[SECURITY] Fedora 14 Update: rekonq-0.6.1-1.fc14

rekonq is a KDE browser based on QtWebkit. Its code is based on Nokia QtDemoBrowser, just like Arora. It's implementation is going to embrace KDE technologies to have a full-featured KDE web browser...

Microsoft IE多个未初始化内存远程代码执行漏洞（MS10-071）

BUGTRAQ ID: 43696,43705,43706,43707 CVE ID: CVE-2010-3326,CVE-2010-3328,CVE-2010-3329,CVE-2010-3331 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet...

Microsoft IE自动完成功能信息泄露漏洞（MS10-071）

BUGTRAQ ID: 43695 CVE ID: CVE-2010-0808 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer允许自动的脚本化指令在自动完成功能中模拟用户操作。攻击者可以通过创建特制的网页来利用这个漏洞，如果用户查看了该网页就会导致信息泄露。成功利用这个漏洞的攻击者可以捕获在启用了自动完成功能后曾经所输入字段的信息。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 临时解决方法： 将Internet...

[SECURITY] Fedora 13 Update: drupal-cck-6.x.2.8-1.fc13

The Content Construction Kit allows you create and customize fields using a web browser. The 4.7x version of CCK creates custom content types and allows you to add custom fields to them. In Drupal 5.x custom content types can be created in core, and CCK allows you to add custom fields to any...

[SECURITY] Fedora 12 Update: drupal-cck-6.x.2.8-1.fc12

The Content Construction Kit allows you create and customize fields using a web browser. The 4.7x version of CCK creates custom content types and allows you to add custom fields to them. In Drupal 5.x custom content types can be created in core, and CCK allows you to add custom fields to any...

Open redirect

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

[SECURITY] Fedora 14 Update: drupal-cck-6.x.2.8-1.fc14

The Content Construction Kit allows you create and customize fields using a web browser. The 4.7x version of CCK creates custom content types and allows you to add custom fields to them. In Drupal 5.x custom content types can be created in core, and CCK allows you to add custom fields to any...

Opera < 10.63 Multiple Vulnerabilities

Binary data 800852.prm...

Microsoft Windows Media Player Remote Code Execution Vulnerability (2378111)

This host is missing a critical security update according to Microsoft Bulletin MS10-082. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-3900

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

Microsoft Internet Explorer Uninitialized Memory Word Document Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. The following versions of the...

Microsoft .NET Framework JIT Compiler Optimization Remote Code Execution Vulnerability

Description The Microsoft .NET Framework is prone to a remote code-execution vulnerability. Successful exploits will allow the attacker to execute arbitrary code within the context of the currently logged-in user or the service account associated with an application pool identity. Failed exploit...

Microsoft Internet Explorer Uninitialized Memory CVE-2010-3326 Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...

Microsoft Internet Explorer Cross Domain CVE-2010-3330 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access content from a browser window in another domain or security zone. This may...

Microsoft Browser Embedded Media Player Memory Corruption (MS10-082; CVE-2010-2745)

Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in Windows Media Player. The vulnerability is due to an error in the Windows Media Player that improperly...

Microsoft Internet Explorer Uninitialized Memory CVE-2010-3331 Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...

Oracle Java Runtime HeadspaceSoundbank.nGetName BANK Record Size Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Java Runtime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Internet Explorer Uninitialized Memory CVE-2010-3328 Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...

US-CERT Technical Cyber Security Alert TA10-279A -- Adobe Reader and Acrobat Affected by Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA10-279A Adobe Reader and Acrobat Affected by Multiple Vulnerabilities Original release date: October 06, 2010 Last revised: -- Source: US-CERT Systems Affected Adobe Reader 9.3.4 and earlier...

CVE-2010-3730

Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, which allows remote attackers to have an unspecified impact via a crafted web site, related to a "property pollution" issue...