Debian DSA-2250-1 : citadel - denial of service

Wouter Coekaerts discovered that the Jabber server component of Citadel, a complete and feature-rich groupware server, is vulnerable to the so-called'billion laughs' attack because it does not prevent entity expansion on received data. This allows an attacker to perform denial of service attacks...

[SECURITY] [DSA 2250-1] citadel security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2250-1 [email protected] http://www.debian.org/security/ Nico Golde March 31, 2011 http://www.debian.org/security/faq -...

Citadel Jabber server / Jabberd / ejabberd DoS

DoS on XML data parsing...

[SECURITY] [DSA 2249-1] jabberd14 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2249-1 [email protected] http://www.debian.org/security/ Nico Golde March 31, 2011 http://www.debian.org/security/faq -...

DSA-2249-1 jabberd14 - denial of service

Bulletin has no description...

Adobe Flash Media Server XML Data Remote Denial of Service Vulnerability

Adobe Flash Media Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

Adobe Flash Media Server FMS before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service XML data corruption via unspecified vectors...

CVE-2011-0612

Adobe Flash Media Server FMS before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service XML data corruption via unspecified vectors...

CVE-2011-0612: Undefined Security Weakness

Adobe Flash Media Server FMS before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service XML data corruption via unspecified vectors...

Adobe Flash Media Server CVE-2011-0612 XML数据远程拒绝服务漏洞

BUGTRAQ ID: 47840 CVE ID: CVE-2011-0612 Adobe Flash Media Server软件可提供了新的交付方法，可以显着节省带宽成本，减轻网络负载，以帮助您提供最佳的媒体体验。 Adobe Flash Media Server在实现上存在XML数据远程拒绝服务漏洞，远程攻击者可利用此漏洞造成拒绝服务 Adobe Flash Media Server 4.x Adobe Flash Media Server 3.5.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-11）以及相应补丁:...

CVE-2011-0994

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

Stack overflow

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

CVE-2011-0994

The CVE-2011-0994 issue affects the Novell File Reporter Agent (NFRAgent.exe). It is a stack/buffer overflow caused by improper boundary handling while parsing XML data, enabling a remote attacker to potentially execute arbitrary code on vulnerable Windows hosts. Public sources consistently refer...

CVE-2011-0994: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in NFRAgent.exe in Novell File Reporter NFR before 1.0.2 allows remote attackers to execute arbitrary code via unspecified XML data...

DSA-2128-1 libxml2 - potential code execution

Bulletin has no description...

Null pointer dereference

The PMPageFormatCreateWithDataRepresentation API in Printing in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle XML data, which allows attackers to cause a denial of service NULL pointer dereference and application crash via unspecified API calls...

CVE-2010-3784

The PMPageFormatCreateWithDataRepresentation API in Printing in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle XML data, which allows attackers to cause a denial of service NULL pointer dereference and application crash via unspecified API calls...

CVE-2010-3784: Undefined Security Weakness

The PMPageFormatCreateWithDataRepresentation API in Printing in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle XML data, which allows attackers to cause a denial of service NULL pointer dereference and application crash via unspecified API calls...

SuSE 11 Security Update : IBM Java 1.6.0 (SAT Patch Number 1497)

The IBM Java 6 JRE/SDK was updated to Service Release 6, fixing various bugs and security issues. The following security issues were fixed : - A security vulnerability in the JNLPAppletLauncher might impact users of the Sun JDK and JRE. Non-current versions of the JNLPAppletLauncher might be...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 6508)

IBM Java 1.4.2 was updated to SR13 FP1. It fixes following two security issues: CVE-2009-2625: A vulnerability in the Java Runtime Environment JRE with parsing XML data might allow a remote client to create a denial-of-service condition on the system that the JRE runs on. - A vulnerability in how...