ZDI-08-081: Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities

ZDI-08-081: Sun Java Web Start and Applet Multiple Sandbox Bypass Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-08-081 December 4, 2008 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime -- TippingPointTM IPS Customer Protection: TippingPoi...

ZDI-08-075: EMC Control Center SAN Manager Master SST_CTGTRANS Overflow Vulnerability

ZDI-08-075: EMC Control Center SAN Manager Master SSTCTGTRANS Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-075 November 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC ControlCenter SAN Manager -- Vulnerability Details: This vulnerability allows remote...

ZDI-08-076: EMC Control Center SAN Manager SST_SENDFILE Remote File Retrieval Vulnerability

ZDI-08-076: EMC Control Center SAN Manager SSTSENDFILE Remote File Retrieval Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-076 November 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC ControlCenter SAN Manager -- Vulnerability Details: This vulnerability allows remo...

Arbitrary code execution via Flash Player dynamic module unloading — Mozilla

An anonymous security researcher reported via TippingPoint's Zero Day Initiative that insufficient checks were being performed to test whether the Flash module was properly dynamically unloaded. The researcher demonstrated that a SWF file which dynamically unloads itself from an outside JavaScrip...

[Full-disclosure] ZDI-08-069: Microsoft Internet Explorer componentFromPoint Memory Corruption Vulnerability

ZDI-08-069: Microsoft Internet Explorer componentFromPoint Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-069 -- CVE ID: CVE-2008-3475 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 6 -- TippingPointTM IPS Customer Protection:...

[Full-disclosure] ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability

ZDI-08-068: Microsoft Office Excel BIFF File Format Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-068 -- CVE ID: CVE-2008-3471 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- TippingPointTM IPS Customer Protection:...

ZDI-08-067: Apple CUPS 1.3.7 (HP-GL/2 filter) Remote Code Execution Vulnerability

ZDI-08-067: Apple CUPS 1.3.7 HP-GL/2 filter Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-067 October 9, 2008 -- CVE ID: CVE-2008-3641 -- Affected Vendors: Apple -- Affected Products: Apple OS X -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability

ZDI-08-064: Novell eDirectory dhost.exe Accept Language Header Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-064 October 8, 2008 -- CVE ID: CVE-2008-4479 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...

ZDI-08-065: Novell eDirectory Core Protocol Opcode 0x0F Heap Overflow Vulnerability

ZDI-08-065: Novell eDirectory Core Protocol Opcode 0x0F Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-065 October 8, 2008 -- CVE ID: CVE-2008-4478 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...

ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability

ZDI-08-063: Novell eDirectory dhost.exe Content-Length Header Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-063 October 8, 2008 -- CVE ID: CVE-2008-4478 -- Affected Vendors: Novell -- Affected Products: Novell eDirectory -- TippingPointTM IPS Customer Protection:...

ZDI-08-062: Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability

ZDI-08-062: Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-062 September 9, 2008 -- CVE ID: CVE-2008-3627 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- Vulnerability Details: This vulnerability allows...

ZDI-08-056: Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability

ZDI-08-056: Microsoft Windows GDI+ GIF Parsing Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-056 September 9, 2008 -- CVE ID: CVE-2008-3013 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows Server 2008 Microsoft Windows XP Microsoft Windows...

ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability

ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-054 August 28, 2008 -- CVE ID: CVE-2008-2927 -- Affected Vendors: Adium Pidgin -- Affected Products: Adium Adiumx Pidgin Pidgin -- Vulnerability Details:...

ZDI-08-053: Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability

ZDI-08-053: Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-053 August 14, 2008 -- Affected Vendors: Symantec -- Affected Products: Symantec Veritas Storage Foundation -- Vulnerability Detail...

ZDI-08-048: Microsoft Excel COUNTRY Record Memory Corruption Vulnerability

ZDI-08-048: Microsoft Excel COUNTRY Record Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-048 August 12, 2008 -- CVE ID: CVE-2008-3006 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office Excel -- TippingPointTM IPS Customer Protection:...

ZDI-08-049: Microsoft Windows Graphics Rendering Engine PICT Heap Corruption

ZDI-08-049: Microsoft Windows Graphics Rendering Engine PICT Heap Corruption http://www.zerodayinitiative.com/advisories/ZDI-08-049 August 12, 2008 -- CVE ID: CVE-2008-3021 -- Affected Vendors: Microsoft -- Affected Products: Microsoft File Format Vulnerability -- TippingPointTM IPS Customer...

GLSA-200808-03 : Mozilla products: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200808-03 Mozilla products: Multiple vulnerabilities The following vulnerabilities were reported in all mentioned Mozilla products: TippingPoint's Zero Day Initiative reported that an incorrect integer data type is used as a CSS...

SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 5450)

MozillaFirefox was updated to version 2.0.0.16, which fixes various bugs and following security issues : - An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla CSS reference counting code. The vulnerability was caused by an insufficiently...

http://www.zerodayinitiative.com/advisories/ZDI-08-046

ZDI-08-046: RealNetworks RealPlayer Library File Deletion Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-046 July 25, 2008 -- CVE ID: ZDI-CAN-231 -- Affected Vendors: RealNetworks -- Affected Products: RealNetworks RealPlayer -- TippingPointTM IPS Customer...

ZDI-08-045: Apple Safari StyleSheet ownerNode Heap Corruption Vulnerability

ZDI-08-045: Apple Safari StyleSheet ownerNode Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-045 July 25, 2008 -- CVE ID: CVE-2008-2317 -- Affected Vendors: Apple -- Affected Products: Apple Safari -- TippingPointTM IPS Customer Protection: TippingPoint IPS...