Mozilla Thunderbird < 2.0.0.14 Multiple Vulnerabilities

The installed version of Thunderbird is affected by various security issues : - A series of vulnerabilities exist that allow for JavaScript privilege escalation and arbitrary code execution. - Several stability bugs exist leading to crashes which, in some cases, show traces of memory corruption. ...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-5219)

This update brings Mozilla Firefox to security update version 2.0.0.14 Following security problems were fixed : - MFSA 2008-20/CVE-2008-1380: Fixes for security problems in the JavaScript engine described in MFSA 2008-15 CVE-2008-1237 introduced a stability problem, where some users experienced...

IBM DB2数据库JAR文件处理多个拒绝服务漏洞

BUGTRAQ ID: 28835 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 DB2的RECOVERJAR和REMOVEJAR过程处理畸形参数数据时存在漏洞，如果用特殊参数调用了RECOVERJAR和REMOVEJAR过程的话，就可能导致DB2例程崩溃。 任何DB2数据库用户都可以利用这个漏洞，因为默认为这两个过程分配了PUBLIC权限。 IBM DB2 Universal Database 9.5 IBM DB2 Universal Database...

firefox -- javascript garbage collector vulnerability

Mozilla Foundation reports: Fixes for security problems in the JavaScript engine described in MFSA 2008-15 introduced a stability problem, where some users experienced crashes during JavaScript garbage collection. This is being fixed primarily to address stability concerns. We have no demonstrati...

XM Easy Personal FTP Server 5.4.0 (XCWD) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================== XM Easy Personal FTP Server 5.4.0 XCWD Denial of Service Exploit ================================================================== !/usr/bin/python XM Easy Personal FTP Server...

Debian Security Advisory DSA 1535-1 (iceweasel)

The remote host is missing an update to iceweasel announced via advisory DSA 1535-1. OpenVAS Vulnerability Test $Id: deb15351.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1535-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

openSUSE 10 Security Update : wireshark (wireshark-5145)

Multiple flaws in wireshark could lead to crashes when certain packets are processed CVE-2008-1561,CVE-2008-1562,CVE-2008-1563 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wireshark-5145. T...

Debian DSA-1534-1 : iceape - several vulnerabilities

This shares a lot of text with dsa-1532.wml, dsa-1535.wml, dsa-1574.wml Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the SeaMonkey Internet Suite. The Common Vulnerabilities and Exposures project identifies the following problems : -...

MS Windows Explorer Unspecified .DOC File Denial of Service Exploit

Exploit for unknown platform in category dos / poc =================================================================== MS Windows Explorer Unspecified .DOC File Denial of Service Exploit =================================================================== MS Windows Explorer Unspecified .DOC File...

DSA-1535-1 iceweasel

Bulletin has no description...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : firefox vulnerabilities (USN-592-1)

Alexey Proskuryakov, Yosuke Hasegawa and Simon Montagu discovered flaws in Firefox's character encoding handling. If a user were tricked into opening a malicious web page, an attacker could perform cross-site scripting attacks. CVE-2008-0416 Various flaws were discovered in the JavaScript engine...

[SECURITY] [DSA 1532-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1532-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 27, 2008 http://www.debian.org/security/faq -...

SeaMonkey < 1.1.9 Multiple Vulnerabilities

The installed version of SeaMonkey is affected by various security issues : - A series of vulnerabilities that allow for JavaScript privilege escalation and arbitrary code execution. - Several stability bugs leading to crashes which, in some cases, show traces of memory corruption. - An HTTP...

Firefox < 2.0.0.13 Multiple Vulnerabilities

The installed version of Firefox is affected by various security issues : - A series of vulnerabilities that allow for JavaScript privilege escalation and arbitrary code execution. - Several stability bugs leading to crashes which, in some cases, show traces of memory corruption. - An HTTP Refere...

Apple Safari (webkit) Remote Denial of Service Exploit (iphone/osx/win)

No description provided by source. !-- Even though Georgi Guninski retired from the scene, his old code is still finding new bugs. iphone fw:1.1.4 : locks up safari win32 : crashes safari osx : crashes looped the x's on milw0rm to find the bug...

bzip2 -- crash with certain malformed archive files

SecurityFocus reports: The 'bzip2' application is prone to a remote file-handling vulnerability because the application fails to properly handle malformed files. Exploit attempts likely result in application crashes...

safariphone-dos.txt

Copyright Georgi Guninski Cannot be used in vulnerability databases Especially securityfocus/mitre/cve/cert var s=String.fromCharCode257; var ki=""; var me=""; fori=0;i...

SuSE 10 Security Update : boost (ZYPP Patch Number 4978)

Certain regular expressions could cause the boost library to crash. CVE-2008-0171 / CVE-2008-0172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31452;...

openSUSE 10 Security Update : ethereal (ethereal-5056)

This update fixes the following bugs : - the SCTP dissector could crash - the SNMP dissector could crash - the TFTP dissector could crash Wireshark maybe a bug in the Cairo library on specific platforms %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

Fedora 7 : mailman-2.1.9-5.3 (2008-1356)

Tue Feb 5 2008 Tomas Smetana - 3:2.1.9-5.3 - patch for CVE-2008-0564; XSS triggerable by list administrator - Wed Dec 5 2007 Tomas Smetana - 3:2.1.9-5.2 - more LCCTYPE fixes - Tue Oct 16 2007 Tomas Smetana - 3:2.1.9-5.1 - fix 333011 -- withlist crashes with NameError Note that Tenable Network...