CVE-2011-3658

The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via vectors involving...

Firefox < 9.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 9.0 and thus, is potentially affected by the following security issues : - An out-of-bounds memory access error exists in the 'SVG' implementation and can be triggered when 'SVG' elements are removed during a 'DOMAttrModified' event handler...

Design/Logic Flaw

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the...

CVE-2011-4854

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the...

Ubuntu 11.04 / 11.10 : firefox vulnerabilities (USN-1277-1)

Yosuke Hasegawa discovered that the Mozilla browser engine mishandled invalid sequences in the Shift-JIS encoding. It may be possible to trigger this crash without the use of debugging APIs, which might allow malicious websites to exploit this vulnerability. An attacker could possibly use this fl...

Ubuntu Update for mozvoikko USN-1277-2

Ubuntu Update for Linux kernel vulnerabilities USN-1277-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN12772.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for mozvoikko USN-1277-2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...

Adobe Photoshop Elements CVE-2011-2443多个内存破坏漏洞

Bugtraq ID: 49905 CVE ID：CVE-2011-2443 Adobe Photoshop Elements是Adobe公司推出的图像编辑、照片修饰和Web 图形解决方案。 应用程序处理.ABR brushes和.GRD gradients格式文件存在缓冲区溢出，应用程序没有过滤用户输入可导致内存破坏，覆盖多个内存寄存器，构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码。 Adobe Photoshop Elements 8.0 Adobe Photoshop Elements 7.0 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...

[SECURITY] Fedora 16 Update: kalzium-4.7.1-1.fc16

Periodic Table of Elements...

CVE-2011-2443

CVE-2011-2443 affects Adobe Photoshop Elements 8.0 and earlier. Multiple buffer overflow vulnerabilities allow remote attackers to trigger memory corruption and application crash (DoS) or possibly execute arbitrary code via crafted .GRD or .ABR files. This issue is linked to CVE-2010-1296 and is ...

Ashampoo Burning Studio Elements 10.0.9 - '.ashprj' Heap Overflow

!/usr/bin/perl Ashampoo Burning Studio Elements 10.0.9 .ashprj Heap Overflow Vulnerability Vendor: Ashampoo GmbH & Co. KG Product web page: http://www.ashampoo.com Affected version: 10.0.9 Summary: Ashampoo Burning Studio Elements offers you everything you need to burn movies, music and data - fa...

Ashampoo Burning Studio Elements 10.0.9 - .ashprj Heap Overflow

Ashampoo Burning Studio Elements 10.0.9 - .ashprj Heap Overflow !/usr/bin/perl Ashampoo Burning Studio Elements 10.0.9 .ashprj Heap Overflow Vulnerability Vendor: Ashampoo GmbH & Co. KG Product web page: http://www.ashampoo.com Affected version: 10.0.9 Summary: Ashampoo Burning Studio Elements...

CVE-2011-2443: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted 1 .grd or 2 .abr file, a related issue to CVE-2010-1296...

Ashampoo Burning Studio Elements 10.0.9 (.ashprj) Heap Overflow Vulnerability

Summary Ashampoo Burning Studio Elements offers you everything you need to burn movies, music and data - fast and effectively. The software with the intuitive user interface focuses on the core competencies of burning software and offers you compact functions to tackle all tasks relating to your...

Adobe Photoshop Elements 8.0 - Multiple Arbitrary Code Execution Vulnerabilities

Title: ------ Adobe Photoshop Elements 8.0 Multiple Arbitrary Code Execution Vulnerabilities Vendor: ------- Adobe Systems Inc. http://www.adobe.com Product web page: ----------------- http://www.adobe.com/products/photoshop-elements.html Affected version: ----------------- 8.0 and 7.0...

Adobe Photoshop Elements 8.0 - Multiple Arbitrary Code Execution Vulnerabilities

Adobe Photoshop Elements 8.0 - Multiple Arbitrary Code Execution Vulnerabilities Title: ------ Adobe Photoshop Elements 8.0 Multiple Arbitrary Code Execution Vulnerabilities Vendor: ------- Adobe Systems Inc. http://www.adobe.com Product web page: -----------------...

Adobe Photoshop Elements 8.0 Multiple Arbitrary Code Execution Vulnerabilities

Summary Adobe Photoshop Elements - the No.1 consumer photo editing software that helps you turn everyday memories into sensational photos you'll cherish forever. Easily edit photos and make photo creations using automated options, share photos with your social network, and view photos virtually...

KLA10034 Critical Vulnerabilities in Adobe Photoshop Elements

Multiple buffer overflow vulnerabilities have been found in Adobe Photoshop Elements. Malicious users can exploit these vulnerabilities to cause denial of service or execute arbitrary code via specially designed .grd & .abr files. Original advisories Adobe bulletin Exploitation Public exploits...

Mozilla Thunderbird < 9.0 Multiple Vulnerabilities (deprecated)

Binary data 6110.prm...

librsvg: object type mismatch leading to invalid pointer dereference

librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as ...

CVE-2011-2617

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors related to selecting a text node, and closed pop-up windows, removed pop-up windows, and IFRAME elements...