chromium -- Errant plug-in load and GPU process memory corruption

Google Chrome Releases reports: 117620 117656 Critical CVE-2011-3047: Errant plug-in load and GPU process memory corruption. Credit to PinkiePie...

CVE-2011-3047: Improper Restriction of Operations within the Bounds of a Memory Buffer

The GPU process in Google Chrome before 17.0.963.79 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption by leveraging an error in the plug-in loading mechanism...

CVE-2011-3845

Use-after-free vulnerability in Apple Safari 5.1.2, when a plug-in with a blocking function is installed, allows user-assisted remote attackers to execute arbitrary code via a crafted web page that is accessed during user interaction with the plug-in, leading to improper coordination between an A...

Design/Logic Flaw

Use-after-free vulnerability in Apple Safari 5.1.2, when a plug-in with a blocking function is installed, allows user-assisted remote attackers to execute arbitrary code via a crafted web page that is accessed during user interaction with the plug-in, leading to improper coordination between an A...

CVE-2011-3845

Use-after-free vulnerability in Apple Safari 5.1.2, when a plug-in with a blocking function is installed, allows user-assisted remote attackers to execute arbitrary code via a crafted web page that is accessed during user interaction with the plug-in, leading to improper coordination between an A...

PT-2012-1743

Name of the Vulnerable Software and Affected Versions Apple Safari version 5.1.2 Description The issue is related to a use-after-free vulnerability that occurs when a plug-in with a blocking function is installed. This allows remote attackers to execute arbitrary code via a crafted web page that ...

Adobe Flash Player MP4 Copyright Statement Overflow

Added: 03/08/2012 CVE: CVE-2012-0754 BID: 52034 OSVDB: 79300 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem Flash Player version prior to 11.1.102.62 do not properly validate the Copyright statement key CPRT in the tag...

CVE-2011-3845: Undefined Security Weakness

Use-after-free vulnerability in Apple Safari 5.1.2, when a plug-in with a blocking function is installed, allows user-assisted remote attackers to execute arbitrary code via a crafted web page that is accessed during user interaction with the plug-in, leading to improper coordination between an A...

kvm security and bug fix update

kvm-83-249.0.1.el5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch - modify kversion to fix build failure kvm-83-249.el5 - kvm-kernel-KVM-x86-Prevent-starting-PIT-timers-in-the-absence-o.patch bz770101 - CVE: CVE-2011-4622 - Resolves: bz770101...

COCOON Counter statistical procedures vulnerability summary-vulnerability warning-the black bar safety net

A default database: counter/db/dbCCCounter6. mdb It can also be directly opened: http://www.badguest.cn /Counter/utilities/update. asp To view the source file, lookup! You can find the database address. Program problem. Second, the storm path vulnerability Use the probe http://www. xxx. com...

java security update

CentOS Errata and Security Advisory CESA-2012:0135 Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring Syste...

LuraWave JP2 Browser Plug-In < 2.1.1.11 npjp2.dll Remote Buffer Overflow

The version of the LuraWave JP2 Browser Plug-In installed on the remote Windows host is earlier than 2.1.1.11 and thus reportedly contains a stack-based buffer overflow vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can...

CVE-2012-1051: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Xjp2.dll in the JPEG2000 plug-in in XnView 1.98.5 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

squirrelmail security update

CentOS Errata and Security Advisory CESA-2012:0103 An updated squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring...

Moderate: Red Hat Security Advisory: squirrelmail security update

An updated squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

[SECURITY] Fedora 16 Update: gstreamer-plugins-bad-free-0.10.22-2.fc16.2

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

CVE-2012-0978

Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

CVE-2012-0978

CVE-2012-0978 describes a stack-based buffer overflow in the npjp2.dll component of the LuraWave JP2 Browser Plug-In. The vulnerability affects versions up to, but not including, 2.1.1.11 (the plug-in versions before 2.1.1.11). An attacker could trigger the overflow by processing a crafted JPEG20...

CVE-2012-0978: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 allows remote attackers to execute arbitrary code via a JPEG2000 JP2 file with a crafted Quantization Default QCD marker segment...

PT-2012-2984

Name of the Vulnerable Software and Affected Versions LuraWave JP2 Browser Plug-In versions 1.1.1.11 and prior to 2.1.1.11 Description The issue is related to a stack-based buffer overflow in the npjp2.dll component. It can be triggered by remote attackers via a specially crafted JPEG2000 JP2 fil...