MS12-021: Vulnerability in Visual Studio could allow elevation of privilege: March 13, 2012

Resolves security vulnerabilities that exist in Visual Studio that could allow arbitrary code to run when a maliciously modified add-in is added in the path used by Visual Studio.IntroductionMicrosoft has released security bulletin MS12-021. You can view the complete security bulletin by visiting...

Microsoft Visual Studio Add-In Insecure Library Loading (MS12-021; CVE-2012-0008)

An elevation of privilege vulnerability has been reported in Microsoft Visual Studio...

Microsoft Releases March Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Visual Studio, and Express Design as part of the Microsoft Security Bulletin Summary for March 2012. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or opera...

CVE-2012-1386

Unspecified vulnerability in the YouMail Visual Voicemail Plus com.youmail.android.vvm application 2.0.45 and 2.1.43 for Android has unknown impact and attack vectors...

CVE-2012-1386

Unspecified vulnerability in the YouMail Visual Voicemail Plus com.youmail.android.vvm application 2.0.45 and 2.1.43 for Android has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the YouMail Visual Voicemail Plus com.youmail.android.vvm application 2.0.45 and 2.1.43 for Android has unknown impact and attack vectors...

CVE-2012-1386

Unspecified vulnerability in the YouMail Visual Voicemail Plus com.youmail.android.vvm application 2.0.45 and 2.1.43 for Android has unknown impact and attack vectors...

CVE-2012-1386

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2012-0001

The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by...

MS12-001: Vulnerability in Windows Kernel Could Allow Security Feature Bypass (2644615)

The remote Windows host has a bypass vulnerability in the SafeSEH security feature. This could allow an attacker to use other vulnerabilities to bypass the SafeSEH security feature and run arbitrary code on the remote host. Only software applications compiled using Microsoft Visual C++ .NET 2003...

Fedora 16 : phpMyAdmin-3.4.8-1.fc16 (2011-16768)

Changes for 3.4.8.0 2011-12-01 : - interface enum data split at space char more space to edit - interface ENUM/SET editor can't handle commas in values - interface no links to browse/empty views and tables - interface Deleted search results remain visible - import ODS import ignores memory limits...

SuSE 11.1 Security Update : wireshark (SAT Patch Number 5281)

This update of wireshark fixes the following vulnerabilities : - Wireshark IKE dissector vulnerability. CVE-2011-3266 - Wireshark Lua script execution vulnerability. CVE-2011-3360 - Wireshark buffer exception handling vulnerability. CVE-2011-3483 - Lucent/Ascend file parser susceptible to infinit...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 7796)

This update of wireshark fixes the following vulnerabilities : - Wireshark IKE dissector vulnerability. CVE-2011-3266 - Wireshark Lua script execution vulnerability. CVE-2011-3360 - Wireshark buffer exception handling vulnerability. CVE-2011-3483 - Lucent/Ascend file parser susceptible to infinit...

Oracle Database Multiple Vulnerabilities (July 2009 CPU)

The remote Oracle database server is missing the July 2009 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Replication - Auditing - Config Management - Core RDBMS - Listener - Network Foundation - Secure Enterprise Search...

McAfee Visual Trace ActiveX Control Buffer Overflow (CVE-2006-6707)

A code execution vulnerability has been reported in McAfee Visual Trace. The vulnerability is due to a boundary error in the NeoTraceExplorer.NeoTraceLoader ActiveX control. A remote attacker may exploit this vulnerability by passing an overly long string as argument to the "TraceTarget" method...

Visual clues to native vs. ldap users and groups

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-23355. panel In a mixed environment with Confluence and LDAP users and groups, it would be helpful when administering users and...

Visual clues to native vs. ldap users and groups

In a mixed environment with Confluence and LDAP users and groups, it would be helpful when administering users and groups to see if they belong in LDAP or Confluence. Perhaps different color icons...

Visual DuxDebugger Debugger - Disassembler for Windows 64-bit

Visual DuxDebugger Debugger - Disassembler for Windows 64-bit Main features Fully support 64-bit native processes Fully support 64-bit .NET processes Full code analysis Full memory analysis Code edition Memory edition Module export formats EXE/DLL/CSV Debug multiple processes Debug multiple child...

Cross-Site Scripting (XSS) in Microsoft ReportViewer Controls

================================================== Cross-Site Scripting XSS in Microsoft ReportViewer Controls Adam Bixby - Gotham Digital Science [email protected] Public Release Date: 8/9/2011 Confirmed Affected Software: Microsoft Report Viewer Redistributable 2005 SP1 and Microsoft Visual...

Adobe Flash Player ActionScript Function Arguments Code Execution

Added: 08/22/2011 CVE: CVE-2011-2110 BID: 48268 OSVDB: 73007 Background Adobe Flash Player is a cross-platform browser plug-in providing visual enhancements for web pages. Problem The Adobe Flash Player ActionScript Engine is vulnerable to an information leak that can be leveraged to execute...