CVE-2011-2787: Improper Input Validation

Google Chrome before 13.0.782.107 does not properly address re-entrancy issues associated with the GPU lock, which allows remote attackers to cause a denial of service application crash via unspecified vectors...

CVE-2011-2787

CVE-2011-2787 : Google Chrome prior to 13.0.782.107 is affected. The issue is a re-entrancy flaw in the GPU lock that can be exploited by remote attackers to cause a denial of service via unspecified vectors, potentially crashing the browser. The vulnerability is documented in CVE-2011-2787 as af...

PT-2011-4090

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description The issue is related to re-entrancy problems associated with the GPU lock. This can be exploited by remote attackers to cause a denial of service, resulting in an application crash, via...

CVE-2011-0215

ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF file...

CVE-2011-0215

ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF file...

CVE-2011-0215

CVE-2011-0215 affects ImageIO in Apple Safari on Windows, where a re-entrancy issue in TIFF handling could be exploited to execute arbitrary code or cause an application crash. The vulnerability stems from ImageIO’s TIFF processing and was publicly described in the Apple advisory chain associated...

CVE-2011-2350: Undefined Security Weakness

The HTML parser in Google Chrome before 12.0.742.112 does not properly address "lifetime and re-entrancy issues," which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

JVN#01547302: ALZip vulnerable to buffer overflow

ALZip is a file compression/extraction software from ESTsoft Japan Corp. ALZip contains a buffer overflow vulnerability due to improper handling of mim files. Impact When opening a specially crafted file, arbitrary code may be executed. Solution Re-install the software Download ALZip 8.21 after...

PT-2011-3791

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 12.0.742.112 Description The issue is related to the HTML parser, which does not properly address lifetime and re-entrancy issues. This allows remote attackers to cause a denial of service or possibly have...

FreeBSD : drupal6 -- multiple vulnerabilities (1acf9ec5-877d-11e0-b937-001372fd0af2)

Drupal Team reports : A reflected cross site scripting vulnerability was discovered in Drupal's error handler. Drupal displays PHP errors in the messages area, and a specially crafted URL can cause malicious scripts to be injected into the message. The issue can be mitigated by disabling on-scree...

Amazon: Faulty Upgrade Caused EC2 Outtage

Amazon’s multi day outtage on its Elastic Computer Cloud EC2 started with a faulty upgrade to one of its East Coast facility just after midnight on April 21, the company admitted in a blog post on Thursday. The network change, described as part of “normal AWS Amazon Web Services scaling activity,...

Report: Application Security Still Mostly Sucks

The third State of Software Security SOSS report finds that software developers are still doing a poor job of making applications secure. Application testing firm Veracode, which compiled the report, found that 58% of almost 5,000 applications failing a security audit on the first pass – about th...

SuSE9 Security Update : dhcpcd (YOU Patch Number 12699)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 Note: this is a...

http-affiliate-id NSE Script

Grabs affiliate network IDs e.g. Google AdSense or Analytics, Amazon Associates, etc. from a web page. These can be used to identify pages with the same owner. If there is more than one target using an ID, the postrule of this script shows the ID along with a list of the targets using it. Support...

D0z.me URL Shortener Facilitates DDoS Attacks !

D0z.me URL Shortener Facilitates DDoS Attacks ! Conceptual hacker Ben Schmidt has combined his interest in the recent spate of DDoS attacks surrounding the WikiLeaks dump as well as what he holds to be the public's increasing over-reliance on URL shorteners and created D0z.me. D0z.me is a...

Google Enhances Search Security to Flag Compromised Web Pages

Google has introduced a new security feature in its search engine to flag more web pages that might have been compromised by hackers. This new feature expands Google's long-standing program that marks websites hosting malicious software with a “This site may harm your computer” warning. Now, a ne...

Hero DVD Player 3.0.8 URL re-orientation stack overflow vulnerability-vulnerability warning-the black bar safety net

Using hero DVD Player users tricked into following a maliciousWeb serverthe URL on the redirect you can trigger a stack overflow, leading to arbitrary code execution Test code: Exploit Title : Hero DVD Remote Buffer Overflow Exploit Date : July 7, 2 0 1 0 Author : chap0 www.seek-truth.net Softwar...

MS Updates Windows Server Patch It Pulled

Microsoft has re-released a security update targeting a vulnerability on Windows 2000 Server.The company pulled support for MS10-025 last week. Read the full article. eWEEK...

Microsoft Re-Releases Security Update for MS10-025

Microsoft has re-released the security update related to Microsoft security bulletin MS10-025. This vulnerability affects Windows Media Services running on Windows 2000 Server. The original release of this update had been revoked last week because it did not effectively correct the underlying...

Microsoft Revokes Security Update

The Microsoft Security Response Center has posted a blog entry indicating that it has revoked the update related to Microsoft security bulletin MS10-025 because it does not effectively correct the underlying vulnerability. This vulnerability affects Windows Media Services running on Windows 2000...