Malware PDF Spreads Via World Cup Emails

Researchers are reporting on an ongoing targeted malware campaign using a FIFA World Cup 2010 theme, in an attempt to trick end users into executing a malicious PDF file, exploiting a recently patched flaw in Adobe Reader. Read the full article. ZDNet...

Mike Mimoso on the Schmidt Appointment and the Top Security Stories of 2009

Dennis Fisher talks with Mike Mimoso, editorial director of the Security Media Group at TechTarget, about Howard Schmidt’s appointment, the top security stories of 2009 and the World Cup draw. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

World Cup Email Scams on the Rise

Cybercrooks have begun punting World Cup ticket and HD TV viewing scams as a successor to earlier lottery-based cons. Read the full article. The Register...

SuSE9 Security Update : XFree86-Xnest (YOU Patch Number 12043)

This update fixes various Xserver security issues. - File existence disclosure vulnerability. CVE-2007-5958 - XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. - TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. - EVI Extension Integer Overflow...

Pixelactivo 3.0 - Authentication Bypass

Pixelactivo 3.0 - Authentication Bypass Pixelactivo 3.0 Auth bypass Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.pixelactivo.com Special Thx: Snakespc Exploit: ------ Username: adminname' or '1=1 Password: ThE g0bL!N Demo: ----...

Mandriva Update for x11-server-xgl MDVSA-2008:025 (x11-server-xgl)

Check for the Version of x11-server-xgl OpenVAS Vulnerability Test Mandriva Update for x11-server-xgl MDVSA-2008:025 x11-server-xgl Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Ubuntu: Security Advisory (USN-571-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for libxfont, xorg-server vulnerabilities USN-571-1

Ubuntu Update for Linux kernel vulnerabilities USN-571-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5711.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxfont, xorg-server vulnerabilities USN-571-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CentOS Update for XFree86-100dpi-fonts CESA-2008:0029 centos3 x86_64

Check for the Version of XFree86-100dpi-fonts OpenVAS Vulnerability Test CentOS Update for XFree86-100dpi-fonts CESA-2008:0029 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

CUPS: Multiple vulnerabilities

Background CUPS is the Common Unix Printing System. Description Several buffer overflows were found in: The readrle16 function in imagetops CVE-2008-3639, found by regenrecht, reported via ZDI The WriteProlog function in texttops CVE-2008-3640, found by regenrecht, reported via ZDI The...

XFree86 / X.Org / NX multiple security vulnerabilities

XInput and TOG-CUP extensions memory corruption, EVI and MIT-SHM extensions integer overflows, multiple extensions array index overflows. libxfont PCF fonts parsing buffer overflow...

SuSE 10 Security Update : xorg-x11-Xnest (ZYPP Patch Number 4875)

This update fixes various Xserver security issues. File existence disclosure vulnerability. CVE-2007-5958 XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. EVI Extension Integer Overflow Vulnerability...

X.Org X server and Xfont library: Multiple vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description regenrecht reported multiple vulnerabilities in various X server extension via iDefense: The XFree86-Misc extension does not properly sanitize a parameter within a PassMessage request,...

CVE-2007-6428

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...

DEBIAN-CVE-2007-6428

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...

CVE-2007-6428

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...

CVE-2007-6428

CVE-2007-6428: In the X.Org Xserver TOG-CUP extension, ProcGetReservedColormapEntries allows a context-dependent attacker to read arbitrary memory via a 32-bit value used as an array index (vulnerable in X.Org Xserver before 1.4.1). Impact: partial information disclosure. Concrete details appear ...

xfree86: information disclosure via TOG-CUP extension

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxfont, xorg-server vulnerabilities (USN-571-1)

Multiple overflows were discovered in the XFree86-Misc, XInput-Misc, TOG-CUP, EVI, and MIT-SHM extensions which did not correctly validate function arguments. An authenticated attacker could send specially crafted requests and gain root privileges. CVE-2007-5760, CVE-2007-6427, CVE-2007-6428,...

xfree86: information disclosure via TOG-CUP extension

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...