Xpdf 3.01 - Local Heap Overflow Null Pointer Dereference

Xpdf 3.01 - Local Heap Overflow Null Pointer Dereference Name: Xpdf - Integer overflow which causes heap overflow and NULL pointer derefernce Author: Adam Zabrocki / HISPASEC or Date: July 06, 2009 Issue: Xpdf allows local and remote attackers to overflow buffer on heap via integer overflow...

openSUSE 10 Security Update : kernel (kernel-6440)

This kernel update for openSUSE 10.3 fixes some bugs and several security problems. The following security issues are fixed: CVE-2009-2692: A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2406: A kernel stack overflow...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 1212 / 1218 / 1219)

The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.29 fixing various bugs and security issues. The following security issues were fixed : - A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2692 - A kernel stack...

[SECURITY] Fedora 11 Update: ikiwiki-3.1415926-1.fc11

Ikiwiki is a wiki compiler. It converts wiki pages into HTML pages suitable for publishing on a website. Ikiwiki stores pages and history in a revision control system such as Subversion or Git. There are many other features, including support for blogging, as well as a large array of plugins...

[SECURITY] Fedora 10 Update: ikiwiki-2.72-2.fc10

Ikiwiki is a wiki compiler. It converts wiki pages into HTML pages suitable for publishing on a website. Ikiwiki stores pages and history in a revision control system such as Subversion or Git. There are many other features, including support for blogging, as well as a large array of plugins...

MySQL COM_TABLE_DUMP Information Leakage and Arbitrary Command Execution

No description provided by source. / April 21.st 2006 myexploit.c MySql COMTABLEDUMP Memory Leak & MySql remote B0f MySql = 5.0.20 MySql COMTABLEDUMP Memory Leak MySql = 4.x.x copyright 2006 Stefano Di Paola stefano.dipaolaatwisec.it GPL 2.0 Disclaimer: In no event shall the author be liable for...

openSUSE Security Update : kernel (kernel-1211)

This kernel update for openSUSE 11.0 fixes some bugs and several security problems. The following security issues are fixed: CVE-2009-2692: A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2406: A kernel stack overflow...

openSUSE Security Update : kernel (kernel-1214)

The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.29 fixing various bugs and security issues. Following security issues were fixed: CVE-2009-2692: A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2406: A kernel...

Security fix for the ALT Linux 5 package libxml2 version 1:2.7.3-alt2

Aug. 17, 2009 Dmitry V. Levin 1:2.7.3-alt2 - Applied FICORA 245608 patches for CVE-2009-2414 and CVE-2009-2416. - xmlversion.h: Removed ATTRIBUTEPRINTF redefinition. - Fixed some compiler warnings...

Security fix for the ALT Linux 9 package libxml2 version 1:2.7.3-alt2

Aug. 17, 2009 Dmitry V. Levin 1:2.7.3-alt2 - Applied FICORA 245608 patches for CVE-2009-2414 and CVE-2009-2416. - xmlversion.h: Removed ATTRIBUTEPRINTF redefinition. - Fixed some compiler warnings...

linux udev permissions vulnerability testing methods-vulnerability warning-the black bar safety net

Author: Liang increased sea Article source: http://s-logs.com/2009/04/linux-udev.html Copyright: can any reproduced, reprinted, please be sure to hyperlink marked article origin and author information and this statement Vulnerability relevant information may be in the following link to obtain:...

Mozilla Foundation Security Advisory 2009-41

Mozilla Foundation Security Advisory 2009-41 Title: Corrupt JIT state after deep return from native function Impact: Critical Announced: July 16, 2009 Reporter: zbyte Products: Firefox 3.5 Fixed in: Firefox 3.5.1 Description Firefox user zbyte reported a crash that we determined could result in a...

Mozilla Firefox JavaScript Compiler Code Execution Vulnerability - Windows

Mozilla Firefox browser is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox JavaScript Compiler Code Execution Vulnerability (Linux)

The host is installed with Mozilla Firefox browser and is prone to Remote Code Execution vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxjscompilercodeexecvulnlin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox JavaScript Compiler Code Execution Vulnerability Linux Authors: Sharat...

Mozilla Firefox JavaScript Compiler Code Execution Vulnerability - Linux

Mozilla Firefox browser is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firefox 3.5.x < 3.5.1 Multiple Vulnerabilities

Firefox 3.5 is installed on the remote host. This version is potentially affected by multiple flaws : - It may be possible to crash the browser or potentially execute arbitrary code by using a flash object that presents a slow script dialog. MFSA 2009-35 - In certain cases after a return from a...

mozilla -- corrupt JIT state after deep return from native function

Mozilla Project reports: Firefox user zbyte reported a crash that we determined could result in an exploitable memory corruption problem. In certain cases after a return from a native function, such as escape, the Just-in-Time JIT compiler could get into a corrupt state. This could be exploited b...

Corrupt JIT state after deep return from native function — Mozilla

Firefox user zbyte reported a crash that we determined could result in an exploitable memory corruption problem. In certain cases after a return from a native function, such as escape, the Just-in-Time JIT compiler could get into a corrupt state. This could be exploited by an attacker to run...

Design/Logic Flaw

js/src/jstracer.cpp in the Just-in-time JIT JavaScript compiler aka TraceMonkey in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a...

CVE-2009-2477

js/src/jstracer.cpp in the Just-in-time JIT JavaScript compiler aka TraceMonkey in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by a...