Outlook Web Access for Exchange Server邮件字段跨站脚本漏洞（MS08-039）

BUGTRAQ ID: 30130 CVECAN ID: CVE-2008-2247,CVE-2008-2248 Microsoft Exchange Server是一款流行的邮件服务器，Outlook Web Access是Exchange中用于通过Web浏览器读取和发送邮件的工具。 Outlook Web Access for Exchange Server中存在跨站脚本漏洞，允许在Exchange...

[SECURITY] Fedora 9 Update: WebKit-1.0.0-0.11.svn34655.fc9

WebKit is an open source web browser engine...

CentOS 4 : firefox (CESA-2008:0549)

An updated firefox package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Multiple flaws were found in the...

CentOS 3 / 4 : seamonkey (CESA-2008:0547)

Updated SeaMonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

Opera远程代码执行和信息泄漏漏洞

BUGTRAQ ID: 30068 CNCAN ID：CNCAN-2008070707 Opera是一款开放源代码的WEB浏览器。 Opera存在多个安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意代码或获得敏感信息。 -部分canvas函数处理存在缺陷，可导致canvas会从随机内存中使用少量数据进行绘制，结果导致canvas图像可通过JavaScript读取和分析，攻击者借此获得用户内存中的敏感数据。 -Opera还存在一个未明安全问题可导致以应用程序权限执行任意代码。 Opera Software Opera Web Browser 9.50 beta Opera...

Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download Vulnerability

Description Snapshot Viewer for Microsoft Access is prone to a vulnerability that can cause malicious files to be downloaded and saved to arbitrary locations on an affected computer. Attackers may exploit this issue to put malicious files in arbitrary locations on a victim's computer. This will...

JVN#00945448 Redmine vulnerable to cross-site scripting

Redmine is open source project management software written by Ruby on Rails framework. Redmine contains a cross-site scripting vulnerability. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the developer...

devhelp, firefox, xulrunner, yelp security update

CentOS Errata and Security Advisory CESA-2008:0569 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web...

[SECURITY] Fedora 8 Update: epiphany-extensions-2.20.1-8.fc8

Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...

[SECURITY] Fedora 8 Update: firefox-2.0.0.15-1.fc8

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 8 Update: galeon-2.0.4-3.fc8.3

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 8 Update: kazehakase-0.5.4-2.fc8.2

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine. If you want to use WebKit for HTML rendering engine, install "kazehakase-webkit" rpm instead...

[SECURITY] Fedora 8 Update: epiphany-2.20.3-5.fc8

epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

Opera 9.51版本修复多个安全漏洞

BUGTRAQ ID: 30068 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.51之前版本中存在多个安全漏洞，可能允许恶意用户泄露敏感信息或远程执行任意指令。 Opera处理某些canvas函数的方式存在漏洞，导致用随机内存中的少量数据绘涂画布。用户可以使用JavaScript读取和分析所生成的画布图形，获得可能包含有敏感数据的随机用户内存；此外如果用户使用Opera访问了恶意网页的话，还可能导致执行任意指令。 Opera Software Opera 9.51 Opera Software --------------...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:0547-01 Updated seamonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...

Apple Safari内存破坏漏洞

BUGTRAQ ID: CVE ID：CVE-2008-2307 CNCVE ID：CNCVE-20082307 Apple Safari是一款流行的WEB浏览器。 Apple Safari处理JavaScript数组存在内存破坏问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者必须构建恶意WEB页，诱使用户访问来触发。目前没有详细漏洞细节提供。 Safari 3.x 厂商解决方案 升级到Safari3.1.2版本： http://www.apple.com/support/downloads/safari312fortiger.html...

firefox security update

CentOS Errata and Security Advisory CESA-2008:0549 An updated firefox package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:0547 Updated seamonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...

Critical: Red Hat Security Advisory: firefox security update

An updated firefox package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Multiple flaws were found in the...

Mozilla Firefox 3远程命令执行漏洞

BUGTRAQ ID: 29794 CVECAN ID: CVE-2008-2786 Firefox是一款流行的开放源码WEB浏览器。 远程攻击者可以利用最新版的Firefox 3处理恶意网页内容时的缓冲区溢出漏洞导致在浏览器会话中执行任意代码。 Mozilla Firefox 3.0 Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/...