CVE-2010-4260

Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF document, aka 1 "bb 2358" and 2 "bb 2396."...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 2320)

Specially crafted PDF documents could crash acroread or even lead to execution of arbitrary code. CVE-2010-0190 / CVE-2010-0191 / CVE-2010-0192 / CVE-2010-0193 / CVE-2010-0194 / CVE-2010-0195 / CVE-2010-0196 / CVE-2010-0197 / CVE-2010-0198 / CVE-2010-0199 / CVE-2010-0201 / CVE-2010-0202 /...

Image Of The Day: Wikileaks Cablegate By the Numbers

Its no surprise that the headlines this Monday that weren’t about the online shopping Bacchanal known as Cyber Monday were about the latest purge of confidential documents from Wikileaks. The Web site, which made a name for itself by publishing leaked documents concerning the wars in Iraq and...

Wikileaks, Dodging DDoS, Bounces Back to Amazon

The Web site of Wikileaks was moving quickly to stay out of the way of large scale denial of service attacks on Sunday and Monday, following the release of a trove of sensitive U.S. diplomatic cables. The controversial site, which has spent months trying to find a home secure from government...

Chinese National Stole Ford Secrets Worth More Than $50 Million

A ten year veteran of the U.S. automaker Ford Motor Company pleaded guilty in federal court on November 17 to charges that he stole company secrets, including design documents, worth more than $50 million and sharing them with his new employer: the Chinese division of a U.S. rival of Ford’s. Xian...

Internet Explorer CSS clip attribute memory corruption

Added: 11/16/2010 CVE: CVE-2010-3962 BID: 44536 OSVDB: 68987 Background Cascading Style Sheets CSS is a simple mechanism for adding style to web documents. Problem A memory corruption vulnerability allows command execution when a user loads a web page containing a CSS clip attribute with a specif...

Adobe Flash Player Flash Content Parsing Code Execution

Added: 11/16/2010 CVE: CVE-2010-3654 BID: 44504 OSVDB: 68932 Background Adobe Reader is free software for viewing PDF documents. Problem Adobe Reader 9.x is vulnerable to a remote code execution vulnerability as a result of parsing flash content by the bundled Adobe Flash Player. Resolution Apply...

CVE-2010-3899

IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial of service infinite loop via a crafted series of documents...

CVE-2010-3335

Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Drawing...

Cyber Criminal Underground: The Comics Edition

The criminal underworld is an insular community shrouded in secrecy. That’s helped lend an air of mystique to cyber crime. See also: Bruce Willis in “Die Hard 4: Live Free or Die Hard.”. But it turns out that, like so much else, real life cyber crime is… well… pretty dull. How dull? Comic artist...

Ubuntu Update for poppler vulnerabilities USN-1005-1

Ubuntu Update for Linux kernel vulnerabilities USN-1005-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10051.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for poppler vulnerabilities USN-1005-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1005-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for acroread SUSE-SA:2010:048

Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2010:048 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SuSE Update for acroread SUSE-SA:2010:048

Check for the Version of acroread OpenVAS Vulnerability Test SuSE Update for acroread SUSE-SA:2010:048 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Microsoft IE HtmlDlgHelper类内存破坏漏洞（MS10-071）

BUGTRAQ ID: 43706 CVE ID: CVE-2010-3329 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Windows在实例化Office文档（如.XLS、.DOC）中HtmlDlgHelper类对象（CLASSID: 3050f4e1-98b5-11cf-bb82-00aa00bdce0b）的方式存在内存破坏漏洞。有漏洞的模块是Internet Explorer中的mshtmled.dll，当调用CHtmlDlgHelper类的析构程序之后访问未初始化内存时就会在mshtmled.dll...

Memory corruption

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word to read Word documents, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted,...

CVE-2010-3331

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word to read Word documents, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted,...

PT-2010-4742 · Microsoft · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 8 Description: A remote code execution issue exists due to improper handling of objects in memory when using Microsoft Word to read Word documents. This allows attackers to execute arbitrary code...

openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-2883, CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890, CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622, CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626,...

SuSE 10 Security Update : expat (ZYPP Patch Number 6619)

Specially crafted XML documents could make expat run into an enless loop, therefore locking up applications using expat. CVE-2009-3720 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...