CVE-2011-3894

CVE-2011-3894 affects Google Chrome (and Chromium-based builds) prior to version 15.0.874.120, where VP8 decoding could be manipulated by a crafted stream, leading to memory corruption and potentially other impact. The connected advisories corroborate multiple Chromium/V8 vulnerabilities around t...

CVE-2011-3894

Google Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted stream...

CVE-2011-3894

Removed by vendor...

CVE-2011-3894: Improper Restriction of Operations within the Bounds of a Memory Buffer

Google Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted stream...

Google Chrome < 15.0.874.120 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 15.0.874.120. It is, therefore, potentially affected by the following vulnerabilities : - A double-free error exists in the Theora decoder. CVE-2011-3892 - Out-of-bounds read errors exist in the MVK and Vorbis media handler...

PT-2011-4765

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 15.0.874.120 Description The issue is related to improper VP8 decoding, which can be exploited by remote attackers using a crafted stream. This can lead to a denial of service due to memory corruption, and...

ZDI-11-296 : Adobe Reader BMP Image RLE Decoding Remote Code Execution Vulnerability

ZDI-11-296 : Adobe Reader BMP Image RLE Decoding Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-296 October 26, 2011 -- CVE ID: CVE-2011-2438 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Reader --...

Adobe Reader BMP Image RLE Decoding Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Adobe Image...

Encipher It : Easiest Browser based Advanced Encryption Tools [Video Demonstration]

Encipher It : Easiest Browser based Advanced Encryption Tools Video Demonstration "Encipher It" One of the best and easiest AES Text encryptor for Google Mail or anything else. It Provide more secure PBKDF2 Password-Based Key Derivation Function key generation. It use Advanced Encryption Standard...

Windows Gather FTP Navigator Saved Password Extraction

This module extracts saved passwords from the FTP Navigator FTP client. It will decode the saved passwords and store them in the database. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Window...

CVE-2011-3692

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step...

Information disclosure

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step...

CVE-2011-3692

CVE-2011-3692 affects NetSaro Enterprise Messenger Server 2.0. The issue is information disclosure: the product stores cleartext console credentials in configuration.xml, allowing local users to read the file and decode credentials via base64. The NVD entry lists a low severity (CVSS v2 base scor...

CVE-2011-3692

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step...

qt4 security update

4.2.1-1.1 - Resolves: 737815, qt/harfbuzz buffer overflow, CVE-2011-3193 - Resolves: 234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242...

Wireshark 1.4.9 & Wireshark 1.6.2 updated version released

Wireshark 1.4.9 & Wireshark 1.6.2 updated version released Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education. The following bugs have been fixed: configure ignores partially LDFLAGS. Bug 5607 Build fails when it...

libavcodec / FFmpeg / MPlayer buffer overflow

Buffer overflow in CAVS decoding...

Windows Gather Internet Download Manager (IDM) Password Extractor

This module recovers the saved premium download account passwords from Internet Download Manager IDM. These passwords are stored in an encoded format in the registry. This module traverses through these registry entries and decodes them. Thanks to the template code of theLightCosine's CoreFTP...

Windows Gather IPSwitch iMail User Data Enumeration

This module will collect iMail user data such as the username, domain, full name, e-mail, and the decoded password. Please note if IMAILUSER is specified, the module extracts user data from all the domains found. If IMAILDOMAIN is specified, then it will extract all user data under that particula...

broadcast-listener NSE Script

Sniffs the network for incoming broadcast communication and attempts to decode the received packets. It supports protocols like CDP, HSRP, Spotify, DropBox, DHCP, ARP and a few more. See packetdecoders.lua for more information. The script attempts to sniff all ethernet based interfaces with an IP...