515 matches found
Consumer Advocates in Facebook's Face
This week, the Electronic Privacy Information Center filed a 38-page complaint against Facebook with the Federal Trade Commission, demanding it cancel new features introduced in mid-April that compel users to share more information than before. Read the full article. Computerworld...
Microsoft Windows XP Explorer Heap Overflow
Multiple vulnerabilities exist in the Microsoft Windows XP image rendering engine when processing EMF Enhanced MetaFile Format files. The vulnerabilities lead to a heap overflow. The vulnerabilities allow a DoS denial of service attack and possible remote code execution attacks. The primary...
Andy Jaquith on Measuring Meaningful Information Security Metrics
The March issue of Information Security magazine is out this week. The cover story is a look at how security information management systems need to evolve, in particular by integrating identity management with SIM in order to tie policy violations to user activity. Also, expert Andrew Jaquith...
openSUSE Security Update : seamonkey (seamonkey-1364)
seamonkey was updated to version 1.1.18, fixing various security issues : MFSA 2009-43 / CVE-2009-2404 Moxie Marlinspike reported a heap overflow vulnerability in the code that handles regular expressions in certificate names. This vulnerability could be used to compromise the browser and run...
SuSE9 Security Update : epiphany (YOU Patch Number 12519)
This update brings the Mozilla SeaMonkey Suite packages to the current stable release 1.1.17. Due to the major version update some incompatibilities might appear. It fixes all currently published security issues, including but not limited to : - Same-origin violations when Adobe Flash loaded via...
openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1091)
Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...
openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1091)
Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...
Report warns of 'web bugs' and privacy violations
Researchers at the University of California, Berkeley’s School of Information has released a report showing that the most popular Web sites in the United States all share data with their corporate affiliates and allow third parties to collect information directly by using tracking beacons known a...
Firefox < 2.0.0.18 Multiple Vulnerabilities
The installed version of Firefox is earlier than 2.0.0.18. Such versions are potentially affected by the following security issues : - Locally saved '.url' shortcut files can be used to read information stored in the local cache. MFSA 2008-47 - The canvas element can be used in conjunction with a...
Apple QuickTime 7.2/7.3 RSTP Response Code Exec Exploit (Vista/XP)
No description provided by source. / ============================================================= Apple Quicktime Vista/XP RSTP Response Remote Code Exec ============================================================= Discovered by: h07 Author: InTeL Tested on:...
Apple QuickTime 7.27.3 (Windows VistaXP) - RSTP Response Code Execution
Apple QuickTime 7.27.3 Windows VistaXP - RSTP Response Code Execution / ============================================================= Apple Quicktime Vista/XP RSTP Response Remote Code Exec ============================================================= Discovered by: h07 Author: InTeL Tested on: -...
Multiple vulnerabilities in ircu
Ircu is the open source IRC server used on Undernet and other IRC networks. I Wouter Coekaerts discovered multiple vulnerabilities in various versions some time ago, which have all been fixed for some time since 2.10.12.06 but not yet made public. Now that servers have had enough time to upgrade,...
CVE-2005-0174
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including 1 multiple Content-Length headers, 2 carriage return CR characters that are not part of a CRLF pair, and 3 header names containing...
Buffer Overflows in Netscape6
iXsecurity, Stockholm, january 2001 Summary There are at least three buffer overflow vulnerabilities in Netscape6 verified with version 6.0 on Win2k and Win98. We cannot currently use any of them to execute code on the system. But if someone finds a way to do that, they are really dangerous! The...
