CVE-2010-0052: Undefined Security Weakness

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to "callbacks for HTML elements."...

Safari < 4.0.5 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 4.0.5. It thus is potentially affected by several issues : - A buffer underflow in ImageIO's handling of TIFF images could lead to a crash or arbitrary code execution. CVE-2009-2285 - An integer overflow in the handling of...

Mac OS X : Apple Safari < 4.0.5

The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.5. As such, it is potentially affected by several issues : - An implementation issue in the handling of cookies set by RSS and Atom feeds could result in a cookie being set when visiting or updating a feed even ...

Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the decompression of XLSX files. The XL...

Mozilla Firefox SVG Element Processing Memory Corruption (CVE-2009-2469)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, and various graphic formats, and so on. The browser runs on Windows,...

CVE-2010-0658

Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service memory corruption and application crash via vectors involving CANVAS elements...

CVE-2010-0658

Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service memory corruption and application crash via vectors involving CANVAS elements...

Integer overflow

Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service memory corruption and application crash via vectors involving CANVAS elements...

CVE-2010-0658

Removed by vendor...

CVE-2010-0658

Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service memory corruption and application crash via vectors involving CANVAS elements...

CVE-2010-0658

CVE-2010-0658 covers multiple integer overflows in Skia used by Google Chrome prior to version 4.0.249.78, enabling remote code execution in the Chrome sandbox or a denial of service via CANVAS-related vectors. Affected: Skia canvas handling within Chrome; root cause: integer overflows leading to...

CVE-2010-0658: Undefined Security Weakness

Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service memory corruption and application crash via vectors involving CANVAS elements...

Mandriva Security Advisory MDVSA-2009:254-1 (graphviz)

The remote host is missing an update to graphviz announced via advisory MDVSA-2009:254-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Adobe Photoshop Elements Active File Monitor Service Privilege Escalation (APSB09-17)

Binary data adobeactivefilemonitorsvcprivescalation.nbin...

Adobe Photoshop Elements Privilege Escalation

To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add && net localgroup Administrators adobe /ad...

WebKit资源装载回调信息泄漏漏洞

Bugraq ID: 36996 CVE ID：CVE-2009-2841 WebKit是一款开放源代码的web浏览器引擎。 当WebKit处理指向外部资源的HTML 5媒体元素时，它不提交资源装载回调以判断资源是否已装载，结果可导致发送某些请求到远程服务器上。如HTML格式的EMAIL消息发送者可以利用这个漏洞用于判断消息是否读取。 WebKit Open Source Project WebKit r38566 WebKit Open Source Project WebKit 0 Apple Safari 4.0.3 Apple Safari 4.0.2 Apple Safari...

Design/Logic Flaw

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

CVE-2009-2841

Removed by vendor...

'Moderate' Flaw Hits Adobe Photoshop Elements

Adobe has shipped a patch to cover a security vulnerability affecting its Photoshop Elements software product. The flaw, rated moderate, affects Adobe Photoshop Elements versions 8.0 and 7.0. It could be exploited by a hacker with valid login credentials and/or physical access to execute arbitrar...

Adobe Photoshop Elements Active File Monitor Service Local Privilege

Exploit for unknown platform in category local exploits ============================================================================================= Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation Vulnerability...