CVE-2012-2880

Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer...

CVE-2012-2881

Technical details (affected product/component/version, root cause, exploit info, or remediation) are not publicly available in the provided connected documents beyond the initial CVE description. Monitor for updates from official advisories.

Citrix Receiver / Online Plug-in Remote Code Execution (CTX134681)

Citrix Receiver prior to 3.3 or Citrix Online Plug-in prior to 12.3 is installed on the remote Windows host. As such, the install is potentially affected by an unspecified code execution vulnerability. By exploiting this flaw, a remote, unauthenticated attacker could execute arbitrary code on the...

CVE-2012-2880: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer...

Citrix Online Plug-in Installed

Citrix Online-plugin, formerly ICA Client, a client application for accessing remote documents and virtual desktops, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62308; scriptversion"1.9";...

CVE-2012-2878: Undefined Security Weakness

Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling...

PT-2012-4329

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.79 Description A race condition issue exists, allowing remote attackers to cause a denial of service or possibly have other unspecified impacts. This issue is related to vectors involving the plug-in...

PT-2012-4330

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.79 Description The issue is related to improper handling of plug-ins, which can be exploited by remote attackers to cause a denial of service through DOM tree corruption, and possibly have other...

PT-2012-4327

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.79 Description A use-after-free issue exists, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts through vectors related to plug-in handling...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 143439 High CVE-2012-2889: UXSS in frame handling. Credit to Sergey Glazunov. 143437 High CVE-2012-2886: UXSS in v8 bindings. Credit to Sergey Glazunov. 139814 High CVE-2012-2881: DOM tree corruption with plug-ins. Credit to Chamal de Silva. 135432 High...

CVE-2012-5006

CVE-2012-5006 affects Caminova DjVu Browser Plug-in, specifically the npdjvu.dll component. A heap-based buffer overflow in the plug-in allows remote attackers to execute arbitrary code via a crafted Sjbz chunk in a DJVU file. Affected versions include 6.1.4 Build 27351 and earlier than 6.1.4.279...

PT-2012-5724

Name of the Vulnerable Software and Affected Versions Caminova DjVu Browser Plug-in versions 6.1.4 Build 27351 through 6.1.4.27992 Description The issue is related to a heap-based buffer overflow in the npdjvu.dll component. This can be triggered by remote attackers sending a crafted Sjbz chunk i...

KLA10138 ACE vulnerability in DjVu Browser Plug-in

A buffer overflow was found in the DjVu Browser Plug-in. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed djvu file. Original advisories Changelog Exploitation Related products DjVu-Browser-Plug-In C...

CVE-2012-5006: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in npdjvu.dll in Caminova DjVu Browser Plug-in 6.1.4 Build 27351 and other versions before 6.1.4.27993 allows remote attackers to execute arbitrary code via a crafted Sjbz chunk in a djvu file...

BlackHole Exploit Kit 2.0 released with more latest Exploits

According to release announcement on Pastebin by unknown developers in a Russian-language BlackHole Exploit Kit 2.0 released with more latest Exploits. BlackHole is one of the most dominant exploit toolkits currently available in the underground market. It enables attackers to exploit security...

CVE-2012-4759

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

CVE-2012-4759

CVE-2012-4759 describes an untrusted search path vulnerability in Foxit Reader’s Facebook plug-in (facebook_plugin.fpi). A local attacker could gain privileges by placing a Trojan horse dwmapi.dll in the current working directory while Foxit Reader 5.3.1.0606 is running, as demonstrated by a dire...

CVE-2012-4759

Untrusted search path vulnerability in facebookplugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .pdf file. NOTE: some of these...

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detaile...

RedHat Update for java-1.6.0-openjdk RHSA-2012:1221-01

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.6.0-openjdk RHSA-2012:1221-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...