Moderate: Red Hat Security Advisory: mod_cluster security update

An update for JBoss Enterprise Application Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which give...

JDK: XML parsing Denial-Of-Service (6845701)

Previously, a denial-of-service flaw was found in Java which allowed the creation of an inifinte loop in XML headers that would consume all CPU resources. This issue was patched and Java is no longer vulnerable to a denial-of-service flaw due to the initiation of an infinte loop by means of XML...

Mozilla SeaMonkey 2.x < 2.10 Multiple Vulnerabilities

Binary data 801375.prm...

SeaMonkey 2.x < 2.10 Multiple Vulnerabilities

Binary data 6496.prm...

DEBIAN-CVE-2011-1761

Multiple stack-based buffer overflows in the 1 abcnewmacro and 2 abcnewumacro functions in src/loadabc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ABC file. NOTE: some of these details are obtained fr...

Mozilla Firefox < 13.0 Multiple Vulnerabilities

Binary data 6497.prm...

Mozilla Thunderbird 12.x < 12 Multiple Vulnerabilities

Binary data 801240.prm...

Mozilla Thunderbird < 13.0 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 13.0 and thus, is potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist...

SeaMonkey < 2.10.0 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.10.0. Such versions are potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist...

Firefox < 13.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 13.0 and thus, is potentially affected by the following security issues : - An error exists in the ASN.1 decoder when handling zero length items that can lead to application crashes. CVE-2012-0441 - Multiple memory corruption errors exist...

Mozilla Firefox 12.x < 12 Multiple Vulnerabilities

Binary data 801297.prm...

Mozilla Thunderbird < 13.0 Multiple Vulnerabilities

Binary data 6498.prm...

Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow

This module exploits a stack-based buffer overflow in Photodex ProShow Producer v5.0.3256 in the handling of the plugins load list file. An attacker must send the crafted "load" file to victim, who must store it in the installation directory. The vulnerability will be triggered the next time...

Managing Your Nexpose Scan Engines through the API

Here's a walk-through of a Ruby script that uses the nexpose gem to add and configure your Nexpose Scan Engines. This script configures the Dynamic Scan Pool feature. A Scan Engine pool is a group of shared Scan Engines that can be bound to a site so that the load is distributed evenly across the...

VMware vMA不明细节本地权限提升漏洞

BUGTRAQ ID: 53697 CVE ID: CVE-2012-2752 vSphere Management Assistant vMA是允许管理员和开发者运行脚本和代理以管理ESXi主机和vCenter服务器系统的虚拟计算机。 VMWare vMA 4.0、4.1、5.0.0.1 之前版本在实现上存在加载任意文件导致的本地权限提升漏洞，攻击者可利用此漏洞以提升的权限执行任意代码。 0 VMWare vMA 5.0.0.1 VMWare vMA 4.1 VMWare vMA 4.0 厂商补丁： VMWare ------...

PHP Agenda 2.2.8 - SQL Injection

PHP Agenda 2.2.8 - SQL Injection Title:Simple PHP Agenda 2.2.8 SQLi Vulnerability Version: php-agenda 2.2.8 Author/Found by: loneferret Manifacturer/Software link: http://sourceforge.net/projects/php-agenda/files/latest/download Other vulnerability: http://www.exploit-db.com/exploits/18694/ Date...

Fedora 17 : gdb-7.4.50.20120120-42.fc17 (2012-6635)

Update 'set auto-load' patchset and the --with-auto-load-safe-path setting. Security fix for loading untrusted inferiors, see 'set auto-load'. Security fix for loading untrusted inferiors, see 'set auto-load'. Workaround crashes from stale frameinfo pointer BZ 804256. Security fix for loading...

FreeBSD : mozilla -- multiple vulnerabilities (380e8c56-8e32-11e1-9580-4061862b8c22)

The Mozilla Project reports : MFSA 2012-20 Miscellaneous memory safety hazards rv:12.0/ rv:10.0.4 MFSA 2012-21 Multiple security flaws fixed in FreeType v2.4.9 MFSA 2012-22 use-after-free in IDBKeyRange MFSA 2012-23 Invalid frees causes heap corruption in gfxImageSurface MFSA 2012-24 Potential XS...

Page load short-circuit can lead to XSS — Mozilla

Security researchers Jordi Chancel and Eddy Bordi reported that they could short-circuit page loads to show the address of a different site than what is loaded in the window in the addressbar. Security researcher Chris McGowen independently reported the same flaw, and further demonstrated that th...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2012-20 Miscellaneous memory safety hazards rv:12.0/ rv:10.0.4 MFSA 2012-21 Multiple security flaws fixed in FreeType v2.4.9 MFSA 2012-22 use-after-free in IDBKeyRange MFSA 2012-23 Invalid frees causes heap corruption in gfxImageSurface MFSA 2012-24 Potential XSS...