Fedora 12 : pidgin-2.7.5-1.fc12 (2010-17130)

New release 2.7.5 Full Upstream ChangeLog : - http://developer.pidgin.im/wiki/ChangeLogversion2.7.410 202010 - http://developer.pidgin.im/wiki/ChangeLogversion2.7.5 10312010 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 14 : cvs-1.11.23-11.fc14 (2010-16721)

Thu Oct 21 2010 Petr Pisar - 1.11.23-11 - Fix CVE-2010-3846 bug 645386 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Adobe Flash Player CVE-2010-3643 Remote Memory Corruption Vulnerability

Description Adobe Flash Player is prone to a remote memory corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. NOTE: This iss...

RedHat Update for kernel RHSA-2010:0792-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0792-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Adobe Flash Player CVE-2010-3648 Remote Memory Corruption Vulnerability

Description Adobe Flash Player is prone to a remote memory corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. NOTE: This iss...

RedHat Update for xulrunner RHSA-2010:0809-01

Check for the Version of xulrunner OpenVAS Vulnerability Test RedHat Update for xulrunner RHSA-2010:0809-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mozilla Firefox document.write()方式堆溢出漏洞

BUGTRAQ ID: 44425 CVE ID: CVE-2010-3765 Firefox是一款非常流行的开源WEB浏览器。 在启用了JavaScript的情况下，Firefox的document.write方式处理结合DOM注入可能触发堆溢出。攻击者可以通过 nsCSSFrameConstructor::ContentAppended、appendChild等方式触发这个漏洞，导致完全入侵用户系统。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla Thunderbird 3.1.x Mozilla Thunderbird...

Fedora 14 : sepostgresql-9.0.1-20101007.fc14 (2010-15870)

Upgrade base version to v9.0.1 which contains various bug and security fixes. - http://www.postgresql.org/docs/9.0/static/release-9-0.ht ml - http://www.postgresql.org/docs/9.0/static/release-9-0- 1.html Note that Tenable Network Security has extracted the preceding description block directly fro...

Mozilla Firefox Modal调用跨域信息泄露漏洞

BUGTRAQ ID: 44252 CVECAN ID: CVE-2010-3178 Firefox是一款非常流行的开源WEB浏览器。 如果网页打开了新的窗口并使用javascript: URL执行modal调用，如alert，且之后将网页导航到了不同的域，则modal调用返回到窗口的打开程序就可以访问所导航到窗口中的对象。这违反了同源策略，允许用户窃取其他网站的敏感信息。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla Thunderbird 3.1.x Mozilla Thunderbird 3.0.x Mozilla...

Mozilla Firefox LookupGetterOrSetter函数悬停指针漏洞

BUGTRAQ ID: 44249 CVE ID: CVE-2010-3183 Firefox是一款非常流行的开源WEB浏览器。 Firefox的js3250.dll库中存在安全漏洞。在创建和删除JavaObject时，由于没有对LookupGetterorSetter 函数执行过滤检查，可能导致向JSValueToId函数传送悬停指针。远程攻击者可以利用这个漏洞以SYSTEM用户权限执行任意代码。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla Thunderbird 3.1.x Mozilla Thunderbird 3.0.x...

RedHat Update for kernel RHSA-2010:0779-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0779-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2010-3855

Buffer overflow in the ftvarreadpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TrueType GX font...

RHEL 4 / 5 : thunderbird (RHSA-2010:0780)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0780 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content...

seamonkey security update

1.0.9-64.0.1.el4 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and emoved corresponding RedHat ones 1.0.9-64.el4 - Added fixes from 1.9.1.14...

RedHat Update for xpdf RHSA-2010:0750-01

Check for the Version of xpdf OpenVAS Vulnerability Test RedHat Update for xpdf RHSA-2010:0750-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

RedHat Update for cups RHSA-2010:0754-01

Check for the Version of cups OpenVAS Vulnerability Test RedHat Update for cups RHSA-2010:0754-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

RedHat Update for xpdf RHSA-2010:0750-01

Check for the Version of xpdf OpenVAS Vulnerability Test RedHat Update for xpdf RHSA-2010:0750-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

RedHat Update for java-1.6.0-openjdk RHSA-2010:0768-01

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.6.0-openjdk RHSA-2010:0768-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RedHat Piranha Virtual Server Package - 'passwd.php3' Arbitrary Command Execution (Metasploit)

$Id: piranhapasswdexec.rb 10729 2010-10-18 15:41:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

gpdf security update

CentOS Errata and Security Advisory CESA-2010:0752 An updated gpdf package that fixes two security issues is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base...