CVE-2010-4962

Unspecified vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2010-4961

SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4961

SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4962

Unspecified vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

Code injection

Unspecified vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

Sql injection

SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4962

CVE-2010-4962 concerns the Webkit PDFs (webkitpdf) extension for TYPO3, affected in versions before 1.1.4. The vulnerability is described as unspecified, allowing remote attackers to execute arbitrary commands via unknown vectors. A fix is available: upgrade the webkitpdf extension to version 1.1...

CVE-2010-4961

SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4962

Unspecified vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2010-4961

CVE-2010-4961 affects the TYPO3 Webkit PDFs (webkitpdf) extension (versions before 1.1.4). The vulnerability is an SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact is implied as partial confidentiality, integrity, and availability. The e...

Anonymous, LulzSec Dump 10 Gigs of Sensitive Law Enforcement Data

Hacker collectives, LulzSec and Anonymous claim to have compromised the servers of the Missouri Sheriff’s Association, posting some 10GB of sensitive data online. According to a statement posted online, the leaked information includes more than 300 email accounts from some 56 law enforcement...

openSUSE Security Update : clamav (openSUSE-SU-2010:1041-1)

Upgrade to version clamav 0.96.5 to fix : - CVE-2010-4260: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Denial of service bugs while parsing PDFs. - CVE-2010-4261: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Memory corruption due to an off-by-one error within the iconcb function...

New Generation of Exploit Kits On The Rise

“The marketplace for hacker exploit kits is getting more crowded according to research by Kaspersky Labs, which found that new tools with names like SEOsploit and Crimepack are challenging the dominance of legacy tools like the Phoenix, Eleonore, Neosploit, YESExploit, and Liberty kits. A...

UK foreign secretary : "We are under Cyber attack" !

Yesterday, the UK adopted secretary, William Hague, explained to a aegis appointment in Munich how cyber abyss were aggravating to access the UK government and aegis contractors. According to a BBC report, Mr. Hague explained that attackers had adulterated government computers with the Zeus troja...

SuSE 11 / 11.1 Security Update : acroread_ja (SAT Patch Numbers 3004 / 3005)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240 / CVE-2010-2862. This has been fixed. This update also incorporates the Adobe Flash Player update APSB10-16 for the bundled flash player parts. CVE-2010-0209 / CVE-2010-2188 / CVE-2010-2213 /...

Assessing the Adobe Reader X Sandbox

Over the past few years, malicious PDFs have become common place and a prefered vector for attackers. Last week, Adobe announced the release of Reader X – the much anticipated next major release of their ubiquitous document reader, which includes a new security feature called ”Protected Mode”...

openSUSE Security Update : clamav (openSUSE-SU-2010:0414-1)

This update fixes a off-by-one buffer overflow CVE-2010-1640 and a crash while parsing PDFs CVE-2010-1639, CVE-2010-2077 in clamav that can be used as a remote denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

SuSE9 Security Update : clamav (YOU Patch Number 12619)

This update fixes the following security issues in clamav that can be used as a remote denial of service attack : - An off-by-one buffer overflow. CVE-2010-1640 - A crash while parsing PDFs. CVE-2010-1639, CVE-2010-2077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

xpdf: multiple integer overflows

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PDF file that trigger...

PDF JBIG2 MMR infinite loop DoS

The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service infinite loop and hang via a crafted PDF file...