QuickTime < 7.7.1 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.7.1 and may be affected by the following vulnerabilities : - A cross-site scripting issue exists in HTML files generated by the 'Save for Web' export feature. CVE-2011-3218 - A buffer overflow error exists in the handli...

Apple Mac OS X CoreMedia H.264编码视频文件缓冲区溢出漏洞

BUGTRAQ ID: 50068 CVE ID: CVE-2011-3219 Mac OS X是苹果家族机器所使用的操作系统。 Apple Mac OS X在实现上存在缓冲区溢出漏洞，此漏洞可影响CoreMedia组件，允许攻击者以当前用户权限执行任意代码。 当解析H.264流的Sequence Parameter Set数据时，会读取帧剪裁偏移字段，当这些字段包含错误数据时，Quicktime会最终在视频流所分配的缓冲区之外写入，造成任意代码执行。 Apple Mac OS X 10.x Apple MacOS X Server 10.6.x 厂商补丁： Apple -----...

A number of XSS holes found during QA bltiz

See Mark H and Coreys blitz pages for details...

Cyber Cell Mumbai Websites hacked by Pakistani Hacker

Cyber Cell Mumbai Websites hacked by Pakistani Hacker Pakistani hacker "Shadow008" from Pakistani Cyber Army again strike back on India's Most Important website of Cyber cell located at Mumbai, India. The Websites is Defaced today Morning and Mirror of Hack also available on Legend-h.This is not...

CVE-2011-3219

Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

Buffer overflow

Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

CVE-2011-3219

CVE-2011-3219 corresponds to a buffer overflow in Apple CoreMedia as used by iTunes prior to 10.5, allowing remote code execution or a crash when parsing H.264 movie streams. The issue is triggered by crafted H.264 data in a movie file, and affected products include Apple QuickTime/CoreMedia impl...

CVE-2011-3219

Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with H.264 encoding...

Microsoft FUSE Labs Sub-domain defaced by Hmei7

Microsoft FUSE Labs Sub-domain defaced by Hmei7 Hacker named "Hmei7 " defaced the official sud-domain of Microsoft FUSE Labs https://fuse.microsoft.com/ as shown above. He wrote a taunt on the home page with signature "are you microsoft?? , hackedby Hmei7 ". Mirror of hack at Zone-H is here...

Microsoft FUSE Labs Sub-domain defaced by Hmei7

Microsoft FUSE Labs Sub-domain defaced by Hmei7 Hacker named "Hmei7" defaced the official sud-domain of Microsoft FUSE Labs as shown above. He wrote a taunt on the home page with signature "are you microsoft?? , hackedby Hmei7". Mirror of hack at Zone-H is here...

Suzuki Official Website of Azerbaijan hacked by Co-cain Tm

Suzuki Official Website of Azerbaijan hacked by Co-cain Tm Suzuki Official Website of Azerbaijan today defaced by Co-cain Tm Hackers. The home page contain following lines: Cg 125 For Ever ! Co-cain Tm Sp Tnx 2 Skitt3r The Mirror of this hack also available on Zone-H. Reason of hack is unknown,...

CVE-2011-3277

Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload by sending crafted H.323 packets to TCP port 1720, aka Bug ID CSCth11006...

Design/Logic Flaw

Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload by sending crafted H.323 packets to TCP port 1720, aka Bug ID CSCth11006...

CVE-2011-3277

Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload by sending crafted H.323 packets to TCP port 1720, aka Bug ID CSCth11006...

CVE-2011-3277

CVE-2011-3277 affects Cisco IOS NAT implementation (12.1–12.4, 15.0–15.1) and IOS-XE 3.1.xSG. The issue arises from NAT handling of H.323 traffic on TCP/1720, enabling remote attackers to cause a DoS (device reload). Cisco’s advisory notes multiple NAT DoS vectors (including H.323), with mitigati...

Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities Advisory ID: cisco-sa-20110928-nat Revision 1.0 For Public Release 2011 Sep 28 1600 UTC GMT +--------------------------------------------------------------------...

Cisco IOS Software Network Address Translation Vulnerabilities (cisco-sa-20110928-nat)

The Cisco IOS Software network address translation NAT feature contains multiple denial of service DoS vulnerabilities in the translation of the following protocols : - NetMeeting Directory Lightweight Directory Access Protocol, LDAP - Session Initiation Protocol. Multiple vulnerabilities - H.323...

Supreme Court of Pakistan website defaced by Zombie_Ksa

Supreme Court of Pakistan website defaced by ZombieKsa The official website of Pakistan's Supreme Court has been hacked.Visitors to the website found derogatory and abusive remarks about the court and Chief Justice Iftikhar Muhammad Chaudhry. Earlier the Supreme Court website was hacked by two bo...

Cisco IOS Software Network Address Translation Vulnerabilities

The Cisco IOS Software network address translation NAT feature contains multiple denial of service DoS vulnerabilities in the translation of the following protocols: NetMeeting Directory Lightweight Directory Access Protocol, LDAP Session Initiation Protocol. Multiple vulnerabilities H.323 protoc...

700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot !

700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot ! 700,000 websites hosted on InMotion Hosting network hacked by TiGER-M@TE including Trinity FM, Blast Magazine. It was not just a server hack, actually whole data center got hacked. List of all hacked 700000 sites are...