Facebook Warns Users About Timeline Adware

Facebook issued a video warning to its hundreds of millions of users on Thursday about the dangers of adware programs that lure users with promises of special features. In a video message from the Facebook Security group, the company said that a growing number of companies are fooling Facebook...

GLSA-201203-14 : Audacious Plugins: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201203-14 Audacious Plugins: User-assisted execution of arbitrary code Multiple vulnerabilities have been found in Audacious Plugins: The 'CSoundFile::ReadWav' function in loadwav.cpp contains an integer overflow which could cause...

Audacious Plugins: User-assisted execution of arbitrary code

Background Plugins for the Audacious music player. Description Multiple vulnerabilities have been found in Audacious Plugins: The "CSoundFile::ReadWav" function in loadwav.cpp contains an integer overflow which could cause a heap-based buffer overflow CVE-2011-2911. The "CSoundFile::ReadS3M"...

FOCA PRO 3.1 and MetaShield Protector Released

FOCA PRO 3.1 and MetaShield Protector Released Forensic FOCA New latest version of FOCA announced today, in this case a Forensic FOCA. This tool is specially created for forensic analyst, allowing them to crawl metadata from files and to create a powerful time-line of metadata. This information...

Fedora Update for xchat-ruby FEDORA-2012-1325

Check for the Version of xchat-ruby OpenVAS Vulnerability Test Fedora Update for xchat-ruby FEDORA-2012-1325 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for glpi MDVSA-2012:014 (glpi)

Check for the Version of glpi OpenVAS Vulnerability Test Mandriva Update for glpi MDVSA-2012:014 glpi Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for gstreamer-plugins-bad-free FEDORA-2012-1147

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 15 Update: xchat-ruby-1.2-11.fc15

For those of us that prefer the Ruby programming language above all others, the XChat-Ruby Plugin now allows X-Chat plugins to be written in Ruby, in addition to the other supported scripting interfaces. This means that, for the first time, you can use a purely object-oriented language in which t...

[SECURITY] Fedora 15 Update: gstreamer-plugins-bad-free-0.10.22-1.fc15.1

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

Fedora 15 : gstreamer-plugins-bad-free-0.10.22-1.fc15.1 / firefox-10.0-1.fc15 / etc (2012-1147)

Latest security update of Mozilla products and dependent packages. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 16 : gstreamer-plugins-bad-free-0.10.22-2.fc16.2 / firefox-10.0-1.fc16 / libvpx-1.0.0-1.fc16 / etc (2012-1140)

Latest security update of Mozilla products and dependent packages. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 16 Update: wireshark-1.6.5-1.fc16

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

CVE-2012-0897

CVE-2012-0897: A stack-based buffer overflow in the IrfanView JPEG2000 plugin (JP2) allows remote code execution when parsing a crafted Quantization Default (QCD) marker in a JPEG2000 file. Affected: IrfanView PlugIns prior to 4.33. Impact, per sources: remote arbitrary code execution and possibl...

Fedora Update for pidgin FEDORA-2011-17546

Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2011-17546 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 15 Update: pidgin-2.10.1-1.fc15

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

GLSA-201201-02 : MySQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201201-02 MySQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details. Impact : An unauthenticated remote attacker may be able to execute...

Nagios Plugins check_ups - Local Buffer Overflow (PoC)

Advisory: Nagios Plugin 'checkups' local buffer overflow Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on nagios-plugins-1.4.15 Vendor URL: http://nagiosplugins.org/ ./checkups -u perl -e 'print "A"x16407' buffer overflow detected : ./checkups...

CVE-2011-3664

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

Thunderbird 8.x Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird 8.x is potentially affected by the following security issues : - An out-of-bounds memory access error exists in the 'SVG' implementation and can be triggered when 'SVG' elements are removed during a 'DOMAttrModified' event handler. CVE-2011-3658 - Various memo...

Firefox 8.x Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox 8.x is potentially affected by the following security issues : - An out-of-bounds memory access error exists in the 'SVG' implementation and can be triggered when 'SVG' elements are removed during a 'DOMAttrModified' event handler. CVE-2011-3658 - Various memory...