CVE-2011-1049: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Macho-O file...

PT-2011-2839

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to an unspecified vulnerability in the Mach-O input file loader, which allows user-assisted remote attackers to cause a denial of service. This can result in an...

IDA Pro Mach-O Loader Buffer Overflow

The version of IDA Pro, an interactive disassembler, installed on the remote host is either 5.7 or 6.0 and includes a version of the Mach-O loader that is affected by a buffer overflow vulnerability. By tricking a user into opening a specially crafted Mac OS X Mach-O file using the affected loade...

[SECURITY] [DSA 2153-1] linux-2.6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2153-1 [email protected] http://www.debian.org/security/ dann frazier January 30, 2011 http://www.debian.org/security/faq -...

PT-2011-2556

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.01 Description The issue concerns the Cascading Style Sheets CSS Extensions for XML implementation, which recognizes links to javascript: URLs in the -o-link property. This makes it easier for remote attackers to...

CVE-2011-0681: Undefined Security Weakness

The Cascading Style Sheets CSS Extensions for XML implementation in Opera before 11.01 recognizes links to javascript: URLs in the -o-link property, which makes it easier for remote attackers to bypass CSS filtering via a crafted URL...

[SECURITY] [DSA 2153-1] linux-2.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2153-1 [email protected] http://www.debian.org/security/ dann frazier January 30, 2011 http://www.debian.org/security/faq -...

DSA-2153-1 linux-2.6 - several issues

Bulletin has no description...

CentOS 4 : kernel (CESA-2011:0162)

Updated kernel packages that fix multiple security issues and two bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2010-4163

The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service panic via a zero-length I/O request in a device ioctl to a SCSI device...

Cross site request forgery (csrf)

The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service panic via a zero-length I/O request in a device ioctl to a SCSI device...

CVE-2010-4668

The blkrqmapuseriov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service panic via a zero-length I/O request in a device ioctl to a SCSI device, related to an unaligned map. NOTE: this vulnerability exists because of an incomplete fix f...

Fedora Update for squid FEDORA-2010-14149

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2010-14149 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

RHEL 4 : kernel (RHSA-2010:0779)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0779 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues:...

Fedora Update for squid FEDORA-2010-14236

Check for the Version of squid OpenVAS Vulnerability Test Fedora Update for squid FEDORA-2010-14236 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

[SECURITY] Fedora 12 Update: kernel-2.6.32.16-150.fc12

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

Directory traversal

Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operatio...

CVE-2010-2666: Undefined Security Weakness

Opera before 10.54 on Windows and Mac OS X does not properly enforce permission requirements for widget filesystem access and directory selection, which allows user-assisted remote attackers to create or modify arbitrary files, and consequently execute arbitrary code, via widget File I/O operatio...

Unrestricted File I/O can be used by Widgets to execute arbitrary code

Widgets may use File I/O to create, read, modify, or delete files, with the user's permission. When using this functionality, Opera should request permission from the user, and ask for a location to use for the files that will be manipulated. In some cases, Opera fails to ask for permission, and...