Epiri Professional Web Browser 3.0 - Remote Crash

Epiri Professional Web Browser 3.0 - Remote Crash ' Title: Epiri Professional Web Browser 3.0 Remote Crash Exploit ' Vendor: Horizon ' Product Web Page: http://www.horizonum.com/ ' Current Version: 3.0.0.00 ' Notiz: Microsoft Silverlight ' Vulnerable Mode: Browse Internet ' Tested On Microsoft...

Ubuntu 6.06 LTS : blender vulnerabilities (USN-699-1)

It was discovered that Blender did not correctly handle certain malformed Radiance RGBE images. If a user were tricked into opening a .blend file containing a specially crafted Radiance RGBE image, an attacker could execute arbitrary code with the user's privileges. CVE-2008-1102 It was discovere...

GLSA-200904-07 : Xpdf: Untrusted search path

The remote host is affected by the vulnerability described in GLSA-200904-07 Xpdf: Untrusted search path Erik Wallin reported that Gentoo's Xpdf attempts to read the 'xpdfrc' file from the current working directory if it cannot find a '.xpdfrc' file in the user's home directory. This is caused by...

Inside the Conficker Working Group

From the Internet Storm Center The mere existence of the Conficker Working Group also known as the Conficker Cabal is something of a minor miracle. Security vendors do not have a long history of cooperating with each other, aside from the perhaps the antivirus companies sharing samples. But, as a...

GLSA-200903-41 : gedit: Untrusted search path

The remote host is affected by the vulnerability described in GLSA-200903-41 gedit: Untrusted search path James Vega reported that gedit uses the current working directory when searching for python modules, a vulnerability related to CVE-2008-5983. Impact : A local attacker could entice a user to...

Honeynet Project finds way to fingerprint Conficker infections

Just days ahead of an April 1st activation date for the Conficker worm, a pair of security researchers from the Honeynet Project have scored a major breakthrough, finding a way to remotely and anonymously fingerprint the malware on infected networks. Now, with the help of Dan Kaminsky and Rich...

BS.Player <= 2.34 Build 980 (.bsl) Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ====================================================================== BS.Player = 2.34 Build 980 .bsl Local Buffer Overflow Exploit SEH ====================================================================== ?php / Bs.Player = 2.34 Build 980...

BS.Player 2.34 Build 980 - '.bsl' Local Buffer Overflow (SEH)

?php / Bs.Player = 2.34 Build 980 .bsl local buffer overflow 0day exploit seh by Nine:Situations:Group::pyrokinesis Overlong hostnames in bsplayer playlist files causes eax and seh handlers to be overwritten. Cannot reliably debug with olly because of code compression, just used...

Google launching members-only security forum

internetnews.com’s Kenneth Corbin has the scoop on plans by Google to launch a members-only security forum for businesses, law enforcement, government agencies and others to combat malware and fraud on the Web. In addition to Google, the Internet Security Community will draw participation from...

Fedora Update for gnutls FEDORA-2008-10000

Check for the Version of gnutls OpenVAS Vulnerability Test Fedora Update for gnutls FEDORA-2008-10000 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2009-0318

Untrusted search path vulnerability in the GObject Python interpreter wrapper in Gnumeric allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983...

DEBIAN-CVE-2008-5985

Untrusted search path vulnerability in the Python interface in Epiphany 2.22.3, and possibly other versions, allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983...

CVE-2009-0314

Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983...

CVE-2008-5843

Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse program in 1 the current working directory or 2 /var/tmp, related to the a pdf90, b pdfjoin, and c pdfnup scripts...

FreeBSD : openoffice -- arbitrary code execution vulnerabilities (842bafdd-be2f-11dd-a578-0030843d3802)

The OpenOffice Team reports : A security vulnerability with the way OpenOffice 2.x process WMF files may allow a remote unprivileged user who provides a StarOffice/StarSuite document that is opened by a local user to execute arbitrary commands on the system with the privileges of the user running...

Unfixed XSS vulnerability at www.workingtitlefilms.com

Security researcher PaPPy, has submitted on 11/06/2008 a cross-site-scripting XSS vulnerability affecting www.workingtitlefilms.com, which at the time of submission ranked 349144 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/06/2008. It is...

CVE-2008-4865

Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE i...

GLSA-200810-02 : Portage: Untrusted search path local root vulnerability

The remote host is affected by the vulnerability described in GLSA-200810-02 Portage: Untrusted search path local root vulnerability The Gentoo Security Team discovered that several ebuilds, such as sys-apps/portage, net-mail/fetchmail or app-editors/leo execute Python code using 'python -c', whi...

DEBIAN-CVE-2008-2230

Untrusted search path vulnerability in 1 reportbug 3.8 and 3.31, and 2 reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory...

[SECURITY] Fedora 9 Update: gnutls-2.0.4-3.fc9

GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer. Currently the GnuTLS library implem ents the proposed standards by the IETF's TLS working group...