MDKA-2006:065 : hal

A bug in partition detection for some SD/MMC card readers those using the sdhci driver was preventing correct detection by HAL, breaking automatic mounting/unmounting on card insertion/removal. Another bug was preventing correct mounting of LUKS-encrypted removable media. This update fixes these...

MOAB-03-01-2007: Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability

Summary A month ago, a vulnerability in QuickTime was exploited to spread a worm in MySpace. The vulnerability was first published by pdp. In his article, pdp describes how HREFTrack attribute in .mov files can be used for malicious scripting. The MySpace worm abused this vulnerability in a...

Microsoft Windows crossite MMC access

Script from Internet/Intranet zone site can access any Microsoft Management Console's object...

CVE-2006-3643

Cross-site scripting XSS vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files" in the Microsoft Management Console MMC library, which allows remote authenticated users to execute arbitrary commands, aka "MMC Redirect...

CVE-2006-3643

CVE-2006-3643 describes a remote code execution vulnerability in Microsoft Management Console (MMC) exposed via HTML in the MMC library. It affects Windows 2000 SP4 (and related MMC/IE configurations) where HTML-embedded MMC resources can be accessed from the Internet/Intranet zones, allowing rem...