Firefox nsTextFrame::ClearTextRun()函数远程内存破坏漏洞

BUGTRAQ ID: 34743 CVECAN ID: CVE-2009-1313 Firefox是一款流行的开放源码WEB浏览器。 Firefox的nsTextFrame::ClearTextRun函数中存在内存破坏漏洞，如果用户受骗打开了包含有恶意内容的网页就会导致浏览器崩溃。安装了HTML Validator附件组件的用户尤其受这个漏洞的影响。 Mozilla Firefox 3.0.9 Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/ RedHat ------...

RedHat Security Advisory RHSA-2009:0436

The remote host is missing updates announced in advisory RHSA-2009:0436. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

RedHat Security Advisory RHSA-2009:0444

The remote host is missing updates announced in advisory RHSA-2009:0444. The giflib packages contain a shared library of functions for loading and saving GIF image files. This library is API and ABI compatible with libungif, the library that supported uncompressed GIF image files while the Unisys...

CVE-2009-1190

Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit JDK before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to...

Adobe Reader 'spell.customDictionaryOpen()' JavaScript Function Remote Code Execution Vulnerability

Description Adobe Reader is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application or crash the application, denying service to legitimate users. Reader 8.1.4 for Linux is vulnerable; oth...

The Linux explosion local to mention the right vulnerability, please immediately update the udev program-vulnerability warning-the black bar safety net

Linux udev app then explosion local to mention the right toexploit, the local user can easily get root access, please update the udev program. （2.4 kernel system is not affected by the impact The repair methodrepair before please backup important data: debian users do the apt-get update ; apt-get...

Fedora 10 : xine-lib-1.1.16.3-1.fc10 (2009-3433)

Maintenance release. Fixes two security problems CVE-2009-0385, CVE-2009-1274 and a few miscellaneous bugs. See the upstream changelog for details: http://sourceforge.net/project/shownotes.php?groupid=9655&releaseid= 673233 Note that Tenable Network Security has extracted the preceding descriptio...

Fedora 10 : perl-5.10.0-52.fc10 (2008-11736)

CVE-2007-4829 perl-Archive-Tar directory traversal flaws. Update of Pod::Simple with better html support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

seamonkey security update

CentOS Errata and Security Advisory CESA-2009:0437 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open...

CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

RedHat Security Advisory RHSA-2009:0430

The remote host is missing updates announced in advisory RHSA-2009:0430. Xpdf is an X Window System based viewer for Portable Document Format PDF files. Multiple integer overflow flaws were found in Xpdf SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a...

RedHat Security Advisory RHSA-2009:0427

The remote host is missing updates announced in advisory RHSA-2009:0427. udev provides a user-space API and implements a dynamic device directory, providing only the devices present on the system. udev replaces devfs in order to provide greater hot plug functionality. Netlink is a datagram orient...

RedHat Security Advisory RHSA-2009:0431

The remote host is missing updates announced in advisory RHSA-2009:0431. The kdegraphics packages contain applications for the K Desktop Environment, including KPDF, a viewer for Portable Document Format PDF files. Multiple integer overflow flaws were found in KPDF SPDX-FileCopyrightText: 2009...

RedHat Security Advisory RHSA-2009:0429

The remote host is missing updates announced in advisory RHSA-2009:0429. The Common UNIX Printing System CUPS provides a portable printing layer for UNIX operating systems. Multiple integer overflow flaws were found in the CUPS JBIG2 decoder. An attacker could create a malicious PDF file that wou...

RedHat Security Advisory RHSA-2009:0428

The remote host is missing updates announced in advisory RHSA-2009:0428. The Common UNIX Printing System CUPS provides a portable printing layer for UNIX operating systems. An integer overflow flaw, leading to a heap-based buffer overflow, was discovered in the Tagged Image File Format TIFF...

RedHat Security Advisory RHSA-2009:0427

The remote host is missing updates announced in advisory RHSA-2009:0427. udev provides a user-space API and implements a dynamic device directory, providing only the devices present on the system. udev replaces devfs in order to provide greater hot plug functionality. Netlink is a datagram orient...

RedHat Security Advisory RHSA-2009:0431

The remote host is missing updates announced in advisory RHSA-2009:0431. The kdegraphics packages contain applications for the K Desktop Environment, including KPDF, a viewer for Portable Document Format PDF files. Multiple integer overflow flaws were found in KPDF's JBIG2 decoder. An attacker...

RedHat Security Advisory RHSA-2009:0429

The remote host is missing updates announced in advisory RHSA-2009:0429. The Common UNIX® Printing System CUPS provides a portable printing layer for UNIX operating systems. Multiple integer overflow flaws were found in the CUPS JBIG2 decoder. An attacker could create a malicious PDF file that...

RedHat Security Advisory RHSA-2009:0428

The remote host is missing updates announced in advisory RHSA-2009:0428. The Common UNIX® Printing System CUPS provides a portable printing layer for UNIX operating systems. An integer overflow flaw, leading to a heap-based buffer overflow, was discovered in the Tagged Image File Format TIFF...

RedHat Stronghold Web Server 2.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/34606/info Red Hat Stronghold Web Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...