281 matches found
Chinese Hacker Cracks Hundreds of Gmail Accounts of U.S. & Asia
Chinese Hacker Cracks Hundreds of Gmail Accounts of U.S. & Asia Hackers around the world are gaining more attention than usual in the last few months. Now Google has added another announcement to the pile that hundreds of Gmail accounts have been hacked recently. Now, Google affirms that the...
Fuzzing tool discovers over 100 vulnerabilities in popular browsers !
The public release of crossfuzz - a cross-document DOM binding fuzzer that is able to detect vulnerabilities in all browsers by examining how they interact with various elements while they render web pages - by the Google-employed security researcher Michal Zalewski has unveiled some worrying...
Microsoft to Issue Just Two Bulletins in January Patch Tuesday
Microsoft plans to issue just two patches in its monthly scheduled release next Tuesday. Both of the bugs that Microsoft will fix are in Windows and one of them is rated critical, but it doesn’t appear the company will patch the Internet Explorer bugs that have been publicly disclosed. January’s...
XSS in gopher parser when parsing hrefs — Mozilla
Google security researcher Robert Swiecki reported that functions used by the Gopher parser to convert text to HTML tags could be exploited to turn text into executable JavaScript. If an attacker could create a file or directory on a Gopher server with the encoded script as part of its name the...
CVE-2010-1622: Spring Framework execution of arbitrary code
CVE-2010-1622: Spring Framework execution of arbitrary code Severity: Critical Vendor: SpringSource, a division of VMware Versions Affected: 3.0.0 to 3.0.2 2.5.0 to 2.5.6.SEC01 community releases 2.5.0 to 2.5.7 subscription customers Earlier versions may also be affected Description: The Spring...
Spring Framework - Arbitrary code Execution
Spring Framework - Arbitrary code Execution CVE-2010-1622: Spring Framework execution of arbitrary code Severity: Critical Vendor: SpringSource, a division of VMware Versions Affected: 3.0.0 to 3.0.2 2.5.0 to 2.5.6.SEC01 community releases 2.5.0 to 2.5.7 subscription customers Earlier versions ma...
Google Chrome Multiple Vulnerabilities
No description provided by source. Some vulnerabilities have been reported in Google Chrome, which can be exploited by malicious people to bypass certain security restrictions and potentially compromise a user's system. 1 An unspecified error can be exploited to bypass the same origin policy of t...
CentOS 5 : kernel (CESA-2009:1222)
Updated kernel packages that fix two security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...
FreeBSD : opera -- multiple vulnerabilities (6431c4db-deb4-11de-9078-0030843d3802)
Opera Team reports : - Fixed a heap buffer overflow in string to number conversion - Fixed an issue where error messages could leak onto unrelated sites - Fixed a moderately severe issue, as reported by Chris Evans of the Google Security Team; details will be disclosed at a later date...
Opera < 10.10 Multiple Vulnerabilities
The version of Opera installed on the remote host is earlier than 10.10. Such versions are potentially affected by multiple issues : - Error messages can leak onto unrelated sites which could lead to cross-site scripting attacks. 941 - Passing very long strings through the string to number...
opera -- multiple vulnerabilities
Opera Team reports: Fixed a heap buffer overflow in string to number conversion Fixed an issue where error messages could leak onto unrelated sites Fixed a moderately severe issue, as reported by Chris Evans of the Google Security Team; details will be disclosed at a later date...
VMWare Virtual 8086 Linux Local Ring0 Exploit
Exploit for unknown platform in category local exploits ============================================= VMWare Virtual 8086 Linux Local Ring0 Exploit ============================================= Title: VMWare Virtual 8086 Linux Local Ring0 Exploit CVE-ID: OSVDB-ID: Author: Tavis Ormandy and Julien...
SuSE9 Security Update : Epiphany (YOU Patch Number 12326)
The Mozilla Browser received backports for security problems in 1.8.1.14. The following security issues were fixed : - Mozilla security researcher mozbugra4 reported that an XBL binding, when attached to an unloaded document, can be used to violate the same-origin policy and execute arbitrary...
SuSE9 Security Update : libexif (YOU Patch Number 12045)
Two bugs in libexif were identified by a Google Security Audit done by Meder Kydyraliev. - Loading EXIF data could be used to cause a infinite recursion and crash. CVE-2007-6351 - Integer overflows in the thumbnail handler could be used to overflow buffers and potentially execute code or crash a...
Linux Kernel PER_CLEAR_ON_SETID personality bypass
No description provided by source. / 14.08.2009, babcia padlina vulnerability discovered by google security team some parts of exploit code borrowed from vmsplice exploit by qaaz persvr4 mmap zero technique developed by Julien Tinnes and Tavis Ormandy:...
Linux Kernel < 2.6.19 udp_sendmsg Local Root Exploit
No description provided by source. / hoagieudpsendmsg.c LOCAL LINUX KERNEL ROOT EXPLOIT 2.6.19 - CVE-2009-2698 udpsendmsg bug exploit via output callback function used in dstentry / rtable Bug reported by Tavis Ormandy and Julien Tinnes of the Google Security Team Tested with Debian Etch r0 $ cat...
Linux Kernel < 2.6.19 (Debian 4) - 'udp_sendmsg' Local Privilege Escalation (3)
/ hoagieudpsendmsg.c LOCAL LINUX KERNEL ROOT EXPLOIT include include include include include include include include / this code will be called from NFHOOK via output callback in kernel mode / void setcurrenttaskuidsgidstozero asm"push %eax\n" "movl $0xffffe000, %eax\n" "andl %esp, %eax\n" "movl...
Linux Kernel 2.6.19 (Debian 4) - udp_sendmsg Local Privilege Escalation (3)
Linux Kernel 2.6.19 Debian 4 - udpsendmsg Local Privilege Escalation 3 / hoagieudpsendmsg.c LOCAL LINUX KERNEL ROOT EXPLOIT include include include include include include include include / this code will be called from NFHOOK via output callback in kernel mode / void setcurrenttaskuidsgidstozero...
RedHat Security Advisory RHSA-2009:1233
The remote host is missing updates announced in advisory RHSA-2009:1233. The kernel packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: a flaw was found in the SOCKOPSWRAP macro in the Linux kernel. This macro did no...
RedHat Security Advisory RHSA-2009:1223
The remote host is missing updates announced in advisory RHSA-2009:1223. The kernel packages contain the Linux kernel, the core of any Linux operating system. These updated packages fix the following security issues: a flaw was found in the SOCKOPSWRAP macro in the Linux kernel. This macro did no...