4353 matches found
Savy Soda Documents - Mobile Office Suite '.XLS' Denial of Service
I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone...
Microsoft Windows Help Centre Handles - Malformed Escape Sequences Incorrectly (MS03-044)
Microsoft Windows Help Centre Handles - Malformed Escape Sequences Incorrectly MS03-044 Microsoft Windows Help Centre Handles Malformed Escape Sequences Incorrectly ---------------------------------------------------------------------------- Help and Support Centre is the default application...
Apple Webkit ConditionEventListener Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the applicati...
[SECURITY] [DSA 2055-1] New OpenOffice.org packages fix arbitrary code execution
--------------------------------------------------------------------------- Debian Security Advisory DSA-2055-1 [email protected] http://www.debian.org/security/ Nico Golde June 5th, 2010 http://www.debian.org/security/faq -...
[SECURITY] Fedora 11 Update: html2ps-1.0-0.3.b5.fc11
An HTML to PostScript converter written in Perl. Many possibilities to control the appearance. Support for processing multiple documents. A table of contents can be generated. Configurable page headers/footers. Automatic hyphenation and text justification can be selected...
HP MFP Digital Sending Software Detection
The remote Windows host contains HP MFP Digital Sending Software, an application that enables an HP Multifunction Peripheral MFP to send scanned documents directly to several types of destinations. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46675;...
Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability
CVE: CVE-2008-2364 The Apache 'modproxyhttp' module is prone to a denial-of-service vulnerability that affects the processing of interim responses. Attackers may exploit this issue to cause denial-of-service conditions. Reportedly, the issue affects Apache 2.2.8 and 2.0.63; other versions may als...
PDF JBIG2 multiple input validation flaws
Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...
PDF JBIG2 MMR decoder buffer overflows
Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...
SuSE Update for acroread SUSE-SA:2010:022
Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2010:022 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
SuSE Update for acroread SUSE-SA:2010:022
Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2010:022 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Mozilla Foundation Security Advisory 2010-14
Mozilla Foundation Security Advisory 2010-14 Title: Browser chrome defacement via cached XUL stylesheets Impact: Low Announced: March 23, 2010 Reporter: Wladimir Palant Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.8 Firefox 3.0.18 Thunderbird 3.0.2 SeaMonkey 2.0.3...
Debian DSA-2028-1 : xpdf - multiple vulnerabilities
Several vulnerabilities have been identified in xpdf, a suite of tools for viewing and converting Portable Document Format PDF files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1188 and CVE-2009-3603 Integer overflow in SplashBitmap::SplashBitm...
Sql injection
Foxit Reader before 3.2.1.0401 allows remote attackers to 1 execute arbitrary local programs via a certain "/Type /Action /S /Launch" sequence, and 2 execute arbitrary programs embedded in a PDF document via an unspecified "/Launch /Action" sequence, a related issue to CVE-2009-0836...
Re-use of freed object due to scope confusion — Mozilla
A memory corruption flaw leading to code execution was reported by security researcher Nils of MWR InfoSecurity during the 2010 Pwn2Own contest sponsored by TippingPoint's Zero Day Initiative. By moving DOM nodes between documents Nils found a case where the moved node incorrectly retained its ol...
SeaMonkey < 2.0.4 Multiple Vulnerabilities
Binary data 5495.prm...
Mozilla Firefox < 3.5.9 Multiple Vulnerabilities
Binary data 5494.prm...
SeaMonkey < 2.0.4 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.0.4. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-16 - A select event handler for XUL tree items can be called after the item is deleted. MFSA...