Debian DSA-2786-1 : icu - several vulnerabilities

The Google Chrome Security Team discovered two issues a race condition and a use-after-free issue in the International Components for Unicode ICU library. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securit...

Debian Security Advisory DSA 2786-1 (icu - several vulnerabilities)

The Google Chrome Security Team discovered two issues a race condition and a use-after-free issue in the International Components for Unicode ICU library. OpenVAS Vulnerability Test $Id: deb2786.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2786-1 using nvtgen 1.0...

Debian DSA-2785-1 : chromium-browser - several vulnerabilities

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2013-2906 Atte Kettunen of OUSPG discovered race conditions in Web Audio. - CVE-2013-2907 Boris Zbarsky discovered an out-of-bounds read in window.prototype. - CVE-2013-2908 Chamal de Silva discovered an address bar...

[Doona] Network Protocol Fuzzer

Doona is a fork of the Bruteforce Exploit Detector, it was renamed to avoid confusion as it has a large number of of changes. You should get a copy from github if you want to try it: https://github.com/wireghoul/doona. It's currently a little short on documentation, so I will let the changelog...

[SECURITY] [DSA 2785-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2785-1 [email protected] http://www.debian.org/security/ Michael Gilbert October 26, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2786-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-5178

LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence...

Design/Logic Flaw

LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence...

CVE-2013-5178

CVE-2013-5178 : In Apple Mac OS X prior to 10.9, LaunchServices does not properly restrict Unicode characters in filenames, allowing context-dependent attackers to spoof file extensions via crafted character sequences. The underlying issue is the handling/filtering of Unicode characters in displa...

CVE-2013-5178

LaunchServices in Apple Mac OS X before 10.9 does not properly restrict Unicode characters in filenames, which allows context-dependent attackers to spoof file extensions via a crafted character sequence...

ICU: Layout Engine font processing errors (JDK 2D, 8001031)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous...

ALLPlayer 5.6.2 - '.m3u' Local Buffer Overflow (PoC)

Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSIONS AFFECTED ---- ALLPlayer 5.6.2 2Proof of Concept...

ALLPlayer 5.6.2 - .m3u Local Buffer Overflow (PoC)

ALLPlayer 5.6.2 - .m3u Local Buffer Overflow PoC Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSIONS...

ALLPlayer Local Buffer Overflow PoC UNICODE

Exploit for windows platform in category dos / poc Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSION...

ALLPlayer 5.6.2 Buffer Overflow

Title: ALLPlayer Local Buffer Overflow PoC UNICODE Vendor: http://www.allplayer.org/download/allplayer Date found: 09.10.2013 Date published: 09.10.2013 Platform: windows 7 German Bug: Buffer Overflow UNICODE ---------------------------- 1VERSIONS AFFECTED ---- ALLPlayer 5.6.2 2Proof of Concept...

DEBIAN-CVE-2013-2924

Use-after-free vulnerability in International Components for Unicode ICU, as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

Design/Logic Flaw

Use-after-free vulnerability in International Components for Unicode ICU, as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

Design/Logic Flaw

Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...

CVE-2013-2909

Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...

CVE-2013-2909

Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...