Google Releases Chrome 22 and Pays Out Nearly $30K in Rewards

Google has released Chrome 22, a major new version of its browser that includes a huge number of security fixes, many of them high-priority vulnerabilities. The company also handed out nearly $30,000 in rewards to security researchers, more than half of it to Sergey Glazunov, who discovered two...

CVE-2012-2783

Unspecified vulnerability in libavcodec/vp56.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, has unknown impact and attack vectors, related to "freeing the returned frame."...

CVE-2012-2774

FFmpeg vulnerability CVE-2012-2774 affects libavcodec/mpegvideo.c:ff_MPV_frame_start, with FFmpeg versions before 0.11. Remote memory corruption possible by starting a frame outside the SETUP state. Mitigation: upgrade to FFmpeg 0.11 or later (per public advisories).

CentOS Update for thunderbird CESA-2011:1343 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD : chromium -- multiple vulnerabilities (68ac6266-25c3-11e1-b63a-00262d5ed8ee)

Google Chrome Releases reports : 81753 Medium CVE-2011-3903: Out-of-bounds read in regex matching. Credit to David Holloway of the Chromium development community. 95465 Low CVE-2011-3905: Out-of-bounds reads in libxml. Credit to Google Chrome Security Team Inferno. 98809 Medium CVE-2011-3906:...

Debian DSA-2106-1 : xulrunner - several vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2760, CVE-2010-3167, CVE-2010-3168 Implementation errors in XUL processing allow the...

RealPlayer: SWF Frame Handling Buffer Overflow

Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...

Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow

====================================================================== Secunia Research 25/07/2008 - RealNetworks RealPlayer SWF Frame Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Debian Security Advisory DSA 1506-2 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 1506-2. OpenVAS Vulnerability Test $Id: deb15062.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1506-2 iceape Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

DEBIAN-CVE-2007-2488

The IAX2 channel driver chaniax2 in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and possibly obtain sensitive information memory contents or cause a denial of service application crash, by sending a frame that...