MDVA-2010:238 : php

This is a maintenance update that upgrades php to 5.2.15 for CS4/MES5/2009.0. Key enhancements in PHP 5.2.15 include: Fixed bug 47643 arraydiff takes over 3000 times longer than php 5.2.4. Fixed bug 44248 RFC2616 transgression while HTTPS request through proxy with SoapClient object. Additional...

Mandriva Linux Security Advisory : php (MDVSA-2010:254)

This is a maintenance and security update that upgrades php to 5.3.4 for 2010.0/2010.1. Security Enhancements and Fixes in PHP 5.3.4 : - Paths with NULL in them foo\0bar.txt are now considered as invalid CVE-2006-7243. - Fixed bug 53512 NumberFormatter::setSymbol crash on bogus values CVE-2010-44...

CVE-2010-4491: Undefined Security Weakness

Google Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows remote attackers to cause a denial of service memory corruption via a crafted extension...

EUVD-2010-3610

named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service DNSSEC validati...

USN-1023-1: Linux kernel vulnerabilities

Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service via a NULL pointer dereference, escalate privileges by overflowing the kernel stack, and assign Econet addresses to arbitrary interfaces. CVE-2010-3848, CVE-2010-3849,...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : linux, linux-ec2, linux-source-2.6.15 vulnerabilities (USN-1000-1)

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Al Viro discovered a race condition in the TTY driver. A local attacker could exploit this to crash the system, leading to a...

STDU explorer DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ================================================ STDU explorer DLL Hijacking Exploit dwmapi.dll ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

Video Workstation Version 5.3.9.4 dll hijacking (iacenc.dll, ir50_lcs.dll)

Exploit for windows platform in category local exploits ======================================================================= Video Workstation Version 5.3.9.4 dll hijacking iacenc.dll,ir50lcs.dll ======================================================================= / Video Workstation Versio...

FrontPage Server Extensions Anonymous Login Scanner

This module queries the FrontPage Server Extensions and determines whether anonymous access is allowed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FrontPage Server Extensions Anonymous Log...

NCP Secure Entry Client v.9.23.017 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ======================================================== NCP Secure Entry Client v.9.23.017 DLL Hijacking Exploit ======================================================== / Exploit Title: NCP Secure Entry Client v.9.23.017 DLL Hijacking...

SeaMonkey DLL Hijacking (dwmapi.dll) Exploit

Exploit for windows platform in category local exploits ============================================ SeaMonkey DLL Hijacking dwmapi.dll Exploit ============================================ / Exploit Title: SeaMonkey DLL Hijacking Exploit dwmapi.dll Date: 07/09/2010 Author: Anastasios Monachos...

CVE-2010-3250

Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors...

CVE-2010-3250

Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors...

CVE-2010-3250

Removed by vendor...

CVE-2010-3250

CVE-2010-3250 concerns Google Chrome prior to version 6.0.472.53 and is described as an unspecified vulnerability that allows remote attackers to enumerate the set of installed extensions via unknown vectors. The NVD entry confirms this vulnerable condition, and OpenVAS entries list Google Chrome

CVE-2010-3250

Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors...

CVE-2010-3250: Undefined Security Weakness

Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors...

Multiple vulnerabilities in third-party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Commenting system Backend Module commentsbe, Tiny Market hmtinymarket, Yet Another Calendar keyac, The official twitter tweet button for your page tweetbutton, XING Button xing Release Date: September 2, 2010...

MPLAB IDE .mcp .mcw DLL Hijacking

Exploit for windows platform in category local exploits ================================= MPLAB IDE .mcp .mcw DLL Hijacking ================================= / MPLAB IDE .mcw DLL Hijacking Date: August 31, 2010 Author: kB01 Software:...

Design/Logic Flaw

Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 314 MC: 160820 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as a .pproj, .prfpset, .prexport, .prm,...