[Kil13r-SA-20100513] Adobe Flash Player 10.0 Denial Of Service Vulnerability

Title: Kil13r-SA-20100513 Adobe Flash Player 10.0 Denial Of Service Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Local Timeline: 2008/10/22 - Discover 2009/07/19 - Vendor notification 2009/07/21 - Vendor response 2009/07/25 - Contact vendor 2009/07/28 - Vendor response...

CVE-2010-1987

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption, out-of-bounds read, and application crash via JavaScript code that appends long strings to the content of a P element, and performs certain other string concatenation and substring...

Out-of-bounds

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption, out-of-bounds read, and application crash via JavaScript code that appends long strings to the content of a P element, and performs certain other string concatenation and substring...

Design/Logic Flaw

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption and application crash via JavaScript code that creates multiple arrays containing elements with long string values, and then appends long strings to the content of a P element, related ...

CVE-2010-1987

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption, out-of-bounds read, and application crash via JavaScript code that appends long strings to the content of a P element, and performs certain other string concatenation and substring...

CVE-2010-1986

Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service memory consumption and application crash via JavaScript code that creates multiple arrays containing elements with long string values, and then appends long strings to the content of a P element, related ...

CVE-2010-1987

Mozilla Firefox 3.6.3 on Windows XP SP3 is affected by CVE-2010-1987, allowing remote attackers to trigger memory consumption and a crash through crafted JavaScript that appends long strings to a P element and performs string operations. The root cause is tied to DoubleWideCharMappedString in USP...

CVE-2010-0775

Unspecified vulnerability in IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service memory consumption and daemon crash via a crafted request, related to the nodeagent and Deployment Manager...

Design/Logic Flaw

Unspecified vulnerability in IBM WebSphere Application Server WAS 6.0 before 6.0.2.41, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service memory consumption and daemon crash via a crafted request, related to the nodeagent and Deployment Manager...

Mandriva Update for x11-server MDVA-2010:147 (x11-server)

Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDVA-2010:147 x11-server Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Mandriva Update for x11-server MDVA-2010:147 (x11-server)

Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDVA-2010:147 x11-server Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities

Adobe Shockwave Player 11.5.6.606 - DIR Multiple Memory Vulnerabilities / Title: Adobe Shockwave Player 11.5.6.606 DIR Multiple Memory Vulnerabilities Vendor: Adobe Systems Incorporated Product web page: http://www.adobe.com Summary: Over 450 million Internet-enabled desktops have installed Adobe...

CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

Code injection

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7011)

This update fixes a several security issues and various bugs in the SUSE Linux Enterprise 10 SP 2 kernel. The bugs fixed include a serious data corruption regression in NFS. The following security issues were fixed : - drivers/net/r8169.c in the r8169 driver in the Linux kernel does not properly...

SuSE9 Security Update : Apache 2 (YOU Patch Number 12613)

The following bugs have been fixed : - Integer overflows in libapr could potentially be exploited to execute arbitrary code. CVE-2009-2412 - Specially crafted XML documents cause apache to consume large amounts of memory. CVE-2009-1955 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

All Browsers - Long Unicode Denial of Service (PoC)

DrIDE - All Browsers - Long Unicode DoS PoC function boom //The number of strings increases the amount of memory consumed, quicker crash where applicable. var longunistring1 = unescape"%u4141%u4141"; var longunistring2 = unescape"%u4242%u4242"; var longunistring3 = unescape"%u4343%u4343"; var...

Mandriva Update for gtkspell MDVA-2010:140 (gtkspell)

Check for the Version of gtkspell OpenVAS Vulnerability Test Mandriva Update for gtkspell MDVA-2010:140 gtkspell Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...