SuSE 11 / 11.1 Security Update : CUPS (SAT Patch Numbers 3575 / 3576)

This updates fix several bugs, but only the security fixes are listed here : - Special IPP requests allow to crash cupsd remotely. CVE-2010-2941: CVSS v2 Base Score: 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P: CWE-399 - A NULL pointer dereference exists in the WriteProlog function of the texttops image filte...

Linux Kernel "hdsp.c" IOCTL本地信息泄露漏洞

BUGTRAQ ID: 45063 CVE ID: CVE-2010-4081 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel在实现上存在漏洞，本地攻击者可利用此漏洞获取敏感信息，可能有利于执行其他攻击。 hdspm.c和hdsp.c中的SNDRVHDSPIOCTLGETCONFIGINFO和 SNDRVHDSPIOCTLGETCONFIGINFO允许未授权用户读取未初始化内核栈内存，因为栈上公布的 hdspmconfiginfo的几个字段在复制给用户之前未改变或清零。 Linux kernel 2.6.0 - 2.6.37 厂商补丁：...

CVE-2010-3820

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a...

UBUNTU-CVE-2010-3820

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a...

PT-2010-5102

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows Apple Safari versions prior to 4.1.3 on Mac OS X 10.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a...

CVE-2010-3820: Undefined Security Weakness

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a...

CVE-2010-3794

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...

CVE-2010-3794: Improper Restriction of Operations within the Bounds of a Memory Buffer

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FlashPix file...

Linux kernel information leak

It's possible to access kernel uninitialied memory by using BPF filters...

libmbfl / {H{ information leak

under some conditions portion of uninitialized memory is returned...

PT-2010-5082

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 QuickTime in Apple Mac OS X version 10.6.x before 10.6.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted GIF file, due to QuickTim...

PT-2010-5081

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 QuickTime version not specified, but affected in Mac OS X 10.6.x before 10.6.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted...

PT-2010-5075

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.6.x through 10.6.4 QuickTime in Apple Mac OS X version 10.6.x before 10.6.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted JP2 file, due to QuickTim...

CVE-2010-3962

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets CSS token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption...

Memory corruption

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets CSS token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption...

CVE-2010-3962

CVE-2010-3962 is an uninitialized memory corruption / use-after-free vulnerability in Microsoft Internet Explorer 6–8 (mshtml) triggered via CSS token sequences and the clip attribute, leading to remote code execution. The CVE notes it was exploited in the wild in November 2010. Public details de...

CVE-2010-3962

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets CSS token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption...

Microsoft Internet Explorer CSS Tags Uninitialized Memory Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...

Dangling pointer vulnerability in LookupGetterOrSetter — Mozilla

Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that when window.lookupGetter is called with no arguments the code assumes the top JavaScript stack value is a property name. Since there were no arguments passed into the function, the top value could represent...

kernel: drivers/net/eql.c: reading uninitialized stack memory

The eqlgmastercfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQLGETMASTRCFG ioctl call...