CVE-2010-4395: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data...

Unfixed Frame Redirect vulnerability at www.devscripts.net

Security researcher Vijayendra Nigam, has submitted on 12/12/2010 a Frame Redirect vulnerability affecting www.devscripts.net, which at the time of submission ranked 950224 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...

PT-2010-5471

Name of the Vulnerable Software and Affected Versions RealPlayer versions 11.0 through 11.1 RealPlayer SP versions 1.0 through 1.1.5 Linux RealPlayer version 11.0.2.1744 Description The issue allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data...

CVE-2010-4294

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x...

Unfixed Frame Redirect vulnerability at www.tavanir.org.ir

Security researcher Securitylab.ir, has submitted on 29/11/2010 a Frame Redirect vulnerability affecting www.tavanir.org.ir, which at the time of submission ranked 92039 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currentl...

Unfixed Frame Redirect vulnerability at www.radioamateur.org

Security researcher warvector, has submitted on 23/11/2010 a Frame Redirect vulnerability affecting www.radioamateur.org, which at the time of submission ranked 495260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Unfixed Frame Redirect vulnerability at www.recy.net

Security researcher warvector, has submitted on 23/11/2010 a Frame Redirect vulnerability affecting www.recy.net, which at the time of submission ranked 4225005 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently unfixed...

Unfixed Frame Redirect vulnerability at www.buscador.ipn.mx

Security researcher 8rux0, has submitted on 22/11/2010 a Frame Redirect vulnerability affecting www.buscador.ipn.mx, which at the time of submission ranked 22461 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently unfixe...

Google Chrome multiple vulnerabilities - November 10(Linux)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov10lin.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - November 10Linux Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Firefox race condition flaw (MFSA 2010-73)

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the...

Firefox race condition flaw (MFSA 2010-73)

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the...

Unfixed Frame Redirect vulnerability at www.billrobertsontoyota.com.au

Security researcher 03storic, has submitted on 11/10/2010 a Frame Redirect vulnerability affecting www.billrobertsontoyota.com.au, which at the time of submission ranked 6287088 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Penetration Tester XSSer v1.0 - New Version Download

All of you web application penetration testers, check out this release of XSSer version 1.0! From this release, the author plans to rename XSSer to "The Mosquito". Our first post regarding XSSer can be found here. "XSSer is an open source penetration testing tool that automates the process of...

CVE-2010-4204

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

PT-2010-5352

Name of the Vulnerable Software and Affected Versions WebKit versions prior to 1.2.6 Google Chrome versions prior to 7.0.517.44 Description The issue allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. This occurs because WebKit...

Firefox race condition flaw (MFSA 2010-73)

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the...

Firefox race condition flaw (MFSA 2010-73)

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the...

Firefox race condition flaw (MFSA 2010-73)

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the...

Firefox race condition flaw (MFSA 2010-73)

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the...

CVE-2010-3765

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the...