bugtraq mailing list - 2012/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2012/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³
⁴ 5	⁵ 5	⁶ 2	⁷ 20	⁸ 9	⁹	¹⁰
¹¹	¹² 20	¹³ 8	¹⁴	¹⁵ 32	¹⁶	¹⁷
¹⁸ 13	¹⁹ 9	²⁰ 8	²¹ 5	²² 11	²³	²⁴
²⁵ 2	²⁶ 21	²⁷ 7	²⁸ 11	²⁹ 4	³⁰

Messages by day:

June 4 (5 messages)

[SECURITY] [DSA 2484-1] nut security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2481-1] arpwatch security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2482-1] arpwatch security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2482-1] libgdata security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2485-1] imp4 security update (Thijs Kinkhorst <thijs@...ian.org>)

June 5 (5 messages)

EUSecWest 2012 - Amsterdam, Sept 19/20 featuring Mobile PWN2OWN - CFP Deadline June 15 (Dragos Ruiu <dr@....net>)
Arbitrary File Upload/Execution in Collabtive (Mark Hoopes <xync@...c.org>)
[ MDVSA-2012:087 ] nut (security@...driva.com)
Sielco Sistemi Winlog Buffer Overflow <= v2.07.14 (devnull@...ur1ty.de)
SQL injection in Bigware shop software (rwenzel@...itsecurity.de)

June 6 (2 messages)

[SECURITY] [DSA 2486-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)
SQL injection in Serendipity (advisory@...ridge.com)

June 7 (20 messages)

Re: rssh security announcement (Derek Martin <code@...zashack.org>)
ZDI-12-075 : Apple Quicktime RLE Sample Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-076 : Apple QuickTime MPEG Stream Padding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-077 : Apple QuickTime QTVR QTVRStringAtom Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-078 : Apple QuickTime SVQ3 Codec mb_skip_run Parsing Remote Code Execution (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-079 : Apple QuickTime H264 Picture Width Parsing Remote Code Execution Vulnerability (Zero Day Initiative <zdi@...pingpoint.com>)
ZDI-12-080 : Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-081 : Oracle Java GlueGen Arbitrary Native Library Loading Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-083 : Oracle Java OpenAL Library Pointer Manipulation Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-084 : RealNetworks RealPlayer RV10 Encoded Height/Width Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-085 : RealNetworks RealPlayer dmp4 esds Width Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-086 : RealNetworks RealPlayer rvrender RMFF Flags Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-087 : RealNetworks RealPlayer raac.dll stsz Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-089 : HP DataDirect OpenAccess GIOP Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Secunia Research: Network Instruments Observer SNMP OID Processing Denial of Service (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Network Instruments Observer SNMP Processing Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
Mybb 1.6.8 Sql Injection Vulnerabilitiy (Amir@...st.ir)
ComSndFTP Server Remote Format String Overflow Vulnerability (demonalex@....com)
[SECURITY] [DSA 2480-3] request-tracker3.8 regression update (Florian Weimer <fw@...eb.enyo.de>)

June 8 (9 messages)

CVE-2012-3287: md5crypt is no longer considered safe (phk@...eBSD.org)
Re: Mybb 1.6.8 Sql Injection Vulnerabilitiy (Henri Salo <henri@...v.fi>)
Re: Mybb 1.6.8 Sql Injection Vulnerabilitiy (Henri Salo <henri@...v.fi>)
[SECURITY] [DSA 2487-1] openoffice.org security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2489-1] iceape security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2490-1] nss security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2488-1] iceweasel security update (Thijs Kinkhorst <thijs@...ian.org>)
Analysis: Vast IPv6 address space actually enables IPv6 attacks (Fernando Gont <fgont@...networks.com>)
Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks (Fernando Gont <fgont@...networks.com>)

June 12 (20 messages)

ZDI-12-090 : Symantec Web Gateway Shell Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-091 : Symantec Web Gateway upload_file Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-092 : RealNetworks RealPlayer QCELP Stream Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2491-1] postgresql-8.4 security update (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2012:089 ] bind (security@...driva.com)
[SECURITY] [DSA 2492-1] php5 security update (Florian Weimer <fw@...eb.enyo.de>)
[MATTA-2012-002] CVE-2012-1493; F5 BIG-IP remote root authentication bypass Vulnerability (Florent Daigniere <florent.daigniere@...stmatta.com>)
[security bulletin] HPSBMU02790 SSRT100872 rev.1 - HP Server Automation, Remote Execution of Arbitrary Code (security-alert@...com)
[security bulletin] HPSBMU02776 SSRT100852 rev.1 - HP Onboard Administrator (OA), Remote Unauthorized Access to Data, Unauthorized Disclos… (security-alert@...com)
APPLE-SA-2012-06-11-1 iTunes 10.6.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
FreeBSD Security Advisory FreeBSD-SA-12:03.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-12:04.sysret (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks (Lee Dilkie <lee_dilkie@...el.com>)
Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks (Fernando Gont <fgont@...networks.com>)
Re: CVE-2012-3287: md5crypt is no longer considered safe (Solar Designer <solar@...nwall.com>)
[ MDVSA-2012:088 ] mozilla (security@...driva.com)
IIS 6.0/7.5 Vulnerabilities [moderate risk] - ISOWAREZ BDAY RELEASE (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Re: ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability (Steve Shockley <steve.shockley@...ckley.net>)
[CVE-2012-3238] Astaro Security Gateway <= v8.304 Persistent Cross-Site Scripting Vulnerability (Inshell Security <info@...hell.net>)
[php<=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation (0x721427D8 0x721427D8 <0x721427d8@...il.com>)

June 13 (8 messages)

[SECURITY] [DSA 2493-1] asterisk security update (Florian Weimer <fw@...eb.enyo.de>)
ZDI-12-093 : (Pwn2Own) Microsoft Internet Explorer Fixed Table Colspan Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
APPLE-SA-2012-06-12-1 Java for OS X 2012-004 and Java for Mac OS X 10.6 Update 9 (Apple Product Security <product-security-noreply@...ts.apple.com>)
CVE-2012-1661 - ESRI ArcMap arbitrary code execution via crafted map file. (Boston Cyber Defense <lists@...toncyberdefense.com>)
[CAL-2012-0026] Microsfot IE Same ID Property Remote Code Execution Vulnerability (Code Audit Labs <vulnhunt@...il.com>)
[CAL-2012-0023]Microsoft IE Developer Toolbar Remote Code Execution Vulnerability (Code Audit Labs <vulnhunt@...il.com>)
[SE-2012-01] Regarding Oracle's Critical Patch Update for Java SE (Security Explorations <contact@...urity-explorations.com>)
Security Advisory - Checkpoint Endpoint Connect VPN - DLL Hijack (moshez@...secglobal.com)

June 15 (32 messages)

[Suspected Spam] eSyndiCat Pro v2.4.1 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
Boonex Dolphin v7.0.9 CMS & Mobile App - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
QuickBlog v0.8 CMS - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
ADICO CMS v1.1 - Blind SQL Injection Vulnerability (Research <research@...nerability-lab.com>)
iScripts EasyCreate CMS v2.0 - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
Interspire Shopping Cart v6 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
Nuked Klan SP CMS v4.5 - SQL injection Vulnerability (Research <research@...nerability-lab.com>)
VMSA-2012-0011 VMware hosted products and ESXi and ESX patches address security issues (VMware Security Team <security@...are.com>)
[ MDVSA-2012:090 ] openoffice.org (security@...driva.com)
[ MDVSA-2012:091 ] libreoffice (security@...driva.com)
[security bulletin] HPSBOV02774 SSRT100684 rev.1 - HP TCP/IP Services for OpenVMS, BIND 9 Resolver, Remote Denial of Service (DoS) (security-alert@...com)
Re: Bugtraq ID# 53694 is invalid/fake (Information Booth <info@...ygekko.com>)
[SECURITY] [DSA 2494-1] ffmpeg security update (Florian Weimer <fw@...eb.enyo.de>)
[slackware-security] mozilla-firefox (SSA:2012-166-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2012-166-04) (Slackware Security Team <security@...ckware.com>)
[slackware-security] bind (SSA:2012-166-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2012:091 ] libreoffice (security@...driva.com)
[ MDVSA-2012:092 ] postgresql (security@...driva.com)
[ MDVSA-2012:093 ] php (security@...driva.com)
IObit Protected Folder Authentication Bypass ("Adam Behnke" <adam@...osecinstitute.com>)
Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
[Suspected Spam] Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
Simple Forum PHP 2.1 - SQL Injection Vulnerabilities (Research <research@...nerability-lab.com>)
Jobs Portal v3.0 NetArtMedia - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
Cells Blog CMS v1.1 - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
MYRE Real Estate Mobile 2012|2 - Multiple Vulnerabilities (Research <research@...nerability-lab.com>)
[CAL-2012-0015] opera website spoof (Code Audit Labs <vulnhunt@...il.com>)
CSNC-2012-004 Generic XSS in AdNovum nevisProxy ("Cyrill Brunschwiler" <cyrill.brunschwiler@...c.ch>)
0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R3.0 (0a29 40 <0a2940@...il.com>)
AdNovum NevisWeb Security Proxy Vulnerability - Cross-site scripting (XSS) within 302 Redirections ("Ivan Buetler" <ivan.buetler@...c.ch>)
AST-2012-009: Skinny Channel Driver Remote Crash Vulnerability ("Asterisk Security Team" <security@...erisk.org>)
nullcon Delhi 2012 Final call for Paper/Events (extended to 10th July) and First round of speakers (nullcon <nullcon@...lcon.net>)

June 18 (13 messages)

News Script PHP v1.2 - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
Webify Product Series - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
[Suspected Spam] Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
[SECURITY] [DSA 2495-1] openconnect security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: [CAL-2012-0015] opera website spoof (Code Audit Labs <vulnhunt@...il.com>)
QNAP Turbo NAS Multiple Vulnerabilities - Security Advisory ("Lists" <lists@...seofsecurity.com>)
Squiz CMS Multiple Vulnerabilities - Security Advisory - SOS-12-007 ("Lists" <lists@...seofsecurity.com>)
[ MDVSA-2012:094 ] clamav (security@...driva.com)
[ MDVSA-2012:095 ] java-1.6.0-openjdk (security@...driva.com)
SEC Consult SA-20120618-0 :: Western Digital ShareSpace WEB GUI Sensitive Data Disclosure (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20120618-1 :: Airlock WAF overlong UTF-8 sequence bypass (SEC Consult Vulnerability Lab <research@...-consult.com>)
DC4420 - London DEFCON - June meet - Tuesday June 19th 2012 (Major Malfunction <majormal@...ate-radio.org>)
Re: SAXoPRESS - directory traversal (foo@....foo)

June 19 (9 messages)

[SECURITY] [DSA 2496-1] mysql-5.1 security update (Thijs Kinkhorst <thijs@...ian.org>)
[security bulletin] HPSBUX02789 SSRT100824 rev.1 - HP-UX CIFS Server (Samba), Remote Execution of Arbitrary Code, Elevation of Privileges (security-alert@...com)
[security bulletin] HPSBUX02791 SSRT100856 rev.1 - HP-UX Apache Web Server running PHP, Remote Execution of Arbitrary Code, Privilege Elev… (security-alert@...com)
FreeBSD Security Advisory FreeBSD-SA-12:04.sysret [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[security bulletin] HPSBMU02792 SSRT100820 rev.1 - HP Business Service Management (BSM), Remote Unauthorized Disclosure of Information, Un… (security-alert@...com)
VUPEN Security Research - Microsoft Internet Explorer "CollectionCache" Remote Use-after-free (MS12-037) (VUPEN Security Research <advisories@...en.com>)
VUPEN Security Research - Microsoft Internet Explorer "GetAtomTable" Remote Use-after-free (MS12-037 / CVE-2012-1875) (VUPEN Security Research <advisories@...e…)
VUPEN Security Research - Microsoft Internet Explorer "Col" Element Remote Heap Overflow (MS12-037 / CVE-2012-1876) (VUPEN Security Research <advisories@...en.…)
[Win32-API] SetNamedSecurityInfo() IGNORES and DESTROYS protected DACLs/SACLs ("Stefan Kanthak" <stefan.kanthak@...go.de>)

June 20 (8 messages)

[Announcement] ClubHack Magazine Issue 29, June 2012 Released (abhijeet@...ag.in)
Multiple vulnerabilities in web@all (advisory@...ridge.com)
Commentics 2.0 <= Multiple Vulnerabilities (pereira@...biz.de)
[ MDVSA-2012:096 ] python (security@...driva.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client (Cisco Systems Product Security Incident Response Team <psirt@...c…)
Cisco Security Advisory: Cisco Application Control Engine Administrator IP Address Overlap Vulnerability (Cisco Systems Product Security Incident Response Team…)
Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services … (Cisco Systems Product Security Incident…)
[ MDVSA-2012:097 ] python (security@...driva.com)

June 21 (5 messages)

[SECURITY] [DSA 2497-1] quagga security update (Florian Weimer <fw@...eb.enyo.de>)
[ MDVSA-2012:098 ] libxml2 (security@...driva.com)
Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy (Amir@...st.ir)
[ MDVSA-2012:099 ] net-snmp (security@...driva.com)
CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)

June 22 (11 messages)

ZDI-12-094 : RealNetworks Helix Server rn5auth Credential Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-095 : Apple Quicktime TeXML transform Attribute Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-096 : HP Data Protector Express Opcode 0x330 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-097 : HP Data Protector Express Opcode 0x320 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-098 : AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-099 : DataDirect OpenAccess oaagent.exe GIOP Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-100 : HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[security bulletin] HPSBOV02780 SSRT100766 rev.2 - HP OpenVMS ACMELOGIN, Local Unauthorized Access and Increased Privileges (security-alert@...com)
[security bulletin] HPSBOV02793 SSRT100891 rev.1 - HP OpenVMS running SSL, Remote Denial of Service (DoS), Unauthorized Access (security-alert@...com)
Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy (Henri Salo <henri@...v.fi>)
Re: Sielco Sistemi Winlog Buffer Overflow <= v2.07.14 (devnull@...ur1ty.de)

June 25 (2 messages)

[ MDVSA-2012:088-1 ] mozilla (security@...driva.com)
[SECURITY] [DSA 2499-1] icedove security update (Florian Weimer <fw@...eb.enyo.de>)

June 26 (21 messages)

[SECURITY] [DSA 2500-1] mantis security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2501-1] xen security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2502-1] python-crypto security update (Moritz Muehlenhoff <jmm@...ian.org>)
hashdays 2012 - Call for Papers (#days CFP) (Hashdays CFP <cfp@...con-switzerland.org>)
[ MDVSA-2012:100 ] rsyslog (security@...driva.com)
[slackware-security] freetype (SSA:2012-176-01) (Slackware Security Team <security@...ckware.com>)
Re: The history of a -probably- 13 years old Oracle bug: TNS Poison (prpgk1@...cast.net)
CVE-2012-2381: Apache Roller Cross-Site-Scripting (XSS) vulnerability (Dave <snoopdave@...il.com>)
CVE-2012-2380: Apache Roller Cross-Site-Resource-Forgery (XSRF) vulnerability (Dave <snoopdave@...il.com>)
[SECURITY] [DSA 2498-1] dhcpcd security update (Yves-Alexis Perez <corsac@...ian.org>)
[SE-2012-01] Security weakness in Apple QuickTime Java extensions (details released) (Security Explorations <contact@...urity-explorations.com>)
Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy (Yaniv Shaked <yaniv0a@...il.com>)
Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy (coptang <coptang@...il.com>)
[CVE-2012-0694] SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution (n0b0d13s@...il.com)
OpenLimit Reader for Windows contains completely outdated, superfluous and VULNERABLE system components ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy (nathan@...b.com)
[CVE-2012-0694] SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution (n0b0d13s@...il.com)
SEC Consult SA-20120626-0 :: Zend Framework - Local file disclosure via XXE injection (SEC Consult Vulnerability Lab <research@...-consult.com>)
[security bulletin] HPSBMU02792 SSRT100820 rev.2 - HP Business Service Management (BSM), Remote Unauthorized Disclosure of Information, Un… (security-alert@...com)
Re: The history of a -probably- 13 years old Oracle bug: TNS Poison (Gary Driggs <gdriggs@....edu>)
Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy (Gianluca Brindisi <g@...ndi.si>)

June 27 (7 messages)

[security bulletin] HPSBMU02786 SSRT100877 rev.1 - HP System Management Homepage (SMH) Running on Linux and Windows, Remote Unauthorized A… (security-alert@...com)
ZDI-12-101 : IBM Cognos tm1admsd.exe Multiple Operations Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-102 : Novell iPrint Client nipplib.dll GetDriverSettings realm Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-103 : Apple Quicktime Dataref URI Buffer Remote Code Execution (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-104 : SAP Netweaver ABAP msg_server.exe Parameter Value Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-105 : Apple Quicktime Text Track Descriptor Parsing Remote Code Execution (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

June 28 (11 messages)

[security bulletin] HPSBPI02794 SSRT100542 rev.1 - Certain HP Photosmart Printers, Remote Denial of Service (DoS) (security-alert@...com)
ZDI-12-106 : Avaya IP Office Customer Call Reporter ImageUpload Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2503-1] bcfg2 security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2504-1] libspring-2.5-java security update (Florian Weimer <fw@...eb.enyo.de>)
ZDI-12-107 : Apple Quicktime TeXML Style Element Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-108 : Apple Quicktime TeXML sampleData Element Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-109 : Apple Quicktime TeXML Karaoke Element Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-110 : Mozilla Firefox AttributeChildRemoved Use-After-Free Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-111 : SAP Netweaver ABAP msg_server.exe Opcode 0x43 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-112 : SAP Netweaver ABAP msg_server.exe Parameter Name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-113 : IBM Rational ClearQuest CQOle ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

June 29 (4 messages)

REWTERZ-20120629 - TEMENOS T24 Cross-Site Scripting (XSS) Vulnerability (Rewterz - Research Group <advisories@...terz.com>)
Vulnerabilities in Winlog 2.07.16 (Luigi Auriemma <aluigi@...istici.org>)
Irfanview Plugins JLS Decompression ("Joseph Sheridan" <joe@...ctionis.com>)
GIMP FIT File Format DoS ("Joseph Sheridan" <joe@...ctionis.com>)

192 messages

Powered by blists - more mailing lists