USN-1277-1: Firefox vulnerabilities

Yosuke Hasegawa discovered that the Mozilla browser engine mishandled invalid sequences in the Shift-JIS encoding. It may be possible to trigger this crash without the use of debugging APIs, which might allow malicious websites to exploit this vulnerability. An attacker could possibly use this fl...

Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability

Document Title: =============== Mozilla Firefox 8.x - Z0D URL & SSL Spoofing Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/331.wmv View: http://www.youtube.com/watch?v=viLLpi-i6vk Advisory: http://www.vulnerability-lab.com/getcontent.php?id=330...

Chromium, V8: Multiple vulnerabilities

Background Chromium is an open-source web browser project. V8 is Google's open source JavaScript engine. Description Multiple vulnerabilities have been discovered in Chromium and V8. Please review the CVE identifiers and release notes referenced below for details. Impact A context-dependent...

RHEL 6 : flash-plugin (RHSA-2011:1445)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1445 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

CentOS 4 / 5 : firefox (CESA-2011:1437)

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

RedHat Update for firefox RHSA-2011:1437-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for firefox CESA-2011:1437 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Microsoft Windows Fraudulent Digital Certificates Spoofing Vulnerability (2641690)

Microsoft Windows operating system is prone to a spoofing vulnerability. This VT has been superseded by KB2718704 which is addressed in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CentOS Update for seamonkey CESA-2011:1440 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 15 Update: icedtea-web-1.0.6-1.fc15

The IcedTea-Web project provides a Java web browser plugin, an implementati =3D on of Java Web Start originally based on the Netx project and a settings too =3D l to manage deployment settings for the aforementioned plugin and Web Start implementations...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2011:1437 Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring Syste...

[SECURITY] [DSA 2341-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2341-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 09, 2011 http://www.debian.org/security/faq -...

RHEL 6 : icedtea-web (RHSA-2011:1441)

Updated icedtea-web packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Opera Web Browser 11.52 - Escape Sequence Stack Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/50421/info The Opera Web Browser is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Opera Web Browser 11.52 is vulnerable; other versions may also be...

Opera Web Browser 11.52 - Escape Sequence Stack Buffer Overflow (Denial of Service) (PoC)

Opera Web Browser 11.52 - Escape Sequence Stack Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/50421/info The Opera Web Browser is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to...

Opera < 11.52 Multiple Vulnerabilities

Binary data 800854.prm...

"JavaScript must be enabled in the web browser to view this page" error while logging to Veeam Reporter Web page

Challenge Cause Security restrictions applied in web-browser prevent from running static content or Veeam Reporter website requires the Static Content feature of IIS be installed in order to function properly. Solution At first, try to add Veeam Reporter's web-site into list of Trusted Sites zone...

Apple Safari libxslt File Create

Added: 10/24/2011 CVE: CVE-2011-1774 BID: 48840 OSVDB: 74017 Background Safari is a web browser for Mac OS X and Windows. Problem Safari versions prior to 5.0.6 use unsafe security settings when implementing libxslt. An attacker may leverage this weakness by creating a web page that references a...