ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability

ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-028 May 21, 2008 -- Affected Vendors: IBM -- Affected Products: IBM Lotus Sametime -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers ha...

FireFTP filename directory traversal sequence vulnerability

Overview The FireFTP Mozilla Firefox extension contains a vulnerability that may allow an attacker to write files to arbitrary locations. Description FireFTP is a Firefox extension that provides FTP client functionality. Firefox extensions can run with Chrome privileges which allow them to...

ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability

ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-025 May 15, 2008 -- Affected Vendors: Symantec -- Affected Products: Symantec Altiris Deployment Solution -- TippingPointTM IPS Customer Protection:...

Windows Executable (PE) Files (CVE-2008-1437; CVE-2010-0233)

The Microsoft Malware Protection Engine provides the scanning, detection and cleaning capabilities for the following antivirus and antispyware clients: Windows Live OneCare, Microsoft Forefront Security, Microsoft Antigen, and Windows Defender. A denial of service vulnerability has been reported ...

ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability

ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-022 April 16, 2008 -- CVE ID: CVE-2008-1026 -- Affected Vendors: Apple -- Affected Products: Apple Safari -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability

ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-016 April 3, 2008 -- CVE ID: CVE-2008-1018 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- TippingPointTM IPS Customer Protection: TippingPoint...

ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability

ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-018 April 3, 2008 -- CVE ID: CVE-2008-1021 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- TippingPointTM IPS Customer Protection: TippingPoint...

ZDI-08-019: Apple QuickTime Malformed VR obji Atom Parsing Memory Corruption Vulnerability

ZDI-08-019: Apple QuickTime Malformed VR obji Atom Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-019 April 3, 2008 -- CVE ID: CVE-2008-1022 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- TippingPointTM IPS Customer Protection...

ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability

ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-016 April 3, 2008 -- CVE ID: CVE-2008-1018 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime 7.4.1 -- TippingPointTM IPS Customer Protection: TippingPoint...

ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow

ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-08-009 March 12, 2008 -- CVE ID: CVE-2008-1188 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- TippingPointTM IPS Customer Protection: TippingPoin...

SYLK Files (CVE-2008-0112)

Symbolic Link SYLK is a Microsoft file format typically used for exchanging data between applications, particularly spreadsheets. SYLK files conventionally have a .slk suffix. The vulnerability is due to an error in Microsoft Excel that fails to sufficiently validate file data when importing a fi...

IPS-1 Protocol and Protocol Subsystems Configuration Changes

Seven IPS-1 protocol and protocol subsystems have undergone configuration changes...

IPS-1 Protection Updates for yardradius and Cisco IOS Vulnerabilities and IPS-1 Protocol and Protocol Subsystems Updates

A vulnerability in yardradius could allow a remote attacker to execute arbitrary code via a buffer overflow. A vulnerability in Cisco IOS 12.2T through 12.4 could allows remote attackers to bypass Authentication, Authorization, and Accounting AAA RADIUS authentication via a long username...

Update IPS-1 with a Protection against Apple QuickTime and Apple QuickDraw Vulnerabilities

Several vulnerabilities have been identified within various versions of Apple QuickTime and Apple QuickDraw that, if exploited, would allow a remote attacker to execute arbitrary code on a vulnerable system...

PDF Containing Embedded JavaScript Code (CVE-2009-0658; CVE-2011-2439; CVE-2011-2442)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A remote code execution vulnerabilities have been reported in Adobe Acrobat when handling PDF...

ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability

ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-006.html February 12, 2008 -- CVE ID: CVE-2008-077 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 Internet Explorer 7 --...

IPS-1 Protection Updates for Vulnerabilities in Microsoft Windows and Asterisk and IPS-1 Protocol and Protocol Subsystems Updates

A buffer overflow vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code.The handleresponse function in Astersik allows allows remote attackers to cause a denial of service...

[Full-disclosure] TPTI-07-21: Adobe Flash Player JPG Processing Heap Overflow Vulnerability

TPTI-07-21: Adobe Flash Player JPG Processing Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-07-21 December 19, 2007 -- CVE ID: CVE-2007-6242 -- Affected Vendor: Adobe -- Affected Products: Flash Player -- TippingPointTM IPS Customer Protection: TippingPoint IPS customer...

ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability

ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-077.html December 17, 2007 -- CVE ID: -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...

ZDI-07-078: St. Bernard Open File Manager Heap Overflow Vulnerability

ZDI-07-078: St. Bernard Open File Manager Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-078.html December 17, 2007 -- CVE ID: CVE-2007-6281 -- Affected Vendor: St. Bernard -- Affected Products: Open File Manager 9.5 -- TippingPointTM IPS Customer Protection:...