5883 matches found
Tips For Managing The IE Aurora Attack
Here are some steps Microsoft and other security firms recommend you can take now to help defend yourself against the IE Aurora attacks. Read the full article. Dark Reading...
Child of Storm Botnet 'Waledac' Is Expansive
In an undercover mission to learn more about the size and scope of the son of the infamous Storm botnet, Waledac, German researchers have discovered the spamming botnet is much bigger and more efficient than previously thought. Read the full article. Dark Reading...
Free Tool Helps Graphically Visualize Attacks
The free Picviz tool from the Honeynet Project takes data from various log analysis sources and converts them into a multidimensional visual map of events. Read the full article. Dark Reading...
CVE-2009-4023
Argument injection vulnerability in the sendmail implementation of the Mail::Send method Mail/sendmail.php in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111...
Autodesk SoftImage Scene TOC Arbitrary Command Execution
Exploit for unknown platform in category local exploits ======================================================== Autodesk SoftImage Scene TOC Arbitrary Command Execution ======================================================== Title: Autodesk SoftImage Scene TOC Arbitrary Command Execution CVE-ID...
Autodesk SoftImage Scene TOC - Arbitrary Command Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk SoftImage Scene TOC Arbitrary Command Execution 1. Advisory Information Title: Autodesk SoftImage Scene TOC Arbitrary Command Execution Advisory Id:...
Design/Logic Flaw
The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...
Opera may allow scripts to access feeds
Opera may allow scripts to run on the feed subscription page, thereby gaining access to the feeds object. This can be used for automatic subscription of feeds, or reading other feeds...
poppler security and bug fix update
0.5.4-4.4.el54.11 - Fixes various flaws addressed in bugs 526637, 526893 and 526915 which were tracked in 527403. - Resolves: 527403 0.5.4-4.4.el54.10 - Add poppler-0.5.4-JBIG2-segment-reading.patch to fix reading of arithmetically encoded JBIG2 images with unknown length. - Resolves: 528147...
Solaris Update for Gnome libtiff - library for reading and writing TIFF 119901-08
Check for the Version of Gnome libtiff - library for reading and writing TIFF OpenVAS Vulnerability Test Solaris Update for Gnome libtiff - library for reading and writing TIFF 119901-08 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net...
Solaris Update for Gnome libtiff - library for reading and writing TIFF 119901-08
Check for the Version of Gnome libtiff - library for reading and writing TIFF OpenVAS Vulnerability Test Solaris Update for Gnome libtiff - library for reading and writing TIFF 119901-08 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net...
SuSE 11 Security Update : libpng (SAT Patch Number 1039)
This update of libpng improves the parsing of 1-bit interlaced images. This bug could be abused to use 'out-of-bounds pixels' to read memory. CVE-2009-2042 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 updat...
[SECURITY] Fedora 10 Update: evolution-rss-0.1.4-3.fc10
This is an evolution plugin which enables evolution to read rss feeds...
CVE-2009-3123
CVE-2009-3123 is a directory traversal vulnerability in Wap-Motor (before version 18.1) affecting the file gallery/gallery.php . The issue occurs when an attacker supplies a malicious value for the image parameter containing “..”, enabling an attacker to read arbitrary files and potentially discl...
CVE-2009-2701
The CVE-2009-2701 issue affects Zope Object Database (ZODB) with ZEO storage-server sharing and blob support enabled, specifically ZODB versions prior to 3.8.3 (3.8.x) and prior to 3.9.0c2 (3.9.x). The vulnerability allows remote authenticated users to read or delete arbitrary files via unknown v...
CVE-2009-2944
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands...
CVE-2009-2935
Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript...
Design/Logic Flaw
Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript...
