Design/Logic Flaw

Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications that affect access...

logsurfer double free vulnerability

prepareexec double free vulnerability...

Debian DSA-2394-1 : libxml2 - several vulnerabilities

Many security problems have been fixed in libxml2, a popular library to handle XML data files. - CVE-2011-3919 : Juri Aedla discovered a heap-based buffer overflow that allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. -...

DSA-2394-1 libxml2 - several

Bulletin has no description...

CVE-2011-3928

Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling...

CVE-2011-3925

Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via vectors related to a navigation entry and an interstitial page...

CVE-2011-3928

Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling...

GLSA-201201-04 : Logsurfer: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201201-04 Logsurfer: Arbitrary code execution Logsurfer log files may contain substrings used for executing external commands. The prepareexec function in src/exec.c contains a double-free vulnerability. Impact : A remote attacker...

CVE-2011-4109

Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509VFLAGPOLICYCHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check...

CVE-2011-4109

Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509VFLAGPOLICYCHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check...

under windows ie_iepeers. dll after the release of the heavy interest with vulnerability-vulnerability warning-the black bar safety net

Vulnerability details please view: ms10018, the http://technet.microsoft.com/en-us/security/bulletin/MS10-018 The key, if metasploit was not this exploit, where you can download: http://www.rec-sec.com/index.php Here also posted about it: this ruby code is saved directly to the...

OpenSSL < 0.9.8p / 1.0.0e Double Free Vulnerability

According to its banner, the remote server is running a version of OpenSSL that is earlier than 0.9.8p / 1.0.0e. A remote attacker could crash client software when using ECDH. The impact of this vulnerability is not clear; arbitrary code could be run too. Note that OpenSSL changelog only reports ...

[BSA-061] Security Update for openswan

Harald Jenny uploaded new packages for openswan which fixed the following security problems: CVE-2011-4073 Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service pluto IKE daemo...

[BSA-061] Security Update for openswan

Harald Jenny uploaded new packages for openswan which fixed the following security problems: CVE-2011-4073 Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service pluto IKE daemo...

Microsoft Windows Time Behaviour Remote Use-after-free Vulnerability (MS11-090)

No description provided by source. VUPEN Security Research - Microsoft Windows Time Behaviour Remote Use-after-free Vulnerability MS11-090 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Microsoft Windows is a series of...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted Word document, aka "Word Use After Free Vulnerability."...

CVE-2011-3913

Technical details about CVE-2011-3913 are not publicly provided in the supplied connected documents. The entries reference it among others but do not describe affected product, version, exploit, or remediation.

CVE-2011-3904

Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text aka bidi handling...

CVE-2011-3912

CVE-2011-3912 describes a use-after-free in Google Chrome SVG filters that could cause a denial of service or other impact. Affected: Chrome prior to 16.0.912.63. Remediation: upgrade to Chromium/Chrome 16.0.912.75 or newer (as reflected in Gentoo GLSA 201201-03 and related advisories). If exploi...

MS11-089: Vulnerability in Microsoft Office Could Allow Remote Code Execution (2590602)

The version of Microsoft Office installed on the remote host has a use-after-free vulnerability. A remote attacker could exploit this by tricking a user into opening a specially crafted Word file, resulting in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if...