Critical iTunes for Windows Patch

Apple has shipped a critical iTunes update to fix a security vulnerability that exposes Windows users to malicious hacker attacks. The latest iTunes 9.2.1 is available for Windows XP, Windows Vista and Windows 7. From Apple’s advisory: A buffer overflow exists in the handling of “itpc:”URLs...

Groovy Media Player '.m3u' File Remote Stack Buffer Overflow Vulnerability

This host is installed with Groovy Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbgroovymediaplayerbofvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ Groovy Media Player '.m3u' File Remote Stack Buffer Overflow Vulnerability Authors: Madhuri D Copyright:...

Groovy Media Player '.m3u' File Remote Stack Buffer Overflow Vulnerability

Groovy Media Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ruby 'ARGF.inplace_mode' Buffer Overflow Vulnerability

This host is installed with Ruby and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbrubybofvulnwin.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby 'ARGF.inplacemode' Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright C 2010 Greenbone Networks GmbH...