openSUSE Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-329)

This update backports security fixes to the Mozilla XULRunner engine. It fixes following security issues : CVE-2008-0017 / MFSA 2008-54: The http-index-format MIME type parser nsDirIndexParser in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check...

CVE-2009-2536: Undefined Security Weakness

Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service memory consumption and application crash via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

CVE-2009-2540: Allocation of Resources Without Limits or Throttling

Opera, possibly 9.64 and earlier, allows remote attackers to cause a denial of service memory consumption via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

CVE-2009-2377

Buffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector ActiveX 1.3 allows remote attackers to cause a denial of service application crash via a long PrinterName property...

Buffer overflow

Buffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector ActiveX 1.3 allows remote attackers to cause a denial of service application crash via a long PrinterName property...

CVE-2009-2377

Buffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector ActiveX 1.3 allows remote attackers to cause a denial of service application crash via a long PrinterName property...

CVE-2009-2377: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector ActiveX 1.3 allows remote attackers to cause a denial of service application crash via a long PrinterName property...

Avax Vector ActiveX buffer overflow

Heap buffer overflow via PrinterName property...

CVE-2009-1692: Undefined Security Weakness

WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service memory consumption or device reset via a web page containing an HTMLSelectElement object with a large...

CVE-2009-1710

WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of 1 the host name, 2 security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property...

Design/Logic Flaw

WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of 1 the host name, 2 security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property...

CVE-2009-1710

WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of 1 the host name, 2 security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property...

CVE-2009-1685

Removed by vendor...

CVE-2009-1532: Out-of-bounds Write

Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold, SP1, and SP2; and 8 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via "malformed row property references" that trigger an...

Code injection

eBay Enhanced Picture Uploader ActiveX control EPUWALcontrol.dll before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property...

CVE-2008-2475

eBay Enhanced Picture Uploader ActiveX control EPUWALcontrol.dll before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property...

CVE-2008-2475: Improper Neutralization of Special Elements used in an OS Command

eBay Enhanced Picture Uploader ActiveX control EPUWALcontrol.dll before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property...

Online Rental Property Script <= 5.0 (pid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Online Rental Property Script = 5.0 pid SQL Injection Vulnerability ======================================================================...

Sun Java JRE / JDK / Web Start multiple security vulnerabilities

JNLP may overwrite system properties java.home java.ext.dirs user.home Heap overflow and integer overflow on TrueType fonts parsing, memory corruption on GIF parsing, integer overflow on Pack200 decompression. Multiple sendbox protection bypass vulnerabilities...

Firefox 3 JavaScript engine crashes

The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service application crash and possibly trigger memory corruption via vectors involving 1 jsFindPropertyHelper, related to the definition...