CVE-2009-2811

Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature...

CVE-2009-2812

Launch Services in Apple Mac OS X 10.5.8 does not properly recognize an unsafe Uniform Type Identifier UTI in an exported document type in a downloaded application, which allows remote attackers to trigger the automatic opening of a file, and execute arbitrary code, via a crafted web site...

CVE-2009-2811

CVE-2009-2811 is an Apple Mac OS X 10.5.8 vulnerability in Launch Services described as an incomplete blacklist that allows a user-assisted remote attacker to execute arbitrary code via a .fileloc file, without triggering the quarantine warning. Connected sources confirm the issue affects Launch ...

CVE-2009-2812

CVE-2009-2812 affects Apple Mac OS X 10.5.8 where Launch Services may misinterpret an unsafe Uniform Type Identifier (UTI) in an exported document type from a downloaded application. This can allow a remote attacker to trigger automatic opening of a file and execute arbitrary code when a user vis...

Match Agency BiZ - edit_profile.php?important Cross-Site Scripting

Match Agency BiZ - editprofile.php?important Cross-Site Scripting source: https://www.securityfocus.com/bid/42976/info Datetopia Match Agency BiZ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...

Mac OS X Multiple Vulnerabilities (Security Update 2009-005)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...

CVE-2009-2200

WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document...

PG Matchmaking - 'services.php?show' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35808/info PG Matchmaking is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...

Design/Logic Flaw

The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specifies an immediate launch of the application after installation, related to an unspecified compression method...

CVE-2009-2027

Summary (CVE-2009-2027): Apple Safari on Windows before version 4.0 contains a local-privilege-escalation flaw in the Windows installer. Checking a box that triggers immediate application launch after installation (related to an unspecified compression method) can allow local users to gain privil...

Buffer overflow

Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...

Security feature bypass

The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allows remote attackers to 1 execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes v...

PT-2009-4156 · Sun · Sun Java Runtime Environment

Name of the Vulnerable Software and Affected Versions: Sun Java SE Runtime Environment JRE 6 Update 13 Description: The issue allows remote attackers to execute arbitrary code via a .jnlp URL in the argument to the launch method. Additionally, it might allow remote attackers to launch JRE...

CVE-2009-0156

Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service persistent Finder crash via a crafted Mach-O executable that triggers an out-of-bounds memory read...

CVE-2009-0156

Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service persistent Finder crash via a crafted Mach-O executable that triggers an out-of-bounds memory read...

CVE-2009-0156

CVE-2009-0156 : In Apple Mac OS X, Launch Services on 10.4.11 and 10.5 (before 10.5.7) allows remote attackers to cause a denial of service by feeding a crafted Mach-O executable that triggers an out-of-bounds memory read. The issue manifests as a persistent Finder crash (repeated termination/rel...

Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.7. Mac OS X 10.5.7 contains security fixes for the following products : - Apache - ATS - BIND - CFNetwork - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - iChat -...

Mac OS X Multiple Vulnerabilities (Security Update 2009-002)

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2009-002 applied. This security update contains fixes for the following products : - Apache - ATS - BIND - CoreGraphics - Cscope - CUPS - Disk Images - enscript - Flash Player plug-in - Help Viewer - IPSec -...

Ubuntu Update for mozilla-thunderbird vulnerabilities USN-503-1

Ubuntu Update for Linux kernel vulnerabilities USN-503-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5031.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mozilla-thunderbird vulnerabilities USN-503-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Novell QuickFinder Server - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/33708/info Novell QuickFinder Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...