Internet Explorer CSS clip attribute memory corruption

Added: 11/16/2010 CVE: CVE-2010-3962 BID: 44536 OSVDB: 68987 Background Cascading Style Sheets CSS is a simple mechanism for adding style to web documents. Problem A memory corruption vulnerability allows command execution when a user loads a web page containing a CSS clip attribute with a specif...

Adobe Flash Player Flash Content Parsing Code Execution

Added: 11/16/2010 CVE: CVE-2010-3654 BID: 44504 OSVDB: 68932 Background Adobe Reader is free software for viewing PDF documents. Problem Adobe Reader 9.x is vulnerable to a remote code execution vulnerability as a result of parsing flash content by the bundled Adobe Flash Player. Resolution Apply...

Digital Music Pad 8.2.3.3.4 - Local Stack Buffer Overflow (Metasploit)

$Id: digitalmusicpadpls.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Secunia Research: Microsoft Office Drawing Shape Container Parsing Vulnerability

====================================================================== Secunia Research 09/11/2010 - Microsoft Office Drawing Shape Container Parsing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Microsoft PowerPoint PP7X32.DLL Record Parsing Vulnerability

====================================================================== Secunia Research 09/11/2010 - Microsoft PowerPoint PP7X32.DLL Record Parsing Vulnerability - ====================================================================== Table of Contents Affected...

Microsoft Office Drawing Shape Container Parsing Vulnerability

No description provided by source. ====================================================================== Secunia Research 09/11/2010 - Microsoft Office Drawing Shape Container Parsing Vulnerability - ====================================================================== Table of Contents Affecte...

HP Performance Manager Apache Tomcat Policy Bypass

Added: 11/05/2010 CVE: CVE-2009-3548 BID: 36954 OSVDB: 60176 Background HP Performance Manager Software is a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom...

HP Performance Manager Apache Tomcat Policy Bypass

Added: 11/05/2010 CVE: CVE-2009-3548 BID: 36954 OSVDB: 60176 Background HP Performance Manager Software is a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom...

HP Performance Manager Apache Tomcat Policy Bypass

Added: 11/05/2010 CVE: CVE-2009-3548 BID: 36954 OSVDB: 60176 Background HP Performance Manager Software is a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom...

FreeBSD : Mailman -- XSS in web interface (4ab29e12-e787-11df-adfa-00e0815b8da8)

Secunia reports : Two vulnerabilities have been reported in Mailman, which can be exploited by malicious users to conduct script insertion attacks. Certain input passed via the list descriptions is not properly sanitised before being displayed to the user. This can be exploited to insert arbitrar...

Adobe Shockwave Director rcsL Chunk Remote Code Execution

Added: 11/04/2010 CVE: CVE-2010-3653 BID: 44291 OSVDB: 68803 Background Adobe Shockwave is a multimedia player used to add animation and interactivity to web pages. It allows Adobe Director applications to be published on the Internet and viewed in a web browser on any computer which has the...

Secunia Research: SonicWALL SSL-VPN End-Point ActiveX Control Buffer Overflow

====================================================================== Secunia Research 29/10/2010 - SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control - - "Install3rdPartyComponent" Method Buffer Overflow - ======================================================================...

Secunia Research: Adobe Shockwave Player "pamm" Chunk Parsing Vulnerability

====================================================================== Secunia Research 29/10/2010 - Adobe Shockwave Player "pamm" Chunk Parsing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Adobe Shockwave Player "DEMX" Chunk Parsing Vulnerability

====================================================================== Secunia Research 29/10/2010 - Adobe Shockwave Player "DEMX" Chunk Parsing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia PSI Insecure Library Loading Vulnerability

A vulnerability has been discovered in Secunia PSI,which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • Schannel.dll This can be exploited to loa...

BlackBerry Enterprise Server / Attachment Service PDF Distiller Buffer Overflow (KB24547)

The version of BlackBerry Enterprise Server on the remote host is reportedly affected by a buffer overflow vulnerability in the PDF distiller component of the BlackBerry Attachment Service. By sending a specially crafted PDF file and having it opened on a BlackBerry smartphone, an attacker may be...

Microsoft Office Excel RTD Topic String Buffer Overflow

Added: 10/20/2010 CVE: CVE-2010-1246 BID: 40524 OSVDB: 65238 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows platforms. Problem Microsoft Office Excel 2002 is vulnerable to a buffer overflow when parsing Real Time Data RTD Future...

Secunia Research: RealPlayer QCP Sample Chunk Parsing Buffer Overflow

====================================================================== Secunia Research 18/10/2010 - RealPlayer QCP Sample Chunk Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

CERT Issues Advisory On RealPlayer Holes

US CERT has issued an advisory following the release, late last week, of a critical patch from RealNetworks for seven vulnerabilities in its common RealPlayer software. CERT recommended users and administrators to review the advisory from Realnetworks to determine which RealPlayer products were...

Oracle Java IE Browser Plugin docbase Parameter Stack Buffer Overflow

Added: 10/15/2010 CVE: CVE-2010-3552 BID: 44023 Background Oracle Java SE and Java for Business are development platforms for developing and deploying Java applications. They include the Java SE Development Kit JDK and the Java Runtime Environment JRE. The JRE provides the minimum requirements fo...