8796 matches found
CVE-2008-4582
Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not properly identify the context of Windows .url shortcut files, which allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive...
xen security and bug fix update
3.0.3-64.el52.3 - Fix overflow in qemu-img rhbz 454651 3.0.3-64.el52.2 - Correctly limit PVFB size CVE-2008-1952 rhbz 447760 - Disable QEMU USB disk image format auto-detection CVE-2008-1945 rhbz 445845...
CVE-2008-4199
Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to determine the validity of local filenames via vectors involving "detection of JavaScript events and appropriate manipulation."...
Gentoo Security Advisory GLSA 200412-15 (Ethereal)
The remote host is missing updates announced in advisory GLSA 200412-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200501-27 (ethereal)
The remote host is missing updates announced in advisory GLSA 200501-27. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200412-15 (Ethereal)
The remote host is missing updates announced in advisory GLSA 200412-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-3613
Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving a search for a remote disk on the local network...
CVE-2008-3613
CVE-2008-3613 affects Finder in Apple Mac OS X 10.5.2–10.5.4. The vulnerability allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a search for a remote disk on the local network. The NVD entry records a base CVSS v2 score of 6.1 (M...
Microsoft Windows WRITE_ANDX SMB处理远程拒绝服务漏洞
BUGTRAQ ID: 31179 CNCAN ID：CNCAN-2008091604 Microsoft Windows是一款商业性质的操作系统。 Microsoft Windows srv.sys驱动处理畸形WRITEANDX SMB报文存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 srv.sys和npfs.sys驱动在处理特殊构建的WRITEANDX...
CVE-2008-3613: Undefined Security Weakness
Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving a search for a remote disk on the local network...
FreeBSD Ports: libxine
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
[IVIZ-08-007] DriveCrypt Security Model bypass exploiting wrong BIOS API usage
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-007 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...
Grub, DiskCryptor, LILO, DriveCrypt, TrueCRYPT and Intel, IBM, HP BIOS disk ebcryption utilities information leak
Cleartext password is not erased from BIOS data buffer...
A step-by-step teach you to use the U disk into password of system-vulnerability warning-the black bar safety net
U disk is now very popular, however, if you just take it to store data, perhaps a little pity. In fact, we also can make U disk to play a greater energy! For example, today xiaobian teach you a trick that will allow your USB disk instead of the login system The password only when you plug in the ...
[IVIZ-08-009] Grub Legacy Security Model bypass exploiting wrong BIOS API usage
----------------------------------------------------------------------- iViZ Security Advisory 08-009 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...
[IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage
----------------------------------------------------------------------- iViZ Security Advisory 08-006 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...
FreeBSD : opera -- multiple vulnerabilities (73ec1008-72f0-11dd-874b-0030843d3802)
The Opera Team reports : Scripts are able to change the addresses of framed pages that come from the same site. Due to a flaw in the way that Opera checks what frames can be changed, a site can change the address of frames on other sites inside any window that it has opened. This allows sites to...
USN-637-1: Linux kernel vulnerabilities
It was discovered that there were multiple NULL-pointer function dereferences in the Linux kernel terminal handling code. A local attacker could exploit this to execute arbitrary code as root, or crash the system, leading to a denial of service. CVE-2008-2812 The dochangetype routine did not...
AIX 610000 : U818907
The remote host is missing AIX PTF U818907 which is related to the security of the package devices.fcp.disk.array.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...