Immunity Canvas: PLONE

Name| plone ---|--- CVE| CVE-2011-3587 Exploit Pack| CANVAS Description| Plone Zope Remote Command Execution Notes| CVE Name: CVE-2011-3587 Notes: Vulnerable versions include: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zope 2.13.x. Repeatability: Infinite CVE Url:...

CVE-2011-2986

Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D aka D2D API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data...

CVE-2011-2986

Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D aka D2D API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data...

Design/Logic Flaw

Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D aka D2D API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data...

CVE-2011-2986

CVE-2011-2986 affects Mozilla Firefox 4.x–5, Thunderbird before 6, and SeaMonkey 2.x before 2.3 on Windows when using Direct2D. The issue allows cross‑origin data theft by inserting image data from a different domain into a canvas, potentially bypassing the Same Origin Policy. Root cause, as stat...

Mozilla Thunderbird 5 Multiple Vulnerabilities

Binary data 801266.prm...

Adobe Flash Player ActionScript 3 Movie Canvas Memory Corruption (APSB11-21; CVE-2011-2135)

The vulnerability is due an error in the way the application performs boundary checks on the ActionScript tags while loading objects to Movie Canvas in SWF files. A remote attacker could exploit this vulnerability by enticing an unsuspecting victim to open a web page containing malicious SWF file...

Immunity Canvas: MS11_054

Name| ms11054 ---|--- CVE| CVE-2011-1888 Exploit Pack| CANVAS Description| MS11-054 Privilege Escalation Exploit Notes| Repeatability: Notes: Tested on Windows XP SP3 x86, Windows 2003 SP2 x86/64, Windows 2008 x86/64, Windows 7 x86/64. VENDOR: Microsoft CVE Url:...

CVE-2011-2619

Opera before 11.50 allows remote attackers to cause a denial of service application crash via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets CSS...

Design/Logic Flaw

Opera before 11.50 allows remote attackers to cause a denial of service application crash via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets CSS...

CVE-2011-2619

CVE-2011-2619 affects Opera browser prior to 11.50. The vulnerability arises from the handling of gradients with many stops in CANVAS elements, SVG, and CSS, enabling a remote attacker to crash the application (denial of service). Several connected advisories corroborate the same description, ind...

CVE-2011-2619

Opera before 11.50 allows remote attackers to cause a denial of service application crash via a gradient with many stops, related to the implementation of CANVAS elements, SVG, and Cascading Style Sheets CSS...

Immunity Canvas: FIREFOX_ARRAY_REDUCERIGHT

Name| firefoxarrayreduceright ---|--- CVE| CVE-2011-2371 Exploit Pack| CANVAS Description| Firefox Array reduceRight Notes| CVE Name: CVE-2011-2371 CVE URL: https://vulners.com/cve/CVE-2011-2371 Repeatability: Infinite...

PT-2011-16: Denial Of Service in Mozilla Firefox

Positive Research Center has discovered a Denial of Service vulnerability in Mozilla Firefox. Due to insufficient checks of input parameters of HTML5 Canvas' Arc method, Mozilla Firefox allows a remote attacker to cause a denial of service infinite loop. Example of HTML code triggering the...

Immunity Canvas: FLASH_APSB11_18

Name| flashAPSB1118 ---|--- CVE| CVE-2011-2110 Exploit Pack| CANVAS Description| flashAPSB1118 Notes| CVE Name: CVE-2011-2110 VENDOR: Adobe Notes: This is an exploit found in the wild, targeting Windows Flash player versions 10.3.181.23 and earlier. VersionsAffected: Windows Flash Player versions...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 7501)

This update to wireshark version 1.4.5 fixes the following security issues : - Resource Management Errors. CWE-399, CVE-2011-1590 - Buffer Errors. CWE-119, CVE-2011-1591 - Numeric Errors CWE-189, CVE-2011-1592 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugi...

SuSE 11.1 Security Update : wireshark (SAT Patch Number 4476)

This update to wireshark version 1.4.5 fixes the following security issues : - Resource Management Errors. CWE-399, CVE-2011-1590 - Buffer Errors. CWE-119, CVE-2011-1591 - Numeric Errors CWE-189, CVE-2011-1592 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Immunity Canvas: FIREFOX_CHANNELREDIRECT

Name| firefoxchannelredirect ---|--- CVE| CVE-2011-0065 Exploit Pack| CANVAS Description| Firefox Notes| CVE Name: CVE-2011-0065 Repeatability: Infinite MFSA: http://www.mozilla.org/security/announce/2011/mfsa2011-13.html...

openSUSE Security Update : libmodplug (openSUSE-SU-2011:0350-1)

Libmodplug is vulnerable to a stack based buffer overflow when handling malicious S3M media files. CVE-2011-1574 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Updat...

Fedora 13 : wireshark-1.2.16-1.fc13 (2011-5529)

Upgrade to latest release, fixing few security bugs. See http://www.wireshark.org/docs/relnotes/wireshark-1.2.16.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...