Scientific Linux Security Update : qt on SL6.x i386/x86_64

Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. HarfBuzz is an OpenType text shaping engine. A buffer overflow flaw was found in the harfbuzz module in Qt. If a user loaded a specially crafted font fil...

TORCS <= 1.3.2 xml buffer overflow /SAFESEH evasion

Exploit for windows platform in category local exploits / Exploit Title: TORCS Research Team Division Author: Andres Gomez and David Mora a.k.a Mighty-D ... Pwn and beans! Software Link: http://torcs.sourceforge.net/ Version: torcs 1.3.2 Vendor notified: 03/02/2012 Tested on: Windows XP Service...

Google, Facebook and Others Join to Write New Email-Authentication Spec Called DMARC

Google, Yahoo, AOL and a group of other large email senders and receivers have banded together to develop a new framework for sending and receiving email that is designed to stop phishing attacks and other email-borne scams. Called DMARC.org, the new group has come up with a specification called...

SuSE 11.1 Security Update : Qt (SAT Patch Number 5131)

The following security issues have been fixed : - Specially crafted font files could cause a single byte heap based buffer overflow. CVE-2011-3193 - Specially crafted grey scale images could cause a heap-based buffer overflow. CVE-2011-3194 - SSL servers could run into an endless loop CVE-2010-26...

Oracle to Release 56 Patches, Plus 20 More For Java in October CPU

Oracle on Tuesday plans to release patches for 56 new vulnerabilities in a huge number of its products through its scheduled quarterly critical patch update. The company said that the various vulnerabilities in this month’s CPU affect hundreds of Oracle products. The most serious group of...

RHEL 6 : qt (RHSA-2011:1328)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1328 advisory. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window...

Cloud Security Needs Continuous Monitoring to Reassure Enterprises, Panel Says

SAN FRANCISCO–A panel of cloud providers and enterprise security professionals said that in order to make enterprise security teams feel more comfortable giving up their data, cloud providers need to be more transparent and open about the security measures and processes they have in place to...

CentOS Update for libpng10 CESA-2011:1103 centos4 i386

Check for the Version of libpng10 OpenVAS Vulnerability Test CentOS Update for libpng10 CESA-2011:1103 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

libpng: Invalid read when handling empty sCAL chunks

The pnghandlesCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have...

Moderate: Red Hat Security Advisory: libpng security update

Updated libpng and libpng10 packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Advanced Threats Are Not All the APT

By B.K. DeLong We have heard variations on the argument that within the context of information security, the “advanced persistent threat” APT is not really all that advanced or new, that it is being made too big a deal of or FUD and that it is no more than marketing hype though more of an effort...

Fedora Update for torque FEDORA-2011-8117

Check for the Version of torque OpenVAS Vulnerability Test Fedora Update for torque FEDORA-2011-8117 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Simplest Phones Open to 'SMS of Death' !

It's a scene from an as-yet-unmade thriller: Across a country, tens of thousands of cellphones all blink white at the same, and turn themselves off. Calls are lost, phones are rendered useless, and the affected mobile operator is forced to pay a ransom or lose customers. It hasn't happened yet. B...

Identifying Suspicious URLs

In the Google TechTalk, Justin Ma, a PhD candidate at UC San Diego, discusses a novel method for determining which URLs are malicious by applying large-scale online learning techniques...

DEBIAN-CVE-2010-2249

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service memory consumption and application crash via a PNG image containing malformed Physical Scale aka sCAL chunks...

CVE-2010-2249

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service memory consumption and application crash via a PNG image containing malformed Physical Scale aka sCAL chunks...

CVE-2010-2249

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service memory consumption and application crash via a PNG image containing malformed Physical Scale aka sCAL chunks...

PT-2010-1082 · Libpng +2 · Libpng +2

Name of the Vulnerable Software and Affected Versions: libpng versions prior to 1.4.3 libpng versions 1.4.x prior to 1.4.3 libpng versions prior to 1.2.44 Description: The issue is related to multiple vulnerabilities in the libpng package, which can be exploited remotely, leading to a denial of...

WordPress Users Affected by Large Attack

In the past few days a number of websites created using WordPress have been hacked. While the attack initially appeared to be limited to web sites hosted by American ISP DreamHost, it has since become apparent that blogs hosted at GoDaddy, Bluehost and Media Temple have also been affected. Read t...

New Security Consortium to Focus on Long-Term Projects

The three universities involved in the security consortium put together this week by Northrop Grumman will have wide latitude to pursue research projects as they see fit and will be under no obligation to work only on technology that fits Northrop’s future plans. The researchers, in fact, will be...