USN-1024-1: OpenJDK vulnerability

It was discovered that certain system property information was being leaked, which could allow an attacker to obtain sensitive information...

Microsoft Office RTF pFragments Property Stack Buffer Overflow

Added: 11/16/2010 CVE: CVE-2010-3333 BID: 44652 OSVDB: 69085 Background Microsoft Office is a package which provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. Problem A stack buffer overflow vulnerability exists when...

Top 5 best criminal computer hackers of all time

These hackers are the ones that you've seen in shackles arrested for cybercrimes when they were just getting out of puberty. Some have done it for financial gain others just for fun. 1. Kevin Mitnick. Mitnick is perhaps synonymous with Hacker. The Department of Justice still refers to him as "the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted 1 background-image, 2 background, or 3 font-family Cascading Style Sheets CSS property, a different...

CVE-2010-4183: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted 1 background-image, 2 background, or 3 font-family Cascading Style Sheets CSS property, a different...

Microsoft Targets Android with Patent Infringement Allegations

The mobile phone wars became more interesting late on Tuesday when Microsoft publicly claimed for the first time that Google's Android operating system infringes on its intellectual property. According to sources close to the company, Microsoft believes that Android infringes on its patented...

RealPage Module Upload ActiveX Control Multiple Vulnerabilities

The RealPage Module Upload ActiveX control, used with RealPage's OneSite Property Management Systems software and installed on the remote Windows host, reportedly is affected by several vulnerabilities : - The 'Upload' method in combination with the 'SourceFile' and 'DestURL' properties can be...

Expert Warns: Cyber Crime Now Operates Like Legitimate Businesses

Today's cybercrime has far-reaching implications for security professionals. Corporate environments are increasingly targeted, with intellectual property becoming a primary focus for criminal activity. According to Uri Rivner, head of new technologies, identity protection, and verification at RSA...

CVE-2010-2584

The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an ht...

Buffer overflow

Multiple buffer overflows in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls allow remote attackers to execute arbitrary code via a long 1 DestURL or 2 SourceFile property value...

Design/Logic Flaw

Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window...

CVE-2010-4049

Opera before 10.63 is vulnerable to a denial-of-service via a Flash movie with a transparent Window Mode (wmode) property not handled correctly when navigating away from the containing HTML document. Affected products are Opera on Mac, Linux, and Windows; root cause is improper handling of Flash ...

CVE-2010-3180

Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window...

Use-after-free error in nsBarProp — Mozilla

Security researcher Sergey Glazunov reported that it was possible to access the locationbar property of a window object after it had been closed. Since the closed window's memory could have been subsequently reused by the system it was possible that an attempt to access the locationbar property...

Survey: Information Theft A Bigger Problem than Physical Theft

Anyone who has received “notification” of funky activity on their credit card, or an urgent e-mail plea from the widow of Mobutu Sese Seko won’t be surprised to learn that information theft is a big problem. But a new survey out from Kroll Consulting finds that its also the biggest problem facing...

Code injection

CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involving the Program Job Server and the Program Login property...

PT-2010-5215

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Enterprise XI version 3.2 Description The issue allows remote authenticated users to gain privileges. This is achieved through vectors involving the Program Job Server and the Program Login property. Recommendations For SAP...

CVE-2010-3983: Undefined Security Weakness

CmcApp in SAP BusinessObjects Enterprise XI 3.2 allows remote authenticated users to gain privileges via vectors involving the Program Job Server and the Program Login property...

PT-2010-4739 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 8 Description: A use-after-free issue in the CAttrArray::PrivateFind function in mshtml.dll allows remote attackers to execute arbitrary code by setting an unspecified property of a stylesheet...

CVE-2010-3730

Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, which allows remote attackers to have an unspecified impact via a crafted web site, related to a "property pollution" issue...