CVE-2009-2006

CVE-2009-2006 : Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5 (and possibly earlier) allow remote attackers to inject arbitrary script/HTML via several parameters in main/auth/courses.php, main/mySpace/myStudents.php, and related actions. Vectors 2 and 3 may require a separa...

ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability

ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-007 January 21, 2009 -- CVE ID: CVE-2009-2006 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IP...