Multiple WebGL crashes — Mozilla

Mozilla security researcher Christoph Diehl reported two crashes in WebGL code. One crash was the result of an out-of-bounds read and could be used to read data from other processes who had stored data in the GPU. The severity of this issue was determined to be high. The second crash was the resu...

FreeBSD : fetchmail -- STARTTLS denial of service (f7d838f2-9039-11e0-a051-080027ef73ec)

Matthias Andree reports : Fetchmail version 5.9.9 introduced STLS support for POP3, version 6.0.0 added STARTTLS for IMAP. However, the actual STARTTLS-initiated in-band SSL/TLS negotiation was not guarded by a timeout. Depending on the operating system defaults as to TCP stream keepalive mode,...

Ubuntu Update for linux USN-1141-1

Ubuntu Update for Linux kernel vulnerabilities USN-1141-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11411.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1141-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Fedora 15 : bind-9.8.0-5.P2.fc15 (2011-7617)

This update fixes CVE-2011-1910 : - large RRSIG RRsets and negative caching can crash named Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Wireshark < 1.2.17 / 1.4.7 Multiple DoS Vulnerabilities

The installed version of Wireshark is 1.2.x less than 1.2.17 or 1.4.x less than 1.4.7. As such, it is affected by the following vulnerabilities : - An error exists in DICOM dissector that can allow denial of service attacks when processing certain malformed packets. Issue 5876 - An error exists i...

SuSE 11.1 Security Update : Xen (SAT Patch Number 4491)

Collective May/2011 update for Xen Xen : - 679344: Xen: multi-vCPU pv guest may crash host - 675817: Kernel panic when creating HVM guests on AMD platforms with XSAVE - 678871: dom0 hangs long time when starting hvm guests with memory = 64GB - 675363: Random lockups with kernel-xen. Possibly...

Stable Channel Update

The Stable channel has been updated to 11.0.696.71 for the Macintosh, Windows, Linux and Chrome Frame platforms Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with th...

Opera < 11.11 Multiple Vulnerabilities

Binary data 5925.prm...

Apache APR -- DoS vulnerabilities

The Apache Portable Runtime Project reports: A flaw was discovered in the aprfnmatch function in the Apache Portable Runtime APR library 1.4.4 or any backported versions that contained the upstream fix for CVE-2011-0419. This could cause httpd workers to enter a hung state 100% CPU utilization...

Opera < 11.11 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.11. Such versions are potentially affected by: - A memory corruption vulnerability exists. The application does not properly handle specific framesets when unloading a page. An attacker could craft a web page that will...

Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:089 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Researchers Warn of Security Issues in WebGL Standard

Security researchers are warning users that there are a number of vulnerabilities and potential problems with WebGL, and emerging standard for 3D rendering on the Web, that could cause serious problems for users. The weaknesses in WebGL range from denial-of-service problems to cross-domain file...

openSUSE Security Update : libpython2_6-1_0 (openSUSE-SU-2010:1049-1)

a race condition in the accept implementation of smtpd.py could lead to a denial of service CVE-2010-3493. - integer overflows and insufficient size checks could crash the audioop module CVE-2010-2089, CVE-2010-1634. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

fetchmail -- STARTTLS denial of service

Matthias Andree reports: Fetchmail version 5.9.9 introduced STLS support for POP3, version 6.0.0 added STARTTLS for IMAP. However, the actual STARTTLS-initiated in-band SSL/TLS negotiation was not guarded by a timeout. Depending on the operating system defaults as to TCP stream keepalive mode,...

SuSE Update for kernel SUSE-SA:2011:017

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark < 1.2.16 / 1.4.5 Multiple Vulnerabilities

The installed version of Wireshark is 1.2.x less than 1.2.16 or 1.4.x less than 1.4.5. Such versions are affected by the following vulnerabilities : - A data type mismatch error exists in the function 'dissectnfsclientaddr4' in the file 'packet-nfs.c' of the NFS dissector and could lead to...

Google Chrome < 11.0.696.57 Multiple Vulnerabilities

Binary data 800937.prm...

MS11-024: Description of the security update for Windows Fax Cover Page Editor MFC components: April 12, 2011

None None...

Mandriva Update for pidgin MDVSA-2011:050 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2011:050 pidgin Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

SuSE 11 Security Update : MozillaFirefox, MozillaFirefox-branding-upstream, etc (SAT Patch Number 2254)

Mozilla Firefox was updated to version 3.5.9 fixing lots of bugs and security issues. The following security issues were fixed : - Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed...