Mozilla: Crash in SVGTextElement.getCharNumAtPosition()

The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute...

Gimp: Stack-based buffer overflow in Lighting plug-in

Stack-based buffer overflow in the loadpresetresponse function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long Position field...

Gimp: Stack-based buffer overflow in Lighting plug-in

Stack-based buffer overflow in the loadpresetresponse function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long Position field...

kernel: proc: protect mm start_code/end_code in /proc/pid/stat

The dotaskstat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the startcode and endcode fields in the /proc//stat file for a process executing a PIE...

DEBIAN-CVE-2010-4540

Stack-based buffer overflow in the loadpresetresponse function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS LIGHT" plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long Position field...

Fedora 14 : freetype-2.4.2-3.fc14 (2010-15878)

Bug 623625 - CVE-2010-3311 freetype: Input stream position error by processing Compact Font Format CFF font files Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

AT&T iPad Hack May Be Worse Than Initially Thought

Researchers looking into the security of GSM phone networks are suggesting that the recent breach, which saw tens of thousands of e-mail addresses and ICC-IDs inadvertantly disclosed AT&T, could have far more significant implications than a bit of extra spam: attackers can use the information to...

kernel: ALSA: hda-intel: Avoid divide by zero crash

The azxpositionok function in hdaintel.c in Linux kernel 2.6.33-rc4 and earlier, when running on the AMD780V chip set, allows context-dependent attackers to cause a denial of service crash via unknown manipulations that trigger a divide-by-zero error...

CVE-2010-0414

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...

CVE-2010-0414

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...

CVE-2010-0414: Undefined Security Weakness

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...

CVE-2009-1380

Cross-site scripting XSS vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key...

Adobe Reader Acrobat - .U3D File Invalid Array Index Overflow

Adobe Reader Acrobat - .U3D File Invalid Array Index Overflow Felipe Andres Manzano [email protected] http://twitter/feliam doc=''' Title: U3D CLODProgressiveMeshContinuation Split Position Index arbitrary dereference. Product: Adobe Acrobat Reader Version: =8.1.6, =9.1.3 Product...

DEBIAN-CVE-2009-3720

The updatePosition function in lib/xmltokimpl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service application crash via an XML document with crafted UTF-8 sequences that trigger a buffer over-read,...

Counterpoint: The need for a cybersecurity czar is real

As everyone prepares to examine the results of the Obama Administration’s cyber-security review, one of the largest issues in play remains to what extent the White House will embrace recommendations to create a Cabinet-level position to address the matter or some role superior to today’s “cyber...

Fedora Core 9 FEDORA-2009-1366 (gpsdrive)

The remote host is missing an update to gpsdrive announced via advisory FEDORA-2009-1366. OpenVAS Vulnerability Test $Id: fcore20091366.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1366 gpsdrive Authors: Thomas Reinke Copyright: Copyright c 2009...

Clean CMS 1.5 (full_txt.php id) Blind SQL Injection Exploit

No description provided by source. Clean CMS 1.5 fulltxt.php id Blind SQL Injection Exploit url: http://www.4yoursite.nl/scriptcleancms.php Author: JosS mail: sys-projectathotmaildotcom site: http://hack0wn.com && spanish-hackers.com team: Spanish Hackers Team - SHT This was written for education...

CVE-2008-2915: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php aka the search module in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the 1 position or 2 kw parameter...

CVE-2008-2914: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in jobseekers/JobSearch3.php aka the search module in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the 1 kw or 2 position parameter. NOTE: some of these details are obtained from third party information...

On the Expliot the guidelines for the preparation of the PNP the overflow vulnerability analysis and exploit-vulnerability warning-the black bar safety net

First, the vulnerability causes and impact of the range of Vulnerability causes as already briefly mentioned, we can see the vulnerability announcement. From the vulnerability announcement, we can see two points: 1． Vulnerability causes: Windows 2 0 0 0 version more than the PNP service remote...