acroread: multiple code execution flaws (APSB10-15)

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, access uninitialized memory, which allows attackers to execute arbitrary code via unspecified vectors...

CVE-2010-2205: Improper Control of Generation of Code

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, access uninitialized memory, which allows attackers to execute arbitrary code via unspecified vectors...

[slackware-security] cups

New cups packages are available for Slackware 13.1 and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/cups-1.4.4-i486-1slack13.1.txz: Upgraded. Fixed a memory allocation error in texttops. Fixed a Cross-Site Request Forgery CSRF that coul...

cups security update

CentOS Errata and Security Advisory CESA-2010:0490 Updated cups packages that fix three security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVS...

Apple Safari Multiple Vulnerabilities (June-10)

This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun10.nasl 5263 2017-02-10 13:45:51Z teissa $ Apple Safari Multiple Vulnerabilities June-10 Authors: Antu Sanadi Copyright: Copyright c 2010...

Hardcoded credentials

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, accesses uninitialized memory during a selection change on a form input element, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via...

CVE-2010-1399

CVE-2010-1399 affects WebKit used by Apple Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. The vulnerability arises when WebKit accesses uninitialized memory during a selection change on a form input element, which can let remote attackers execute arbitra...

CVE-2010-1403

CVE-2010-1403 affects WebKit in Apple Safari prior to 5.0 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1 on Mac OS X 10.4. It arises from uninitialized memory access during processing of a use element in an SVG document (related to ProcessInstruction), allowing remote attackers to execute ar...

Microsoft Internet Explorer Multiple Vulnerabilities (982381)

This host is missing a critical security update according to Microsoft Bulletin MS10-035. OpenVAS Vulnerability Test $Id: secpodms10-035.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 982381 Authors: Antu Sanadi Updated By: Madhuri D on 2010-11-15 -...

Memory corruption

The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability...

CVE-2010-1259

Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."...

CVE-2010-1261

CVE-2010-1261 : A memory-corruption vulnerability in the Internet Explorer 8 Developer Toolbar (IE8) affects IE8 SP1/SP2/SP3. The connected MS knowledge base MS10-035 documents a remote code execution risk when processing a specially crafted page, due to uninitialized/deleted objects. Microsoft’s...

CVE-2010-1259

MS10-035 (KB982381) describes a cumulative security update for Internet Explorer that resolves remote code execution vulnerabilities when IE processes specially crafted pages. The article notes that newer updates supersede older ones and directs IT professionals/home users to install the latest I...

CVE-2010-1259: Improper Control of Generation of Code

Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."...

Safari < 4.1 / 5.0 Multiple Vulnerabilities

Binary data 5566.prm...

CVE-2010-1261: Improper Control of Generation of Code

The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability...

Apple Webkit ProcessInstruction Target Error Message Insertion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with how WebKit inserts...

CVE-2010-1633

RSA verification recovery in the EVPPKEYverifyrecover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive...

CVE-2010-1633: Undefined Security Weakness

RSA verification recovery in the EVPPKEYverifyrecover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive...

OpenSSL 1.0.0 < 1.0.0a Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.0a. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.0a advisory. - RSA verification recovery in the EVPPKEYverifyrecover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other...