Moderate: Red Hat Security Advisory: cups security update

Updated cups packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX® Printing System CUPS provides a portable printing layer for UNIX operating system...

[SECURITY] Fedora 9 Update: libpng10-1.0.41-1.fc9

The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...

acroread: crash and possible code execution

Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a malformed PDF document, as demonstrated by 2008-HI2.pdf...

Reader: Download Manager input validation flaw

The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption...

security flaw

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service NULL pointer...

security flaw

The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory vi...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

No description provided by source. !-- KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Summary: KVIrc is a free portable IRC client based on the excellent Qt GUI toolkit. KVirc is being written by Szymon Stefanek and the KVIrc Development Team with the contribution of many IRC addicted...

KVIrc 3.4.0 Virgo Remote Format String Exploit PoC

Exploit for unknown platform in category dos / poc ================================================== KVIrc 3.4.0 Virgo Remote Format String Exploit PoC ================================================== KVIrc v3.4.0 Virgo Remote Format String Exploit PoC Warning ! : alert"KVIrc v3.4.0 Virgo Remo...

[SECURITY] Fedora 9 Update: cups-1.3.9-1.fc9

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

Mozilla crashes with evidence of memory corruption

Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to graphics rendering and 1 handling of a long alert messagebox in the...

zlib DoS

zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...

[SECURITY] Fedora 9 Update: libetpan-0.54-1.fc9

The purpose of this mail library is to provide a portable, efficient middle ware for different kinds of mail access. When using the drivers interface, the interface is the same for all kinds of mail access, remote and local mailbo xes...

DEBIAN-CVE-2008-2950

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Page constructor, which allows remote attackers to execute arbitrary code via a crafted PDF document...

[SECURITY] Fedora 9 Update: libetpan-0.54-1.fc9

The purpose of this mail library is to provide a portable, efficient middle ware for different kinds of mail access. When using the drivers interface, the interface is the same for all kinds of mail access, remote and local mailbo xes...

Important: Red Hat Security Advisory: freetype security update

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 25th June 2008 The original packages distributed with this errata had a bug...

Cross site scripting

Cross-site scripting XSS vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search...

Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit

No description provided by source. html !-- !!!NOT PRIVATE PLEASE DISTRIBUTE!!! Zer0Day Creative Software AutoUpdate Engine ActiveX Stack-Overflow CacheFolder Exploit by BitKrush BitKrush +A.T.+ G.M.A.I.L.D.0.T.C.0.M. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder...

creative-overflow.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...

Creative Software AutoUpdate Engine - ActiveX Stack Overflow

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...

[SECURITY] Fedora 8 Update: cups-1.3.7-2.fc8

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...