[USN-1042-1] PHP vulnerabilities

=========================================================== Ubuntu Security Notice USN-1042-1 January 11, 2011 php5 vulnerabilities CVE-2009-5016, CVE-2010-3436, CVE-2010-3709, CVE-2010-3710, CVE-2010-3870, CVE-2010-4156, CVE-2010-4409, CVE-2010-4645...

CVE-2010-3444

Buffer overflow in the log2visutf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Arabic UTF-8 string that causes original...

CVE-2010-3444

Buffer overflow in the log2visutf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Arabic UTF-8 string that causes original...

DEBIAN-CVE-2010-3444

Buffer overflow in the log2visutf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Arabic UTF-8 string that causes original...

CVE-2010-3444

Buffer overflow in the log2visutf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Arabic UTF-8 string that causes original...

Buffer overflow

Buffer overflow in the log2visutf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Arabic UTF-8 string that causes original...

CVE-2010-3444

Buffer overflow in the log2visutf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Arabic UTF-8 string that causes original...

CVE-2010-3444

Buffer overflow in the log2visutf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Arabic UTF-8 string that causes original...

Fedora 14 : pyfribidi-0.10.0-1.fc14 (2011-0001)

Update to 0.10.0 - Fix CVE-2010-3444: buffer overflow when processing Arabic UTF-8 strings - Run the included tests Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Fedora 13 : pyfribidi-0.10.0-1.fc13 (2011-0010)

Update to 0.10.0 - Fix CVE-2010-3444: buffer overflow when processing Arabic UTF-8 strings - Run the included tests Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Ad Muncher 4.81 Cross Site Scripting

Hello Full-Disclosure! I want to warn you about Cross-Site Scripting vulnerability in Ad Muncher. In May I already wrote about universal XSS in Ad Muncher http://websecurity.com.ua/4202/, which allowed to conduct XSS attacks on any sites in any browsers. Which existed in versions before Ad Munche...

Mozilla Firefox Security Bypass Vulnerability (Windows)

The host is installed with Mozilla Firefox and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxsecuritybypassvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ Mozilla Firefox Security Bypass Vulnerability Windows Authors: Sooraj KS Copyright: Copyright c 2010...

Mozilla Firefox Security Bypass Vulnerability - Windows

Mozilla Firefox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-5017

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210...

CVE-2009-5017

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210...

Cross site scripting

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210...

CVE-2009-5017

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210...

CVE-2009-5016

Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...

CVE-2009-5017

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210...

CVE-2010-3870

The utf8decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string...