9294 matches found
March, 2010: PS3 OtherOS Option deleted in firmware update
Its doubtful that executives at Sony thought too much if at all about their decision to rescind an obscure feature dubbed “OtherOS” that had been added to the PlayStation 3 System Software soon after its launch. The feature allowed other operating systems, specifically Linux, to be run on the...
Apple Admits to Bugs, Denies Tracking iPhone Users
Apple finally sounded off on its phone tracking imbroglio on Wednesday telling iPhone customers that “it’s the location, stupid.” The company claims its tracking feature is designed to collect data on cell towers and wifi hotspots, not users. After more than a week of silence, the notoriously...
Users File Suit Against Apple Over iPhone Tracking
A pair of Apple customers has filed a lawsuit against the company, alleging that Apple is invading their privacy by collecting location data about iPhone and iPad users without their knowledge. The suit follows the revelation last week by security researchers that Apple is collecting and storing...
Adobe AIR < 2.6.0.19140 ActionScript Predefined Class Prototype Addition Remote Code Execution (APSB11-07)
The remote Windows host contains a version of Adobe AIR earlier than 2.6.0.19140. Such versions are reportedly affected by a memory corruption vulnerability. By tricking a user on the affected system into opening a specially crafted document with Flash content, such as a SWF file embedded in a...
Microsoft Foundation Class (MFC) Library Remote Code Execution Vulnerability (2500212)
This host is missing a critical security update according to Microsoft Bulletin MS11-025. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS11-025: Vulnerability in Microsoft Foundation Class (MFC) Library Could Allow Remote Code Execution (2500212)
The remote Windows host contains a version of the Microsoft Foundation Class MFC library affected by an insecure library loading vulnerability. The path used for loading external libraries is not securely restricted. An attacker can exploit this by tricking a user into opening an MFC application ...
CVE-2011-1660
Multiple cross-site scripting XSS vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via 1 the reportName or 2 uniqueId parameter to CoreViewerInit.js, or the 3 uniqueId ...
Fedora Update for mono FEDORA-2011-3393
Check for the Version of mono OpenVAS Vulnerability Test Fedora Update for mono FEDORA-2011-3393 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Integer overflow
The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...
CVE-2011-0188
The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...
[SECURITY] [DSA 2195-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2195-1 [email protected] http://www.debian.org/security/ Raphael Geissert March 19, 2011 http://www.debian.org/security/faq -...
Sun Java Applet2ClassLoader Remote Code Execution Exploit
Exploit for multiple platform in category remote exploits $Id: javacodebasetrust.rb 11983 2011-03-16 05:01:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information ...
Microsoft Windows Win32k Window Class Pointer Confusion (MS11-012; CVE-2011-0088)
The Windows kernel-mode driver win32k.sys is a kernel-mode device driver and is the kernel part of the Windows subsystem. It contains the window manager and the Graphics Device Interface GDI. It also serves as a wrapper for DirectX support. An elevation of privilege vulnerability has been...
Ubuntu Update for openjdk-6 vulnerabilities USN-1079-1
Ubuntu Update for Linux kernel vulnerabilities USN-1079-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10791.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for openjdk-6 vulnerabilities USN-1079-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
USN-1079-1: OpenJDK 6 vulnerabilities
It was discovered that untrusted Java applets could create domain name resolution cache entries, allowing an attacker to manipulate name resolution within the JVM. CVE-2010-4448 It was discovered that the Java launcher did not did not properly setup the LDLIBRARYPATH environment variable. A local...
HP OpenView Performance Insight Server Backdoor Account Code Execution (CVE-2011-0276)
HP OpenView Performance Insight OVPI implements service level management by monitoring the systems, networks and applications making up a service. It collects, analyzes and summarizes management data from various sources. A remote code execution vulnerability has been reported in HP OpenView...
F-Secure Internet Gatekeeper Web Console Detection
The remote web server is the Web Console component of F-Secure Internet Gatekeeper, an enterprise-class email and web filtering gateway used to identify malware in incoming and outgoing SMTP, HTTP, FTP and POP3 traffic. C Tenable Network Security, Inc. include"compat.inc"; if description...
Two Firms That Plotted Against WikiLeaks Finally Apologize !
Two data intelligence firms that decided to cooperate with HBGary's plot to sabotage WikiLeaks have severed ties. Berico Technologies severed ties in the afternoon on February 11 and early in the morning on February 11 Palantir Technologies severed all ties and issued an apology. Dr. Alex Karp,...
