Mozilla Foundation Security Advisory 2010-56

Mozilla Foundation Security Advisory 2010-56 Title: Dangling pointer vulnerability in nsTreeContentView Impact: Critical Announced: September 7, 2010 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey...

Mozilla Foundation Security Advisory 2010-62

Mozilla Foundation Security Advisory 2010-62 Title: Copy-and-paste or drag-and-drop into designMode document allows XSS Impact: Moderate Announced: September 7, 2010 Reporter: Paul Stone Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird...

Mozilla Foundation Security Advisory 2010-54

Mozilla Foundation Security Advisory 2010-54 Title: Dangling pointer vulnerability in nsTreeSelection Impact: Critical Announced: September 7, 2010 Reporter: regenrecht Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey...

Mozilla Foundation Security Advisory 2010-50

Mozilla Foundation Security Advisory 2010-50 Title: Frameset integer overflow vulnerability Impact: Critical Announced: September 7, 2010 Reporter: Chris Rohlf Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey 2.0.7...

Mozilla Foundation Security Advisory 2010-49

Mozilla Foundation Security Advisory 2010-49 Title: Miscellaneous memory safety hazards rv:1.9.2.9/ 1.9.1.12 Impact: Critical Announced: September 7, 2010 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3...

Mozilla Foundation Security Advisory 2010-53

Mozilla Foundation Security Advisory 2010-53 Title: Heap buffer overflow in nsTextFrameUtils::TransformText Impact: Critical Announced: September 7, 2010 Reporter: wushi Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.9 Firefox 3.5.12 Thunderbird 3.1.3 Thunderbird 3.0.7 SeaMonkey...

Nmap NSE: SMB System Info

This script attempts to get the information about the remote system from the registry. This is a wrapper on the Nmap Security Scanner's http://nmap.org smb-system-info.nse OpenVAS Vulnerability Test $Id: gbnmapsmbsysteminfo.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap SMB System Info...

Mozilla Releases Firefox 3.6.9

The Mozilla Foundation has released Firefox 3.6.9 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, leverage cross-site scripting attacks, or cause a denial-of-service condition. The Mozilla Foundation has als...

CVE-2010-3190

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...

CVE-2010-3190

CVE-2010-3190 affects the Microsoft Foundation Class (MFC) library used by Visual Studio (2003 SP1; 2005 SP1/2008 SP1/2010) and Exchange Server 2010/2013. Vulnerability arises from untrusted search path loading of dwmapi.dll in the current working directory, enabling local privilege escalation th...

Debian Security Advisory DSA 2080-1 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory DSA 2080-1. OpenVAS Vulnerability Test $Id: deb20801.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2080-1 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Apache JackRabbit 2.0.0 XPath Injection

Title: Apache JackRabbit webapp XPath Injection Author: ADEO Security Published: 11/08/2010 Version: 2.0.0 Possible all versions Vendor: http://www.apache.org Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip Description: "Apache Jackrabbit is a fully...

Apache JackRabbit 2.0.0 - webapp XPath Injection

Title: Apache JackRabbit webapp XPath Injection Author: ADEO Security Published: 11/08/2010 Version: 2.0.0 Possible all versions Vendor: http://www.apache.org Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip Description: "Apache Jackrabbit is a fully...

Launch Nmap NSE Tests

This script controls the execution of Nmap NSE Tests OpenVAS Vulnerability Test $Id: nmapnse.nasl 7000 2017-08-24 11:51:46Z teissa $ Launch Nmap NSE Tests Authors: Michael Wiegand Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Firefox Releases Firefox 3.6.8

The Mozilla Foundation has released Firefox 3.6.8 to address a critical vulnerability. This vulnerability may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the Mozilla Foundation security advisory MFSA 2010-48 and update to Firefox 3.6.8 to hel...

Mozilla Foundation Security Advisory 2010-40

Mozilla Foundation Security Advisory 2010-40 Title: nsTreeSelection dangling pointer remote code execution vulnerability Impact: Critical Announced: July 20, 2010 Reporter: regenrecht via TippingPoint's Zero Day Initiative Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.7 Firefox...

Mozilla Foundation Security Advisory 2010-39

Mozilla Foundation Security Advisory 2010-39 Title: nsCSSValue::Array index integer overflow Impact: Critical Announced: July 20, 2010 Reporter: J23 via TippingPoint's Zero Day Initiative Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.7 Firefox 3.5.11 Thunderbird 3.1.1 Thunderbir...

Mozilla Foundation Security Advisory 2010-34

Mozilla Foundation Security Advisory 2010-34 Title: Miscellaneous memory safety hazards rv:1.9.2.7/ 1.9.1.11 Impact: Critical Announced: July 20, 2010 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.7 Firefox 3.5.11 Thunderbird 3.1.1...

Oracle Database Multiple Vulnerabilities (July 2010 CPU)

The remote Oracle database server is missing the July 2010 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Listener - Net Foundation Layer - Oracle OLAP - Application Express - Network Layer - Export %NASLMINLEVEL 70300 C Tenable...

CVE-2010-0903

Unspecified vulnerability in the Net Foundation Layer component in Oracle Database Server 9.2.0.8, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1, when running on Windows, allows remote attackers to affect availability via unknown vectors...