7447 matches found
CVE-2012-2280
The CVE-2012-2280 entry concerns a Cross frame scripting vulnerability in EMC RSA Authentication Manager 7.1 (before SP4 P14) and RSA SecurID Appliance 3.0 (before SP4 P14). The issue allows remote attackers to inject arbitrary web script/HTML via unspecified vectors due to improper frame handlin...
Stable Channel Update
The Stable channel has been updated to 20.0.1132.57 for Windows, Mac, Linux, and Chrome Frame. Along with below mentioned security fixes, this build contains an update to Flash player, v8 3.10.8.20 and couple of stability/bug fixes. Security fixes and rewards: Please see the Chromium security pag...
Stable Channel Update
The Google Chrome team is happy to announce the arrival of Chrome 20 20.0.1132.43 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority ...
CVE-2011-3359
The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...
Stable Channel Update
The Chrome Stable channel has been updated to 19.0.1084.52 on Windows, Mac, Linux and Chrome Frame. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. 11740...
Google Releases Google Chrome 19
Google has released Google Chrome 19 for Linux, Mac, Windows, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review the Google Chrome...
Proman Xpress v5.0.1 - Multiple Web Vulnerabilities
Document Title: =============== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=513 Release Date: ============= 2012-05-08 Vulnerability Laboratory ID VL-ID: ==================================== 512...
Remote Anything Player 5.60.15 Denial Of Service
!python Title: Remote-Anything Player 5.60.15 PoC Author: Saint Patrick Date: 4/25/2012 Just a heads up, you can get full EIP by pushing on. However, at crash time no registers point to buffer, so I chose instead to work with the 3 byte overwrite shown here. This allows calling of other...
Stable Channel Update
The Chrome Stable channel has been updated to 18.0.1025.168 on Windows, Mac, Linux and Chrome Frame. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. 1064...
Stable Channel Release and Beta Channel Update
The Chrome team is excited to announce the release of Chrome 18 to the Stable Channel for Windows, Mac, Linux and Chrome Frame. 18.0.1025.142 contains a number of new features including faster and fancier graphics.More detailed updates are available on theChrome Blog and theChromium Blog. Securit...
Chrome Stable Channel Update
The Chrome Stable channel has been updated to 17.0.963.78 on Windows, Mac, Linux and Chrome Frame. This release fixes issues with Flash games and videos, along with the security fix listed below. Security fixes and rewards: Congratulations again to community member Sergey Glazunov for the first...
DEBIAN-CVE-2012-0823
VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...
CVE-2012-0823
VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...
CVE-2012-0823
VP8 Codec SDK libvpx before 1.0.0 "Duclair" allows remote attackers to cause a denial of service application crash via 1 unspecified "corrupt input" or 2 by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks"...
Unfixed Frame Redirect vulnerability at www.universinet.it
Security researcher r14nul, has submitted on 18/02/2012 a Frame Redirect vulnerability affecting www.universinet.it, which at the time of submission ranked 335584 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/08/2012. It is currently...
Tiki Wiki CMS Groupware Frame Injection
Exploit Title: Tiki Wiki CMS Groupware Frame Injection Date: 17.02.2012 Author: Sony Software Link: http://info.tiki.org/tiki-index.php Google Dorks: inurl:tiki-featuredlink.php?type= Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...
Chrome Stable Update
The Chrome Stable channel has been updated to 17.0.963.56 on Windows, Mac, Linux and Chrome Frame. This release fixes a number of stability and security issues in Chrome, and also includes a new version of Flash. More info on the Flash update is available from Adobe. Security fixes and rewards:...
Real Networks RealPlayer < 15.0.2.72 Multiple Vulnerabilities
Binary data 6311.prm...
Google Releases Chrome 17.0.963.46
Google has released Chrome 17.0.963.46 for Linux, Mac, Windows, and Google Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code and cause a denial-of-service condition. US-CERT encourages users and administrators to review the...