Evercookie Creator: FTC Cookie Inquiry Would Be Too Narrow

Samy Kamkar has always been prescient. He first gained notoriety by showing how nascent social networks like MySpace could be used to spread malware rapidly among a population of millions now billions of users. His worm for MySpace, dubbed the ‘Samy Worm’ earned him a visit from law enforcement...

Microsoft Releases Advance Notification for October Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that its October release will contain eight bulletins. These bulletins will have the severity ratings of critical and important and will be for Microsoft .NET Framework, Microsoft Silverlight, Microsoft Windows, Internet...

DEBIAN-CVE-2011-3389

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HT...

CVE-2011-3389

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HT...

CVE-2011-3389

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HT...

CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HT...

CVE-2011-2632

Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of service application crash via a web page, as demonstrated by vod.onet.pl...

Design/Logic Flaw

Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of service application crash via a web page, as demonstrated by vod.onet.pl...

CVE-2011-2632

Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of service application crash via a web page, as demonstrated by vod.onet.pl...

CVE-2011-2632

Opera before 11.11 is affected by CVE-2011-2632 due to improper destruction of a Silverlight instance, allowing a remote attacker to crash the application via a crafted web page (e.g., vod.onet.pl). Mitigation in connected documents recommends upgrading to a newer Opera version (Gentoo GLSA 20120...

CVE-2011-0664

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP...

CVE-2011-0664

CVE-2011-0664 affects Microsoft .NET Framework 2.0 SP1/SP2, 3.5 Gold/SP1, 3.5.1, 4.0 and Silverlight 4 before 4.0.60531.0. The issue stems from improper validation of arguments to unspecified networking API functions, enabling remote code execution when processing crafted XBAPs, ASP.NET apps, .NE...

PT-2011-2541 · Microsoft · .Net Framework +1

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP1 through 4.0 Silverlight versions prior to 4.0.60531.0 Description: The issue allows remote attackers to execute arbitrary code via crafted applications, including XAML browser applications, ASP.NET...

Microsoft Silverlight & .NET Framework非法数组偏移远程代码执行漏洞

Bugtraq ID: 48212 CVE ID：CVE-2011-0664 Microsoft .NET Framework是一个流行的软件开发工具包。Microsoft Silverlight是一个跨浏览器的、跨平台的插件，为Web带来下一代媒体体验和丰富的交互式应用程序体验。 向可信API传递值时存在输入验证错误，攻击者构建特制的XAML浏览器应用XBAP或Silverlight应用，诱使用户解析，可以不安全方式访问内存。成功利用漏洞可以以应用程序安全上下文执行任意代码 Microsoft Silverlight 4.0 Microsoft Silverlight 3.0...

Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability (2514842)

This host is missing a critical security update according to Microsoft Bulletin MS11-039. OpenVAS Vulnerability Test $Id: secpodms11-039.nasl 8190 2017-12-20 09:44:30Z cfischer $ Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability 2514842 Authors: Sooraj KS Copyright:...

MS11-039: Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2514842)

The remote Windows host is running a version of the Microsoft .NET Framework and/or Microsoft Silverlight affected by a code execution vulnerability. A specially crafted .NET application could access memory unsafely, resulting in arbitrary code execution. C Tenable Network Security, Inc...

Microsoft .NET Framework and Silverlight Remote Code Execution Vulnerability (2514842)

This host is missing a critical security update according to Microsoft Bulletin MS11-039. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Ships 16 Fixes in June's Patch Tuesday

Microsoft patched nine critical vulnerabilities and seven important vulnerabilities, pushing out a total of 16 patches in the June edition of Patch Tuesday. One of the bugs patched was used to compromise Internet Explorer during the Pwn2Own contest this year. Four of the critical vulnerabilities...

Security Update for Microsoft Silverlight (KB2512827)

This security update to Silverlight includes fixes outlined in KBs 2514842 and 2512827. This update is backward compatible with web applications built using previous versions of Silverlight...

Microsoft Silverlight & .NET Framework Invalid Array Offset Remote Code Execution Vulnerability

Description Microsoft Silverlight and Microsoft .NET Framework are prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service conditio...