CVE-2011-0625: Improper Input Validation

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624, and CVE-2011-0626...

PT-2011-2508

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris Adobe Flash Player versions prior to 10.3.185.21 on Android Description The issue allows remote attackers to execute arbitrary code or cause a denial of...

Skype for MAC OS X 5.1.0.922 字符跨站漏洞

MAC操作系统上的Skype应用程序对JavaScript解析存在安全漏洞。此漏洞不会影响Skype的Windows和Linux版本。只有在受害者的客户名单的合法用户可以利用 Skype for MAC OS X 5.1.0.922 厂商补丁： Skype ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.Skype.com scriptalertdocument.location;script http://www.ssvdb.com/index.php?url=scriptalertdocument.location;script...

CVE-2011-0620: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0621, and...

CVE-2011-0619: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0620, CVE-2011-0621, and...

CVE-2011-0623: Improper Input Validation

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0624, CVE-2011-0625, and CVE-2011-0626...

CVE-2011-0624: Improper Input Validation

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0625, and CVE-2011-0626...

CVE-2011-0626: Improper Input Validation

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624, and CVE-2011-0625...

apr: unconstrained recursion in apr_fnmatch

Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...

CVE-2011-2074

Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via a crafted message...

Design/Logic Flaw

Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via a crafted message...

CVE-2011-2074

Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via a crafted message...

CVE-2011-2074

The CVE-2011-2074 entry concerns Skype for Mac 5.x prior to 5.1.0.922. The vulnerability is described as an unspecified flaw in the Mac client that allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) by sending a crafted message. Affected c...

Skype Technologies Skype (Mac OS X) 5未明远程代码执行漏洞

Bugtraq ID: 47747 Skype是一款流行的P2P VoIP软件，可提供高质量的语音通讯服务。 Mac OS X平台上运行的Skype存在一个安全漏洞，允许攻击者只发送一条消息就完全控制目标机器。目前没有详细漏洞细节提供。 Skype Technologies Skype Mac OS X 5 厂商解决方案 －－－－ Skype Technologies Skype Mac OS X 5.1.0.922已经修复此漏洞，建议用户下载使用： http://www.skype.com/...

CVE-2011-2074: Undefined Security Weakness

Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary code or cause a denial of service application crash via a crafted message...

Mozilla Firefox 3.6.16 mChannel Use-After-Free

This module exploits a use-after-free vulnerability in Mozilla Firefox 3.6.16. An OBJECT element, mChannel, can be freed via the OnChannelRedirect method of the nsIChannelEventSink Interface. mChannel becomes a dangling pointer and can be reused when setting the OBJECTs data attribute. This modul...

Skype Planning Patch for Mac OS X Client Flaw

Skype users on Mac OS X are dealing with some confusing information at the moment about whether Skype has fixed a remotely exploitable bug in the Mac client that was reported several weeks ago. The company said it released a patch in an optional minor update nearly a month ago, but it will push o...

Skype for Mac Installed (credentialed check)

Skype, a peer-to-peer Voice Over IP application, is installed on the remote Mac OS X host. Due to the peer-to-peer nature of Skype, any user connecting to the Skype network may consume a large amount of bandwidth. TRUSTED...

Skype for Mac 5.x < 5.1.0.922 Unspecified Remote Code Execution (uncredentialed check)

According to its timestamp, the version of Skype installed on the remote Mac OS X host reportedly allows an attacker to send a specially crafted message to a user on the affected host and execute arbitrary code. Note that by default, such a message would have to come from someone in a user's Skyp...

CVE-2011-0076

Unspecified vulnerability in the Java Embedding Plugin JEP in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, on Mac OS X allows remote attackers to bypass intended access restrictions via unknown vectors...