4391 matches found
CVE-2011-1295
WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service DOM tree corruption, conduct cross-site scripting XSS attacks, or possibly have unspecified other impact via...
CVE-2011-1291: Buffer Copy without Checking Size of Input
Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "buffer error."...
PT-2011-3027
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.204 Description A use-after-free issue in the HTMLCollection implementation can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. The exact vector...
PT-2011-2153
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.7 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and reboot, via Wi-Fi frames on the local wireless network. Recommendations For versions...
CVE-2011-0183: Undefined Security Weakness
Libinfo in Apple Mac OS X before 10.6.7 does not properly handle an unspecified integer field in an NFS RPC packet, which allows remote attackers to cause a denial of service lockd, statd, mountd, or portmap outage via a crafted packet, related to an "integer truncation issue."...
CVE-2009-5059
Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.10 services for Lotus Domino might allow remote authenticated users to cause a denial of service daemon crash by checking out a document that is accessed through a connector, aka SPR MMOI7PSR8J...
CVE-2011-0284
Double free vulnerability in the prepareerroras function in doasreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 through 1.9, when the PKINIT feature is enabled, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via an edat...
PT-2011-1241
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.6 Description The issue is related to an integer overflow in the SdnToJulian function within the Calendar extension in PHP. This allows context-dependent attackers to cause a denial of service, resulting in an...
PHP 5.3.5 libzip 0.9.3 - _zip_name_locate Null Pointer Dereference
PHP 5.3.5 libzip 0.9.3 - zipnamelocate Null Pointer Dereference Source: http://securityreason.com/securityalert/8146 libzip 0.9.3 zipnamelocate NULL Pointer Dereference incl PHP 5.3.5 Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - Dis.: 03.01.2011 - Pub.:...
libzip 0.9.3 NULL Pointer Dereference
libzip 0.9.3 zipnamelocate NULL Pointer Dereference incl PHP 5.3.5 Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - Dis.: 03.01.2011 - Pub.: 18.03.2011 CVE: CVE-2011-0421 CERT: VU325039 Affected Software: - libzip 0.9.3 - PHP 5.3.5 fixed 5.3.6 Original URL:...
Fedora 15 : vsftpd-2.3.4-1.fc15 (2011-2567)
Bug 681667 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 14 : vsftpd-2.3.4-1.fc14 (2011-2590)
Thu Mar 3 2011 Jiri Skala - 2.3.4-1 - update to latest upstream 2.3.4 - fixes 681935 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 13 : vsftpd-2.3.4-1.fc13 (2011-2615)
Thu Mar 3 2011 Jiri Skala - 2.3.4-1 - update to latest upstream 2.3.4 - fixes 681935 - CVE-2011-0762 vsftpd: remote DoS via crafted glob pattern - Mon May 17 2010 Jiri Skala - 2.2.2-7 - when listenipv6=YES sets socket option to listen IPv6 only - Fri May 14 2010 Jiri Skala - 2.2.2-6 -...
CVE-2011-1191
Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of DOM URLs...
CVE-2011-1200
Google Chrome before 10.0.648.127 does not properly perform a cast of an unspecified variable during text rendering, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document...
PT-2011-3021
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue is related to the regular-expression functionality, which does not properly implement reentrancy. This allows remote attackers to cause a denial of service, potentially resulti...
CVE-2011-1201: Undefined Security Weakness
The context implementation in WebKit, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...
PT-2011-2933
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description A use-after-free issue exists, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts. This issue is related to the handling of DOM URLs...
RHEL 4 / 5 / 6 : vsftpd (RHSA-2011:0337)
The remote Redhat Enterprise Linux 4 / 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0337 advisory. - vsftpd: remote DoS via crafted glob pattern CVE-2011-0762 Note that Nessus has not tested for this issue but has instead relied only on the...
