Mozilla Foundation Security Advisory 2009-43

Mozilla Foundation Security Advisory 2009-43 Title: Heap overflow in certificate regexp parsing Impact: Critical Announced: August 1, 2009 Reporter: Moxie Marlinspike Products: Firefox, Thunderbird, SeaMonkey, NSS Fixed in: Firefox 3.5 NSS 3.12.3 Description Moxie Marlinspike reported a heap...

JDK DoS with crafted .jnlp file

The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service NullPointerException via a crafted .jnlp file, as demonstrated by the jnlpfile/appletDesc/index.htmlmisc test in the Technology Compatibility Kit TCK for the Java...

Fedora Core 11 FEDORA-2009-8046 (kdelibs3)

The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-8046. OpenVAS Vulnerability Test $Id: fcore20098046.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8046 kdelibs3 Authors: Thomas Reinke Copyright: Copyright c 2009...

windows x86 null-free bindshell for Windows 5.0-7.0 all service packs

Exploit for win32 platform in category shellcode ===================================================================== Windows x86 null-free bindshell for Windows 5.0-7.0 all service packs ===================================================================== BITS 32 ; Windows x86 null-free...

Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================= Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit ============================================================= / Live For Speed 2 Version Z .Mpr Local buffer Overflow...

Live For Speed 2 Version Z - .Mpr Local Buffer Overflow

Live For Speed 2 Version Z - .Mpr Local Buffer Overflow / Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit !! X version .mpr header specifications can be found at http://www.lfs.net/?page=MPR Version :Patch Z and all previous versions. Vendor :http://www.lfs.net/ Release date: July...

Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit

No description provided by source. / Live For Speed 2 Version Z .Mpr Local buffer Overflow Exploit !! X version .mpr header specifications can be found at http://www.lfs.net/?page=MPR Version :Patch Z and all previous versions. Vendor :http://www.lfs.net/ Release date: July 14th 2009 Patch for th...

RedHat Security Advisory RHSA-2009:1139

The remote host is missing updates announced in advisory RHSA-2009:1139. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. The AOL Open System for CommunicAtion in Realtime OSCAR protocol is used by the AOL ICQ and...

RedHat Security Advisory RHSA-2009:1139

The remote host is missing updates announced in advisory RHSA-2009:1139. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. The AOL Open System for CommunicAtion in Realtime OSCAR protocol is used by the AOL ICQ and...

icu security update

3.6-5.11.4 - Resolves: rhbz505159 CVE-2009-0153 guarantee abi 3.6-5.11.3 - Resolves: rhbz505159 CVE-2009-0153...

Microsoft Security Bulletin MS09-027 - Critical

Microsoft Security Bulletin MS09-027 - Critical Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution 969514 Published: June 9, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities that could allow remote...

PT-2009-3206 · Microsoft · Office For Mac +4

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel versions 2000 SP3 through 2003 SP3 Microsoft Office Excel versions 2007 SP1 through SP2 Microsoft Office Excel Viewer version 2003 SP3 Microsoft Office Excel Viewer affected versions not specified Microsoft Office...

Microsoft Security Bulletin MS09-021 - Critical Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)

Microsoft Security Bulletin MS09-021 - Critical Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution 969462 Published: June 9, 2009 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities that could allow...

Security Update for the 2007 Microsoft Office System (KB969679)

A security vulnerability exists in the 2007 Microsoft Office System and the Microsoft Office Compatibility Pack that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Word Record Parsing Length Field Remote Stack Buffer Overflow Vulnerability

Description Microsoft Word is prone to a stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected...

Microsoft Word Record Parsing Buffer Overflow Vulnerability

Description Microsoft Word is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft Office...

[SECURITY] Fedora 10 Update: squirrelmail-1.4.19-1.fc10

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

[SECURITY] Fedora 9 Update: squirrelmail-1.4.19-1.fc9

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...

Security fix for the ALT Linux 6 package openssl10 version 0.9.8k-alt2

May 21, 2009 Evgeny Sinelnikov 0.9.8k-alt2 - Added extra symlinks for backwards compatibility with Fedora's libssl8. - Backported security updates from 0.9.8l: CVE-2009-1377, CVE-2009-1378, CVE-2009-1379...

Claroline v.1.8.11 Cross-Site Scripting

Author: Gerendi Sandor Attila Original Advisory: http://gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html Date: May 05, 2009 Package: Claroline 1.8.11 Product Homepage: http://www.claroline.net/ Versions Affected: v.1.8.11 Other versions may also be affected Severity: Medium...