VRDA Feed : Provides information for vulnerability impact analysis

CVE-2010-4628:mybb: member.php in MyBB (aka MyBulletinBoard) before 1.4...

2010-12-30T00:00:00+09:00

member.php in MyBB (aka MyBulletinBoard) before 1.4.12 makes a certain superfluous call to the SQL COUNT function, which allows remote attackers to cause a denial of service (resource consumption) by making requests to member.php that trigger scans of the entire users table.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4630:wp-survey-and-quiz-tool: Cross-site scripting (XSS) vulnerability in pages/a...

2010-12-30T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in pages/admin/surveys/create.php in the WP Survey And Quiz Tool plugin 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4629:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 does not p...

2010-12-30T00:00:00+09:00

MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4627:mybb: Cross-site request forgery (CSRF) vulnerability in ...

2010-12-30T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4642:xwiki: Cross-site scripting (XSS) vulnerability in XWiki E...

2010-12-30T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4641:xwiki: SQL injection vulnerability in XWiki Enterprise bef...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4640:xwiki_watch: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-30T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to (1) bin/viewrev/Main/WebHome and (2) bin/view/Blog, and the (3) register_first_name and (4) register_last_name parameters to bin/register/XWiki/Register. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4639:mysource_matrix: SQL injection vulnerability in index.php in MySourc...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4635:vacation_rental_listings: SQL injection vulnerability in detail.asp in Site2N...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental (VRBO) Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4634:osticket: DISPUTED Directory traversal vulnerability i...

2010-12-30T00:00:00+09:00

** DISPUTED ** Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.php, a different vector than CVE-2005-1439. NOTE: this issue has been disputed by a reliable third party.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4265:jboss_enterprise_application_platform, jboss_enterprise_web_platform, jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

2010-12-30T00:00:00+09:00

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch. NOTE: this can ...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4633:digishop: SQL injection vulnerability in cart.php in digiSHOP...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4522:mybb: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-30T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) editpost.php, (2) member.php, and (3) newreply.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4625:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 does not p...

2010-12-30T00:00:00+09:00

MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4626:mybb: The my_rand function in functions.php in MyBB (aka ...

2010-12-30T00:00:00+09:00

The my_rand function in functions.php in MyBB (aka MyBulletinBoard) before 1.4.12 does not properly use the PHP mt_rand function, which makes it easier for remote attackers to obtain access to an arbitrary account by requesting a reset of the account's password, and then conducting a brute-force attack.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4636:business_e-listings: SQL injection vulnerability in detail.asp in Site2N...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3862:jboss_enterprise_application_platform, jboss_enterprise_web_platform, jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

2010-12-30T00:00:00+09:00

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4624:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 allows rem...

2010-12-30T00:00:00+09:00

MyBB (aka MyBulletinBoard) before 1.4.12 allows remote authenticated users to bypass intended restrictions on the number of [img] MyCodes by editing a post after it has been created.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4631:pilot_cart: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-30T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) countrycode parameter to contact.asp, USERNAME parameter to (2) gateway.asp and (3) cart.asp, and the specific parameter to (4) quote.asp and (5) buyitnow.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4632:pilot_cart: Multiple SQL injection vulnerabilities in ASPilot P...

2010-12-30T00:00:00+09:00

Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the (1) article parameter to kb.asp, (2) specific parameter to cart.asp, (3) countrycode parameter to contact.asp, and the (4) srch parameter to search.asp. NOTE: the article parameter to pilot.asp is already covered by CVE-2008-2688.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4637:feedlist: Cross-site scripting (XSS) vulnerability in feedlis...

2010-12-30T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in feedlist/handler_image.php in the FeedList plugin 2.61.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4638:com_jquarks4s: SQL injection vulnerability in the submitSurvey fun...

2010-12-30T00:00:00+09:00

SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the q parameter in a submitSurvey action to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4616:impresscms: Cross-site scripting (XSS) vulnerability in modules...

2010-12-29T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4617:com_jotloader: Directory traversal vulnerability in the JotLoader ...

2010-12-29T00:00:00+09:00

Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4619:mafya_oyun_scrpti: SQL injection vulnerability in profil.php in Mafya ...

2010-12-29T00:00:00+09:00

SQL injection vulnerability in profil.php in Mafya Oyun Scrpti (aka Mafia Game Script) allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3850:kernel: The ec_dev_ioctl function in net/econet/af_econet.c...

2010-12-30T00:00:00+09:00

The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4614:ero_auktion: SQL injection vulnerability in item.php in Ero Aukt...

2010-12-29T00:00:00+09:00

SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2010-0723.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4615:oto_galeri_sistemi: Multiple SQL injection vulnerabilities in Oto Galer...

2010-12-29T00:00:00+09:00

Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac parameter to carsdetail.asp and the (2) marka parameter to twohandscars.asp.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3878:jboss_enterprise_application_platform: Cross-site request forgery (CSRF) vulnerability in ...

2010-12-30T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3862:jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

2010-12-30T00:00:00+09:00

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4342:kernel: The aun_incoming function in net/econet/af_econet.c...

2010-12-30T00:00:00+09:00

The aun_incoming function in net/econet/af_econet.c in the Linux kernel before 2.6.37-rc6, when Econet is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending an Acorn Universal Networking (AUN) packet over UDP.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4608:habari: Habari 0.6.5 allows remote attackers to obtain sens...

2010-12-29T00:00:00+09:00

Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in system/admin/, which reveals the installation path in an error message.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4321:iprint_client: Stack-based buffer overflow in an ActiveX control i...

2010-12-30T00:00:00+09:00

Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to execute arbitrary code via vectors related to the GetDriverSettings method.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4276:livezilla: Cross-site scripting (XSS) vulnerability in the lz_...

2010-12-30T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to server.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4623:tivoli_access_manager_for_e-business: WebSEAL in IBM Tivoli Access Manager for e-business...

2010-12-30T00:00:00+09:00

WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service (worker thread consumption) via shift-reload actions.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3708:jboss_enterprise_application_platform, jboss_enterprise_soa_platform: The serialization implementation in JBoss Drools in...

2010-12-30T00:00:00+09:00

The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4258:kernel: The do_exit function in kernel/exit.c in the Linux ...

2010-12-30T00:00:00+09:00

The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1) BUG, (2) NULL pointer dereference, or (3) page fault, as demonstrated by vectors involving the clear_child_tid feature and the splice system call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4507:ispot, ispot_firmware, clearspot, clearspot_firmware: Multiple cross-site request forgery (CSRF) vulnerab...

2010-12-30T00:00:00+09:00

Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the cmd parameter in an act_cmd_result action to webmain.cgi, (2) enable remote management via an enable_remote_access act_network_set action to webmain.cgi, (3) enable the TELNET service via an ENABLE_TELNET act_set_wimax...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4622:tivoli_access_manager_for_e-business: Directory traversal vulnerability in WebSEAL in IBM...

2010-12-30T00:00:00+09:00

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4607:habari: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-29T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter to system/admin/dash_additem.php and the (2) status_data[] parameter to system/admin/dash_status.php. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4606:tivoli_storage_manager: Unspecified vulnerability in the Space Management c...

2010-12-29T00:00:00+09:00

Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary commands via unknown vectors, related to a "script execution vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4161:enterprise_linux, linux_kernel: The udp_queue_rcv_skb function in net/ipv4/udp.c in...

2010-12-30T00:00:00+09:00

The udp_queue_rcv_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (deadlock and system hang) by sending UDP traffic to a socket that has a crafted socket filter, a related issue to CVE-2010-4158.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4605:tivoli_storage_manager: Unspecified vulnerability in the backup-archive cli...

2010-12-29T00:00:00+09:00

Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3923:attachecase: Untrusted search path vulnerability in AttacheCase ...

2010-12-30T00:00:00+09:00

Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4612:cms: Multiple SQL injection vulnerabilities in index.php...

2010-12-29T00:00:00+09:00

Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) usr_email parameters to user/1/hregister.html, (3) usr_email parameter to user/1/hlogin.html, (4) useremail parameter to user/1/forgotpass.html, and the (5) q parameter to search/1.html. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3848:kernel: Stack-based buffer overflow in the econet_sendmsg f...

2010-12-30T00:00:00+09:00

Stack-based buffer overflow in the econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to gain privileges by providing a large number of iovec structures.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3849:kernel: The econet_sendmsg function in net/econet/af_econet...

2010-12-30T00:00:00+09:00

The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4610:cms: Cross-site scripting (XSS) vulnerability in index.p...

2010-12-29T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or HTML via the error parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4158:kernel: The sk_run_filter function in net/core/filter.c in ...

2010-12-30T00:00:00+09:00

The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4352:dbus: Stack consumption vulnerability in D-Bus (aka DBus)...

2010-12-30T00:00:00+09:00

Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4618:aicontactsafe: Cross-site scripting (XSS) vulnerability in the Alg...

2010-12-29T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Algis Info aiContactSafe component before 2.0.14 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4609:cms: SQL injection vulnerability in index.php in Html-ed...

2010-12-29T00:00:00+09:00

SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser parameter in a registrate action.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4613:hycus_cms: Multiple directory traversal vulnerabilities in Hyc...

2010-12-29T00:00:00+09:00

Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the site parameter to (1) index.php and (2) admin.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3874:kernel: Heap-based buffer overflow in the bcm_connect funct...

2010-12-29T00:00:00+09:00

Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service (memory corruption) via a connect operation.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3859:kernel: Multiple integer signedness errors in the TIPC impl...

2010-12-29T00:00:00+09:00

Multiple integer signedness errors in the TIPC implementation in the Linux kernel before 2.6.36.2 allow local users to gain privileges via a crafted sendmsg call that triggers a heap-based buffer overflow, related to the tipc_msg_build function in net/tipc/msg.c and the verify_iovec function in net/core/iovec.c.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4604:tivoli_storage_manager: Stack-based buffer overflow in the GeneratePassword...

2010-12-29T00:00:00+09:00

Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows local users to gain privileges by specifying a long LANG environment variable, and then sending a request over a pipe.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4602:rational_clearquest: The Web client in IBM Rational ClearQuest 7.1.1.x b...

2010-12-29T00:00:00+09:00

The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated users to bypass "restricted user" limitations, and read arbitrary records, via a modified record number in the URL for a RECORD action, as demonstrated by a modified bookmark.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4601:rational_clearquest: Multiple unspecified vulnerabilities in IBM Rationa...

2010-12-29T00:00:00+09:00

Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 allow attackers to have an unknown impact via vectors related to third-party .ocx files.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4343:kernel: drivers/scsi/bfa/bfa_core.c in the Linux kernel bef...

2010-12-29T00:00:00+09:00

drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system crash) via read operations on an fc_host statistics file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4600:dojo_toolkit, rational_clearquest: Dojo Toolkit, as used in the Web client in IBM Rati...

2010-12-29T00:00:00+09:00

Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote attackers to read cookies by navigating to a Dojo file, related to an "open direct" issue.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4565:kernel: The bcm_connect function in net/can/bcm.c (aka the ...

2010-12-29T00:00:00+09:00

The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensitive information about kernel memory use by listing this filename.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002563:複数の VMware 製品の VMware-Tools アップデート機能における権限昇格の脆弱性

2010-12-27T15:40:47+09:00

複数の VMware 製品の VMware-Tools アップデート機能には、ゲスト OS 上の権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002562:複数の VMware 製品の vmware-mount における権限昇格の脆弱性

2010-12-27T15:38:13+09:00

複数の VMware 製品の vmware-mount には、共有オブジェクトファイルに関する処理に不備があり、ライブラリを適切にロードしないため、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002561:複数の VMware 製品の vmware-mount における権限昇格の脆弱性

2010-12-27T15:36:22+09:00

複数の VMware 製品の vmware-mount には、一時ファイルに関する処理に不備があるため、競合状態となり、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002560:複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能における任意のコードを実行される脆弱性

2010-12-27T15:33:27+09:00

複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能には、不特定のサイズフィールドを適切に検証しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002559:Apple QuickTime における整数オーバーフローの脆弱性

2010-12-27T15:09:17+09:00

Apple QuickTime には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002558:Windows 上で稼働する Apple QuickTime における重要な情報を取得される脆弱性

2010-12-27T15:07:31+09:00

Windows 上で稼働する Apple QuickTime には、ユーザプロファイルの “Apple Computer” ディレクトリに対するパーミッションに関して不備があるため、重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002557:Windows 上で稼働する Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性

2010-12-27T15:06:01+09:00

Windows 上で稼働する Apple QuickTime には、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002556:Apple QuickTime における整数符号エラーの脆弱性

2010-12-27T15:03:30+09:00

Apple QuickTime には、整数符号エラーの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002555:Apple QuickTime における任意のコードを実行される脆弱性

2010-12-27T15:02:14+09:00

Apple QuickTime には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002554:Apple QuickTime における任意のコードを実行される脆弱性

2010-12-27T14:59:05+09:00

JVNDB-2010-002553:CA PSFormX および CA WebScan ActiveX コントロールにおける任意のコードを実行される脆弱性

2010-12-27T11:49:20+09:00

CA PSFormX および CA WebScan ActiveX コントロールには、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002552:CA eHealth Performance Manager におけるクロスサイトスクリプティングの脆弱性

2010-12-27T11:44:39+09:00

CA eHealth Performance Manager には、悪質な HTML 検出を無効に設定している場合、リクエストに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002631:CA eTrust PestPatrol の PestPatrol ActiveX コントロールにおけるスタックペースのバッファオーバーフローの脆弱性

2010-12-27T11:41:53+09:00

CA eTrust PestPatrol の PestPatrol ActiveX コントロール (ppctl.dll) には、スタックペースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002630:CA Service Desk の Web インターフェイスにおけるクロスサイトスクリプティングの脆弱性

2010-12-27T11:38:57+09:00

CA Service Desk の Web インターフェイスには、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002629:複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントおけるサービス運用妨害 (DoS) の脆弱性

2010-12-27T11:36:03+09:00

複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントには、RAR アーカイブファイルに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2009-3587 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002628:複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントにおける任意のコードを実行される脆弱性

2010-12-27T11:32:27+09:00

複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントには、RAR アーカイブファイルに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。本脆弱性は、CVE-2009-3588 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002627:CA Host-Based Intrusion Prevention System の kmxIds.sys におけるサービス運用妨害 (DoS) の脆弱性

2010-12-27T11:24:00+09:00

CA Host-Based Intrusion Prevention System (HIPS) の kmxIds.sys には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002626:CA SiteMinder における J2EE アプリケーションのクロスサイトスクリプティングに対する保護を回避される脆弱性

2010-12-27T11:19:48+09:00

CA SiteMinder には、J2EE アプリケーションのクロスサイトスクリプティングに対する保護を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002625:CA SiteMinder における J2EE アプリケーションのクロスサイトスクリプティングに対する保護を回避される脆弱性

2010-12-27T10:47:36+09:00

JVNDB-2009-002624:複数の CA 製品の Data Transport Services におけるスタックベースのバッファオーバーフローの脆弱性

2010-12-27T10:45:26+09:00

複数の CA 製品の Data Transport Services 内にある dtscore library の token searching 機能には、スタックベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002623:CA ARCserve Backup のメッセージエンジンにおけるサービス運用妨害 (DoS) の脆弱性

2010-12-27T10:41:31+09:00

CA ARCserve Backup のメッセージエンジンは、ASCORE モジュールを適切に処理しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002622:CA Internet Security Suite の vetmonnt.sys におけるサービス運用妨害 (DoS) の脆弱性

2010-12-27T10:36:47+09:00

CA Internet Security Suite の vetmonnt.sys は、IOCTL コールを適切に検証しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002621:CA Service Metric Analysis および Service Level Management の smmsnmpd サービスにおける任意のコマンドを実行される脆弱性

2010-12-27T10:34:21+09:00

CA Service Metric Analysis および Service Level Management の smmsnmpd サービスは、アクセスを適切に制限しないため、任意のコマンドを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002620:複数の CA 製品の Arclib library におけるウィルス検知を回避される脆弱性

2010-12-27T10:30:20+09:00

複数の CA 製品の CA Anti-Virus エンジン内にある Arclib library (arclib.dll) には、ウィルス検知を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002551:Quagga の bgpd におけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T16:19:05+09:00

Quagga の bgpd は、AS パスを適切に構文解析しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002550:Adobe Illustrator における任意のコードを実行される脆弱性

2010-12-24T16:16:35+09:00

Adobe Illustrator には、DLL ハイジャック攻撃を誘導され、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002549:OpenSSL における共有秘密鍵の認証要求を回避される脆弱性

2010-12-24T16:13:54+09:00

OpenSSL は、J-PAKE が有効な際、J-PAKE プロトコル内のパブリックパラメータを適切に認証しないため、共有秘密鍵の認証要求を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002548:OpenSSL における暗号スイートのダウングレードに関する脆弱性

2010-12-24T16:11:18+09:00

OpenSSL は、SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG が有効な際、セッションキャッシュ内にある暗号スイートへの変更を適切に制限しないため、意図しない暗号スイートのダウングレードを強制的に実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002547:AWStats に脆弱性

2010-12-24T16:06:42+09:00

AWStats には、設定ファイルディレクトリを指定する際に、"\\" の処理に起因する脆弱性が存在します。これにより、攻撃者はネットワーク上に存在する任意の設定ファイルを指定することが可能です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002546:PHP にサービス運用妨害 (DoS) の脆弱性

2010-12-24T16:04:08+09:00

PHP の getSymbol 関数には、脆弱性が存在します。 PHP の getSymbol 関数には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002545:ISC BIND named の allow-query の処理における脆弱性

2010-12-24T16:01:41+09:00

Internet Systems Consortium (ISC) が提供する BIND には、allow-query のアクセスコントロールの処理に脆弱性が存在します。 ISC から以下の脆弱性情報が公開されています。 When named is running as an authoritative server for a zone and receives a query for that zone data, it first checks for allow-query acls in the zone statement, then in that view, then in global options. If none of these exist, it defaults to allowing any query (allow-query {“any”};). With this bug, if the allow-query is not set in the zone statement, it failed to check in view or global options and fell back to the default of allowing any query. This means that queries that the zone owner did not wish to allow were incorrectly allowed. This bug doesn't affect allow-recursion or allow-query-cache acls, since they are not relevant to a zone for which the server is authoritative. ISC によると、9.6ESV-R2 は本脆弱性の影響をうけないとされています。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002544:ISC BIND named validator に脆弱性

2010-12-24T15:36:01+09:00

Internet Systems Consortium (ISC) が提供する BIND named には、特定の状況下で、ゾーンデータの状態を insecure としてしまう脆弱性が存在します。 ISC から以下の脆弱性情報が公開されています。 ISC named, acting as a DNSSEC validator, was determining if an NS RRset is insecure based on a value that could mean either that the RRset is actually insecure or that there wasn't a matching key for the RRSIG in the DNSKEY RRset when resuming from validating the DNSKEY RRset. This can happen when in the middle of a DNSKEY algorithm rollover, when two different algorithms were used to sign a zone but only the new set of keys are in the zone DNSKEY RRset.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002543:ISC BIND におけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T15:19:06+09:00

Internet Systems Consortium (ISC) が提供する BIND ネームサーバには、サービス運用妨害 (DoS) 攻撃の脆弱性が存在します。 ISC から、以下の脆弱性情報が公開されています。 Adding certain types of signed negative responses to cache doesn't clear any matching RRSIG records already in cache. A subsequent lookup of the cached data can cause named to crash (INSIST).

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002506:CA eTrust Antivirus における HTML ドキュメント内のマルウェアの検出を回避される脆弱性

2010-12-24T11:50:50+09:00

CA eTrust Antivirus には、Internet Explorer 6 または 7 を使用している際、HTML ドキュメント内のマルウェアの検出を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002505:Windows 上で稼働する CA ARCserve Backup の LDBserver サービスにおける任意のコードを実行される脆弱性

2010-12-24T11:50:24+09:00

Windows 上で稼働する CA ARCserve Backup のサーバ内にある LDBserver サービスには、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002504:CA ARCserve Backup の asdbapi.dll におけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T11:48:33+09:00

CA ARCserve Backup の asdbapi.dll には、検証に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002503:CA ARCserve Backup の asdbapi.dll のデータベースエンジンサービスにおけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T11:48:11+09:00

CA ARCserve Backup の asdbapi.dll のデータベースエンジンサービスには、検証に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002502:CA ARCserve Backup の asdbapi.dll のテープエンジンサービスにおけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T11:47:53+09:00

CA ARCserve Backup の asdbapi.dll のテープエンジンサービスには、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002501:CA ARCserve Backup の RPC インターフェイスにおけるディレクトリトラバーサルの脆弱性

2010-12-24T11:47:29+09:00

CA ARCserve Backup の RPC インターフェイス (asdbapi.dll) には、ディレクトリトラバーサルの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002500:CA Service Desk および CMDB におけるクロスサイトスクリプティングの脆弱性

2010-12-24T11:43:21+09:00

CA Service Desk および CMDB には、複数の Web フォームに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002499:CA ARCserve Backup for Laptops and Desktops の LGServer サービスにおける整数オーバーフローの脆弱性

2010-12-24T11:42:55+09:00

CA ARCserve Backup for Laptops and Desktops のサーバ内の LGServer サービスの rxRPC.dll には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002498:CA Host-Based Intrusion Prevention System の kmxfw.sys ドライバにおける権限を取得される脆弱性

2010-12-24T11:42:26+09:00

複数の CA 製品などで利用される CA Host-Based Intrusion Prevention System (HIPS) の kmxfw.sys ドライバは、IOCTL リクエストを適切に検証しないため、サービス運用妨害 (DoS) 状態となる、または権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002497:CA eTrust Secure Content Manager の HTTP Gateway Service におけるスタックベースのバッファオーバーフローの脆弱性

2010-12-24T11:41:58+09:00

CA eTrust Secure Content Manager の HTTP Gateway Service (icihttp.exe) には、以下に関する処理において不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 (1) LIST コマンド内にあるファイルの "月" フィールド (2) PASV コマンド (3) LIST コマンド内にあるディレクトリ、ファイルおよびリンク

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002496:CA Internet Security Suite の UmxEventCli.dll におけるディレクトリトラバーサルの脆弱性

2010-12-24T11:41:32+09:00

CA Internet Security Suite の UmxEventCli.dll 内にある UmxEventCli.CachedAuditDataList.1 (UmxEventCliLib) ActiveX コントロールには、ディレクトリトラバーサルの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002495:CA BrightStor ARCServe Backup のサーバ内の xdr 関数におけるバッファオーバーフローの脆弱性

2010-12-24T11:41:05+09:00

CA BrightStor ARCServe Backup のサーバ内の xdr 関数には、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002494:CA BrightStor ARCServe Backup の caloggerd におけるディレクトリトラバーサルの脆弱性

2010-12-24T11:40:39+09:00

CA BrightStor ARCServe Backup の caloggerd には、ディレクトリトラバーサルの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002493:CA Secure Content Manager の eTrust Common Services Daemon におけるサービス運用妨害 (DoS) の脆弱性

2010-12-24T11:40:07+09:00

CA Secure Content Manager の eTrust Common Services (Transport) Daemon (eCSqdmn) には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002492:複数の CA 製品の NetBackup サービスにおける任意のコマンドを実行される脆弱性

2010-12-24T11:39:42+09:00

複数の CA 製品の NetBackup サービスには、ファイルのアップロードの検証に関する処理に不備があるため、任意のコマンドを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002491:複数の CA 製品の LGServer サービスにおけるバッファオーバーフローの脆弱性

2010-12-24T11:39:11+09:00

複数の CA 製品の LGServer サービスには、コマンドの引数に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4597:integraxor: Stack-based buffer overflow in the save method in t...

2010-12-23T00:00:00+09:00

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface (HMI) before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4599:integraxor: Untrusted search path vulnerability in Ecava Integr...

2010-12-23T00:00:00+09:00

Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4598:integraxor: Directory traversal vulnerability in Ecava IntegraX...

2010-12-23T00:00:00+09:00

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3972:iis: The TELNET_STREAM_CONTEXT::OnSendData function in t...

2010-12-23T00:00:00+09:00

The TELNET_STREAM_CONTEXT::OnSendData function in the FTP protocol handler (ftpsvc.dll) for Microsoft Internet Information Services (IIS) 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted FTP request that triggers memory corruption. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3973:wmi_administrative_tools: The WBEMSingleView.ocx ActiveX control 1.50.1131.0 ...

2010-12-23T00:00:00+09:00

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4347:kernel: The ACPI subsystem in the Linux kernel before 2.6.3...

2010-12-22T00:00:00+09:00

The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACPI interpreter tables, related to the acpi_debugfs_init function in drivers/acpi/debugfs.c.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4113:power_manager: Unspecified vulnerability in HP Power Manager (HPPM...

2010-12-22T00:00:00+09:00

Unspecified vulnerability in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3268:antivirus, intel_alert_management_system, endpoint_protection: The GetStringAMSHandler function in prgxhndl.dll in...

2010-12-22T00:00:00+09:00

The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4594:lotus_mobile_connect: The Connection Manager in IBM Lotus Mobile Connect ...

2010-12-22T00:00:00+09:00

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly process TCP connection requests, which allows remote attackers to cause a denial of service (memory consumption and HTTP-AS hang) by making many connection requests that trigger "queue size delta errors," related to a "timing hole" issue.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4519:views: Multiple cross-site request forgery (CSRF) vulnerab...

2010-12-23T00:00:00+09:00

Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable all Views or (2) disable all Views.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4277:embedded-video: Cross-site scripting (XSS) vulnerability in lembedd...

2010-12-22T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3905:eucalyptus: The password reset feature in the administrator int...

2010-12-22T00:00:00+09:00

The password reset feature in the administrator interface for Eucalyptus 2.0.0 and 2.0.1 does not perform authentication, which allows remote attackers to gain privileges by sending password reset requests for other users.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4112:insight_management_agents: HP Insight Management Agents before 8.6 allows remo...

2010-12-22T00:00:00+09:00

HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3970:windows: Unspecified vulnerability in Microsoft Windows has ...

2010-12-22T00:00:00+09:00

Unspecified vulnerability in Microsoft Windows has unknown impact and attack vectors, as reported by Moti and Xu Hao.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3971:ie: Use-after-free vulnerability in the CSharedStyleShe...

2010-12-22T00:00:00+09:00

Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 7 and 8 and possibly other products, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via multiple @import calls in a crafted document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4111:insight_diagnostics: Cross-site scripting (XSS) vulnerability in HP Insi...

2010-12-22T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4110:openvms: Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H...

2010-12-22T00:00:00+09:00

Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or cause a denial of service via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4595:lotus_mobile_connect: The Connection Manager in IBM Lotus Mobile Connect ...

2010-12-22T00:00:00+09:00

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 disables the http.device.stanza blacklisting functionality for HTTP Access Services (HTTP-AS), which allows remote attackers to bypass intended access restrictions via an HTTP request that contains a disallowed User-Agent header.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4346:kernel: The install_special_mapping function in mm/mmap.c i...

2010-12-22T00:00:00+09:00

The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language application.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4590:lotus_mobile_connect: Cross-site scripting (XSS) vulnerability in HTTP Ac...

2010-12-22T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HTTP Access Services (HTTP-AS) in the Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4573:esxi: The Update Installer in VMware ESXi 4.1, when a mod...

2010-12-22T00:00:00+09:00

The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary username and password.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4591:lotus_mobile_connect: The Connection Manager in IBM Lotus Mobile Connect ...

2010-12-22T00:00:00+09:00

The Connection Manager in IBM Lotus Mobile Connect (LMC) before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not delete LTPA tokens in response to use of the iNotes Logoff button, which might allow physically proximate attackers to obtain access via an unattended client, related to a cookie domain mismatch.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4593:lotus_mobile_connect: The Connection Manager in IBM Lotus Mobile Connect ...

2010-12-22T00:00:00+09:00

The Connection Manager in IBM Lotus Mobile Connect before 6.1.4 does not properly maintain a certain reference count, which allows remote authenticated users to cause a denial of service (IP address exhaustion) by making invalid attempts to establish sessions with the same VPN ID from multiple devices.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4114:discovery&dependency_mapping_inventory: Cross-site scripting (XSS) vulnerability in HP Disc...

2010-12-22T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.6x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3881:kernel: arch/x86/kvm/x86.c in the Linux kernel before 2.6.3...

2010-12-23T00:00:00+09:00

arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4592:lotus_mobile_connect: The Mobile Network Connections functionality in the...

2010-12-22T00:00:00+09:00

The Mobile Network Connections functionality in the Connection Manager in IBM Lotus Mobile Connect before 6.1.4, when HTTP Access Services (HTTP-AS) is enabled, does not properly handle failed attempts at establishing HTTP-TCP sessions, which allows remote attackers to cause a denial of service (memory consumption and daemon crash) by making many TCP connection attempts.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4588:wmi_administrative_tools: The WBEMSingleView.ocx ActiveX control 1.50.1131.0 ...

2010-12-23T00:00:00+09:00

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4589:enovia: Cross-site scripting (XSS) vulnerability in IBM ENO...

2010-12-22T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in IBM ENOVIA 6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the emxFramework.FilterParameterPattern property.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4521:views: Cross-site scripting (XSS) vulnerability in the Vie...

2010-12-23T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4520:views: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-23T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in the Views module 6.x before 6.x-2.11 for Drupal allow remote attackers to inject arbitrary web script or HTML via (1) a URL or (2) an aggregator feed title.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002542:MIT Kerberos 5 における AD-SIGNEDPATH または AD-KDC-ISSUED 署名を偽造される脆弱性

2010-12-22T14:59:03+09:00

MIT Kerberos 5 は、RC4 key-derivation チェックサムを拒否しないため、AD-SIGNEDPATH および AD-KDC-ISSUED 署名を偽造される、または権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002541:MIT Kerberos 5 における GSS トークンを偽造される脆弱性

2010-12-22T14:32:55+09:00

MIT Kerberos 5 は、チェックサムの適合性を適切に判定しないため、GSS トークンを偽造される、権限を取得される、またはその他の詳細不明な影響を受ける脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002540:MIT Kerberos 5 における KRB-SAFE メッセージを偽造される脆弱性

2010-12-22T14:30:05+09:00

MIT Kerberos 5 には、チェックサムの適合性を適切に判定しないため、Key Distribution Center (KDC) へのレスポンスを変更される、または KRB-SAFE メッセージを偽造される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002539:ISC DHCP サーバにおけるサービス運用妨害 (DoS) の脆弱性

2010-12-22T14:25:52+09:00

ISC DHCP サーバには、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002538:Wireshark の ZigBee ZCL 解析部の epan/dissectors/packet-zbee-zcl.c におけるサービス運用妨害 (DoS) の脆弱性

2010-12-22T14:20:39+09:00

Wireshark の ZigBee ZCL 解析部の epan/dissectors/packet-zbee-zcl.c には、Discover Attributes に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002537:Wireshark の LDSS 解析部の dissect_ldss_transfer 関数におけるヒープベースのバッファオーバーフローの脆弱性

2010-12-22T14:13:47+09:00

Wireshark の LDSS 解析部の dissect_ldss_transfer 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002536:Wireshark の BER 解析部の dissect_ber_unknown 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-12-22T14:07:12+09:00

Wireshark の BER 解析部の epan/dissectors/packet-ber.c 内にある dissect_ber_unknown 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002619:PHP の utf8_decode 関数におけるクロスサイトスクリプティングおよび SQL インジェクションに対する保護メカニズムを回避される脆弱性

2010-12-22T14:03:42+09:00

PHP の utf8_decode 関数は、過度に長い形式の UTF-8 エンコーディングおよび UTF-8 データ内にある ill-formed サブシーケンスを適切に処理しないため、クロスサイトスクリプティングおよび SQL インジェクションに対する保護メカニズムを回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002535:PHP の xml_utf8_decode 関数における整数オーバーフローの脆弱性

2010-12-22T14:00:35+09:00

PHP の ext/xml/xml.c 内にある xml_utf8_decode 関数には、整数オーバーフローの脆弱性が存在します。本脆弱性は CVE-2010-3870 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2590:crystal_reports: Heap-based buffer overflow in the CrystalReports12....

2010-12-22T00:00:00+09:00

Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2644:websphere_service_registry_and_repository: IBM WebSphere Service Registry and Repository (WSRR...

2010-12-22T00:00:00+09:00

IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API requests to an EJB interface.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4576:chrome_os: browser/worker_host/message_port_dispatcher.cc in G...

2010-12-22T00:00:00+09:00

browser/worker_host/message_port_dispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle certain postMessage calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code that creates a web worker.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4275:radius_manager: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-22T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergroup or a (b) store_nas action to admin.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4575:chrome_os: The ThemeInstalledInfoBarDelegate::Observe function...

2010-12-22T00:00:00+09:00

The ThemeInstalledInfoBarDelegate::Observe function in browser/extensions/theme_installed_infobar_delegate.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle incorrect tab interaction by an extension, which allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted extension.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0039:airport_express, airport_express_base_station_firmware, airport_extreme, airport_...: The Application-Level Gateway (ALG) on the Apple Ti...

2010-12-22T00:00:00+09:00

The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1804:airport_express, airport_express_base_station_firmware, airport_extreme, airport_...: Unspecified vulnerability in the network bridge fun...

2010-12-22T00:00:00+09:00

Unspecified vulnerability in the network bridge functionality on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 allows remote attackers to cause a denial of service (networking outage) via a crafted DHCP reply.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4332:pointter_php_content_management_system: Pointter PHP Content Management System 1.0 allows r...

2010-12-22T00:00:00+09:00

Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4333:pointter_php_micro-blogging_social_network: Pointter PHP Micro-Blogging Social Network 1.8 allo...

2010-12-22T00:00:00+09:00

Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4581:opera_browser: Unspecified vulnerability in Opera before 11.00 has...

2010-12-22T00:00:00+09:00

Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4116:storageworks_storage_mirroring: Unspecified vulnerability in HP StorageWorks Storag...

2010-12-22T00:00:00+09:00

Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x before 5.2.2.1771.2 allows remote attackers to execute arbitrary code via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4586:opera_browser: The default configuration of Opera before 11.00 ena...

2010-12-22T00:00:00+09:00

The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issue to CVE-2010-4508.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4577:chrome_os: Google Chrome before 8.0.552.224 and Chrome OS befo...

2010-12-22T00:00:00+09:00

Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4578:chrome_os: Google Chrome before 8.0.552.224 and Chrome OS befo...

2010-12-22T00:00:00+09:00

Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly perform cursor handling, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0114:endpoint_protection: fw_charts.php in the reporting module in the Manage...

2010-12-22T00:00:00+09:00

fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4574:chrome_os: The Pickle::Pickle function in base/pickle.cc in Go...

2010-12-22T00:00:00+09:00

The Pickle::Pickle function in base/pickle.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 on 64-bit Linux platforms does not properly perform pointer arithmetic, which allows remote attackers to bypass message deserialization validation, and cause a denial of service or possibly have unspecified other impact, via invalid pickle data.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4587:opera_browser: Opera before 11.00 on Windows does not properly imp...

2010-12-22T00:00:00+09:00

Opera before 11.00 on Windows does not properly implement the Insecure Third Party Module warning message, which might make it easier for user-assisted remote attackers to have an unspecified impact via a crafted module.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4583:opera_browser: Opera before 11.00, when Opera Turbo is enabled, do...

2010-12-22T00:00:00+09:00

Opera before 11.00, when Opera Turbo is enabled, does not display a page's security indication, which makes it easier for remote attackers to spoof trusted content via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1676:tor: Heap-based buffer overflow in Tor before 0.2.1.28 a...

2010-12-22T00:00:00+09:00

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-2189:airport_express, airport_express_base_station_firmware, airport_extreme, airport_...: The ICMPv6 implementation on the Apple Time Capsule...

2010-12-22T00:00:00+09:00

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4580:opera_browser: Opera before 11.00 does not clear WAP WML form fiel...

2010-12-22T00:00:00+09:00

Opera before 11.00 does not clear WAP WML form fields after manual navigation to a new web site, which allows remote attackers to obtain sensitive information via an input field that has the same name as an input field on a previously visited web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4584:opera_browser: Opera before 11.00, when Opera Turbo is used, does ...

2010-12-22T00:00:00+09:00

Opera before 11.00, when Opera Turbo is used, does not properly present information about problematic X.509 certificates on https web sites, which might make it easier for remote attackers to spoof trusted content via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4585:opera_browser: Unspecified vulnerability in the auto-update functi...

2010-12-22T00:00:00+09:00

Unspecified vulnerability in the auto-update functionality in Opera before 11.00 allows remote attackers to cause a denial of service (application crash) by triggering an Opera Unite update.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4579:opera_browser: Opera before 11.00 does not properly constrain dial...

2010-12-22T00:00:00+09:00

Opera before 11.00 does not properly constrain dialogs to appear on top of rendered documents, which makes it easier for remote attackers to trick users into interacting with a crafted web site that spoofs the (1) security information dialog or (2) download dialog.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4582:opera_browser: Opera before 11.00 does not properly handle securit...

2010-12-22T00:00:00+09:00

Opera before 11.00 does not properly handle security policies during updates to extensions, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002534:CVS の rcs.c 内にある apply_rcs_change 関数における権限昇格の脆弱性

2010-12-21T15:30:42+09:00

CVS の rcs.c 内にある apply_rcs_change 関数には、配列インデックスエラーにより、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002533:Microsoft Windows の RtlQueryRegistryValues() 関数におけるレジストリデータ検証不備の脆弱性

2010-12-21T15:28:08+09:00

Microsoft Windows の RtlQueryRegistryValues() 関数には、読み込んだレジストリデータを正しく検証しない脆弱性が存在します。なお、本脆弱性を使用した攻撃コードが公開されています。 Microsoft Windows は、ユーザ定義の Unicode 文字 (外字) を使用するための end-user defined characters (EUDC) をサポートしています。Windows カーネル (win32k.sys) の graphics device interface (GDI) は、 EUDC レジストリキーに含まれるフォント情報を読み込みます。具体的には、GreEnableEudc() が RtlQueryRegistryValues() を使用して、レジストリキー HKCU\EUDC\(codepage)\SystemDefaultEUDCFont の値を読み込みます。RtlQueryRegistryValues() は、REG_SZ (ストリング) の値を想定しており、レジストリキー SystemDefaultEUDCFont が指定するバッファに書き込みます。デフォルト設定において、権限のないユーザが EUDC レジストリキーを変更することが可能です。また、RtlQueryRegistryValues() は SystemDefaultEUDCFont から読み込まれたデータの検証を行いません。 SystemDefaultEUDCFont のデータを変更することで、攻撃者はカーネルメモリを上書きすることが可能です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002532:RealFlex RealWin HMI サービスにバッファオーバーフローの脆弱性

2010-12-21T15:25:09+09:00

RealFlex RealWin HMI サービス (912/tcp) には、複数のスタックバッファオーバーフローの脆弱性が存在します。 RealFlex RealWin HMI サービス (912/tcp) には、二つのスタックバッファオーバーフローの脆弱性が存在します。一つ目は、SCPC_INITIALIZE() および SCPC_INITIALIZE_RF() 関数内の sprintf() の使用、二つ目は、SCPC_TXTEVENT() 関数内の strcpy() の使用にそれぞれ起因します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002531:Apache Tomcat の Manager アプリケーションにおけるクロスサイトスクリプティングの脆弱性

2010-12-21T15:20:05+09:00

Apache Tomcat の Manager アプリケーションには、sessionsList.jsp および sessionDetail.jsp の orderBy または sort に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002530:Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性

2010-12-21T15:14:31+09:00

Webmin および Usermin には、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002529:Interstage Application Server における許可されていない IP アドレスからのリクエストのアクセスを許可する脆弱性

2010-12-21T14:14:07+09:00

Interstage Application Server には、IPアドレスに基づくアクセス制限を行った際に、許可されないはずの IPアドレスからのリクエストを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002528:日立の Groupmax 関連製品におけるバッファオーバーフローの脆弱性

2010-12-21T14:06:58+09:00

日立の Groupmax 関連製品には、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002527:Linux kernel の fs/aio.c 内にある io_submit_one 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-12-20T14:46:39+09:00

Linux kernel の fs/aio.c 内にある io_submit_one 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002526:PGP Desktop にデータインジェクションの脆弱性

2010-12-20T14:44:05+09:00

PGP Desktop 10.1.0 と PGP Desktop 10.0.3 およびそれ以前には、データインジェクションの脆弱性が存在します。なお、PGP Command Line 9.6 およびそれ以降のバージョンについては、この脆弱性は存在しません。 PGP Desktop のユーザインターフェースでは、正規に署名されたデータに署名されていないデータを混入させたメッセージに対して、メッセージ全体が署名されていると誤って表示される問題が存在します。この場合、ユーザは細工された署名されていないデータと署名されている正規データを識別することができません。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002525:Apple iOS の Telephony 内にある GSM 方式の通信管理の実装におけるヒープベースのバッファオーバーフローの脆弱性

2010-12-20T14:39:38+09:00

Apple iOS の Telephony 内にある GSM 方式の通信管理の実装には、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002524:Apple iOS の Photos における MobileMe アカウントのパスワードを読まれる脆弱性

2010-12-20T14:32:59+09:00

Apple iOS の Photos は、暗号化されていない接続を経由する HTTP Basic Authentication のサポートを有効にしているため、MobileMe アカウントのパスワードを読まれる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002523:Apple iOS の Networking における権限昇格の脆弱性

2010-12-20T14:30:01+09:00

Apple iOS の Networking は、パケットフィルタのルールを処理中に、無効なポインタにアクセスする不備があるため、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002522:Apple iOS の WebKit における Mail のリモートイメージの読み込み設定を回避される脆弱性

2010-12-20T14:27:47+09:00

Apple iOS の WebKit は、HTML LINK に関する処理に不備があるため、Mail のリモートイメージの読み込み設定を回避される脆弱性が存在します。本問題は、CVE-2010-3813 と関連する問題です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002521:libxml2 の XPath 表現におけるサービス運用妨害 (DoS) の脆弱性

2010-12-20T14:22:22+09:00

libxml2 は、不正な形式の XPath 表現を処理中に無効なメモリ位置から読み込むため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002520:Apple iOS の iAd Content Display における電話をかけられる脆弱性

2010-12-20T14:17:50+09:00

Apple iOS の iAd Content Display は、ad 内の URL に関する処理に不備があるため、電話をかけられる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002519:FreeType の ttinterp.c 内にある Ins_SHZ 関数におけるヒープベースのバッファオーバーフローの脆弱性

2010-12-20T14:14:37+09:00

FreeType の ttinterp.c 内にある Ins_SHZ 関数には、TrueType の Opcode に関する処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002518:Apple iOS のプロファイルを偽装される脆弱性

2010-12-20T14:11:08+09:00

Apple iOS は、設定インストールユーティリティの設定プロファイルを表示する前に署名を検証しないため、プロファイルを偽装される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4495:activematrix_bpm, activematrix_businessworks_service_engine, activematrix_service...: Unspecified vulnerability in the ActiveMatrix Runti...

2010-12-17T00:00:00+09:00

Unspecified vulnerability in the ActiveMatrix Runtime component in TIBCO ActiveMatrix Service Grid 3.0.0, 3.0.1, and 3.1.0; ActiveMatrix Service Bus 3.0.0 and 3.0.1; ActiveMatrix BusinessWorks Service Engine 5.9.0; ActiveMatrix BPM 1.0.1 and 1.0.2; Silver BPM Service 1.0.1; and Silver CAP Service 1.0.0 allows remote authenticated users to execute arbitrary code via vectors related to JMX connections.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4558:phpmyfaq: phpMyFAQ 2.6.11 and 2.6.12, as distributed between ...

2010-12-17T00:00:00+09:00

phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4481:phpmyadmin: phpMyAdmin before 3.4.0-beta1 allows remote attacke...

2010-12-17T00:00:00+09:00

phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4262:xfig: Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5...

2010-12-17T00:00:00+09:00

Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a FIG image with a crafted color definition.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4336:collectd: The cu_rrd_create_file function (src/utils_rrdcreat...

2010-12-17T00:00:00+09:00

The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a denial of service (assertion failure) via a packet with a timestamp whose value is 10 or less, as demonstrated by creating RRD files using the (1) RRDtool and (2) RRDCacheD plugins.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4556:netweaver_business_client: Stack-based buffer overflow in the SapThemeReposito...

2010-12-17T00:00:00+09:00

Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3616:dhcp: ISC DHCP server 4.2 before 4.2.0-P2, when configure...

2010-12-17T00:00:00+09:00

ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service (communications-interrupted state and DHCP client service loss) by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios check_tcp process check to TCP port 520.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3906:git: Cross-site scripting (XSS) vulnerability in Gitweb ...

2010-12-17T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4115:storageworks_modular_smart_array_p2000_g3_firmware: HP StorageWorks Modular Smart Array P2000 G3 firmwa...

2010-12-17T00:00:00+09:00

HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4557:foxboro_i/a_series_batch, wonderware_inbatch: Buffer overflow in the lm_tcp service in Invensys W...

2010-12-17T00:00:00+09:00

Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request to port 9001.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2603:blackberry_desktop_software: RIM BlackBerry Desktop Software 4.7 through 6.0 for...

2010-12-17T00:00:00+09:00

RIM BlackBerry Desktop Software 4.7 through 6.0 for PC, and 1.0 for Mac, uses a weak password to encrypt a database backup file, which makes it easier for local users to decrypt the file via a brute force attack.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2602:blackberry_enterprise_server: Multiple buffer overflows in the PDF distiller comp...

2010-12-17T00:00:00+09:00

Multiple buffer overflows in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Enterprise Server 5.0.0 through 5.0.2, 4.1.6, and 4.1.7 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3964:sharepoint_server: Unrestricted file upload vulnerability in the Docum...

2010-12-16T00:00:00+09:00

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3961:windows_7, windows_server_2008, windows_vista: The Consent User Interface (UI) in Microsoft Window...

2010-12-16T00:00:00+09:00

The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka "Consent UI Impersonation Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002517:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-17T12:47:10+09:00

Apple Safari の WebKit には、SVG ドキュメント内のカラーを処理する間、指定されていない変数のキャストを適切に実行しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002516:Apple Safari および Google Chrome の WebKit における任意のコードを実行される脆弱性

2010-12-17T12:44:44+09:00

Apple Safari および Google Chrome の WebKit は、指定されていない変数のキャストを適切に実行しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002515:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-17T12:40:53+09:00

Apple Safari の WebKit には、SVG use 要素の処理に関して不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002514:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-17T12:39:04+09:00

Apple Safari の WebKit には、Geolocation オブジェクトの処理に関して不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は CVE-2010-3415 と重複している可能性があります。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002513:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-17T12:32:45+09:00

Apple Safari の WebKit は、Cascading Style Sheets (CSS) のカウンタスタイルの処理中、初期化されていないポインタへアクセスされ、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002512:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-17T12:19:46+09:00

Apple Safari の WebKit は、Cascading Style Sheets (CSS) のトークンシーケンス内にある first-letter 疑似要素を適切に処理しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002511:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-17T12:17:33+09:00

Apple Safari の WebKit は、編集可能な要素の処理中、初期化されていないメモリ領域へアクセスされ、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002510:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-17T12:15:15+09:00

Apple Safari の WebKit は、Cascading Style Sheets (CSS) ボックスの処理中、指定されていない変数のキャストを適切に実行しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002509:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-17T12:12:56+09:00

Apple Mac OS X および Windows 上で稼働する Apple Safari の WebKit には、インラインテキストボックスの処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000066:アタッシェケースにおける実行ファイル読み込みに関する脆弱性

2010-12-17T11:03:53+09:00

アタッシェケースには、実行ファイル読み込みに関する脆弱性が存在します。アタッシェケースは、ファイルの暗号化・復号を行うソフトウェアです。アタッシェケースの設定を「フォルダの場合、復号後に開く」にしてある場合、アタッシェケースは暗号化されたファイルを復号する際に、特定の実行ファイルを読み込みます。アタッシェケースには、実行ファイルを読み込む際のファイル検索パスに問題があり、意図しない実行ファイルを読み込んでしまう脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 片桐弘敬氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4544:lotus_notes_traveler: Cross-site scripting (XSS) vulnerability in the ser...

2010-12-16T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the servlet in IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5034:lotus_notes_traveler: IBM Lotus Notes Traveler before 8.5.0.2 allows remo...

2010-12-16T00:00:00+09:00

IBM Lotus Notes Traveler before 8.5.0.2 allows remote authenticated users to cause a denial of service (memory consumption and daemon crash) by syncing a large volume of data, related to the launch of a new process to handle the data while the previous process is still operating on the data.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4547:lotus_notes_traveler: IBM Lotus Notes Traveler before 8.5.1.3, when a mul...

2010-12-16T00:00:00+09:00

IBM Lotus Notes Traveler before 8.5.1.3, when a multidomain environment is used, does not properly apply policy documents to mobile users from a different Domino domain than the Traveler server, which allows remote authenticated users to bypass intended access restrictions by using credentials from a different domain.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3945:office, office_converter_pack: Buffer overflow in the CGM image converter in the g...

2010-12-16T00:00:00+09:00

Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5035:lotus_notes_traveler: The Nokia client in IBM Lotus Notes Traveler before...

2010-12-16T00:00:00+09:00

The Nokia client in IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle multiple outgoing e-mail messages between sync operations, which might allow remote attackers to read communications intended for other recipients by examining appended messages.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5033:lotus_notes_traveler: IBM Lotus Notes Traveler before 8.5.0.2 does not pr...

2010-12-16T00:00:00+09:00

IBM Lotus Notes Traveler before 8.5.0.2 does not properly handle a "* *" argument sequence for a certain tell command, which allows remote authenticated users to obtain access to other users' data via a sync operation, related to storage of the data of multiple users within the same thread.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5032:lotus_notes_traveler: The encrypted e-mail feature in IBM Lotus Notes Tra...

2010-12-16T00:00:00+09:00

The encrypted e-mail feature in IBM Lotus Notes Traveler before 8.5.0.2 sends unencrypted messages when the feature is used without uploading a Notes ID file, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3960:windows_server_2008: Hyper-V in Microsoft Windows Server 2008 Gold, SP2,...

2010-12-16T00:00:00+09:00

Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service (host OS hang) by sending a crafted encapsulated packet over the VMBus, aka "Hyper-V VMBus Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3946:office, office_converter_pack: Integer overflow in the PICT image converter in the...

2010-12-16T00:00:00+09:00

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3967:windows_movie_maker: Untrusted search path vulnerability in Microsoft Wi...

2010-12-16T00:00:00+09:00

Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Movie Maker (MSWMM) file, aka "Insecure Library Loading Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4546:lotus_notes_traveler: IBM Lotus Notes Traveler before 8.5.1.2 does not re...

2010-12-16T00:00:00+09:00

IBM Lotus Notes Traveler before 8.5.1.2 does not reject an attachment download request for an e-mail message with a Prevent Copy attribute, which allows remote authenticated users to bypass intended access restrictions via this request.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4545:lotus_notes_traveler: IBM Lotus Notes Traveler before 8.5.1.2 allows remo...

2010-12-16T00:00:00+09:00

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (resource consumption and sync outage) by syncing a large volume of data.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4550:lotus_notes_traveler: IBM Lotus Notes Traveler before 8.5.1.3 allows remo...

2010-12-16T00:00:00+09:00

IBM Lotus Notes Traveler before 8.5.1.3 allows remote attackers to cause a denial of service (sync failure) via a malformed document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3959:windows_2003_server, windows_7, windows_server_2003, windows_server_2008, windows...: The OpenType Font (OTF) driver in Microsoft Windows...

2010-12-16T00:00:00+09:00

The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted CMAP table in an OpenType font, aka "OpenType CMAP Table Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3961:windows_7, windows_server_2008, windows_vista: The Consent User Interface (UI) in Microsoft Window...

2010-12-16T00:00:00+09:00

The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users to gain privileges via a crafted application, aka "Consent UI Impersonation Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3947:office, office_converter_pack, works: Heap-based buffer overflow in the TIFF image conver...

2010-12-16T00:00:00+09:00

Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Heap Overflow Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3966:windows_7, windows_server_2008: Untrusted search path vulnerability in Microsoft Wi...

2010-12-16T00:00:00+09:00

Untrusted search path vulnerability in Microsoft Windows Server 2008 R2 and Windows 7, when BranchCache is supported, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an EML file, an RSS file, or a WPOST file, aka "BranchCache Insecure Library Loading Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3949:office, office_converter_pack: Buffer overflow in the TIFF image converter in the ...

2010-12-16T00:00:00+09:00

Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka "TIFF Image Converter Buffer Overflow Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3950:office, office_converter_pack, works: The TIFF image converter in the graphics filters in...

2010-12-16T00:00:00+09:00

The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image in an Office document, aka "TIFF Image Converter Memory Corruption Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3963:windows_2003_server, windows_server_2003, windows_xp: Buffer overflow in the Routing and Remote Access ND...

2010-12-16T00:00:00+09:00

Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, related to the Routing and Remote Access service (RRAS) and improper copying from user mode to the kernel, aka "Kernel NDProxy Buffer Overflow Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3964:sharepoint_server: The Document Conversions Launcher Service in Micros...

2010-12-16T00:00:00+09:00

The Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, does not properly validate SOAP requests, which allows remote attackers to execute arbitrary code via a crafted request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3943:windows_2003_server, windows_7, windows_server_2003, windows_server_2008, windows...: win32k.sys in the kernel-mode drivers in Microsoft ...

2010-12-16T00:00:00+09:00

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly link driver objects, which allows local users to gain privileges via a crafted application that triggers linked-list corruption, aka "Win32k Cursor Linking Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3942:windows_2003_server, windows_7, windows_server_2003, windows_server_2008, windows...: win32k.sys in the kernel-mode drivers in Microsoft ...

2010-12-16T00:00:00+09:00

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for copies from user mode, which allows local users to gain privileges via a crafted application, aka "Win32k WriteAV Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3944:windows_7, windows_server_2008: win32k.sys in the kernel-mode drivers in Microsoft ...

2010-12-16T00:00:00+09:00

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3952:office, office_converter_pack: The FlashPix image converter in the graphics filter...

2010-12-16T00:00:00+09:00

The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Heap Corruption Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3957:windows_2003_server, windows_7, windows_server_2003, windows_server_2008, windows...: Double free vulnerability in the OpenType Font (OTF...

2010-12-16T00:00:00+09:00

Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Double Free Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4553:lotus_notes_traveler: An unspecified Domino API in IBM Lotus Notes Travel...

2010-12-16T00:00:00+09:00

An unspecified Domino API in IBM Lotus Notes Traveler before 8.5.1.1 does not properly handle MIME types, which allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5036:lotus_notes_traveler: traveler.exe in IBM Lotus Notes Traveler before 8.0...

2010-12-16T00:00:00+09:00

traveler.exe in IBM Lotus Notes Traveler before 8.0.1.3 CF1 allows remote authenticated users to cause a denial of service (daemon crash) via a malformed invitation document in a sync operation.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3965:windows_media_encoder: Untrusted search path vulnerability in Windows Medi...

2010-12-16T00:00:00+09:00

Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Windows Media Profile (PRX) file, aka "Insecure Library Loading Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2570:publisher: Heap-based buffer overflow in pubconv.dll (aka the ...

2010-12-16T00:00:00+09:00

Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Heap Overrun in pubconv.dll Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3951:office, office_converter_pack: Buffer overflow in the FlashPix image converter in ...

2010-12-16T00:00:00+09:00

Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Buffer Overflow Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3956:windows_2003_server, windows_7, windows_server_2003, windows_server_2008, windows...: The OpenType Font (OTF) driver in Microsoft Windows...

2010-12-16T00:00:00+09:00

The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly perform array indexing, which allows local users to gain privileges via a crafted OpenType font, aka "OpenType Font Index Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4549:lotus_notes_traveler: IBM Lotus Notes Traveler before 8.5.1.3 on the Noki...

2010-12-16T00:00:00+09:00

IBM Lotus Notes Traveler before 8.5.1.3 on the Nokia s60 device successfully performs a Replace Data operation for a prohibited application, which allows remote authenticated users to bypass intended access restrictions via this operation.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4548:lotus_notes_traveler: IBM Lotus Notes Traveler before 8.5.1.2 allows remo...

2010-12-16T00:00:00+09:00

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (daemon crash) by accepting a meeting invitation with an iNotes client and then accepting this meeting invitation with an iPhone client.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4551:lotus_notes_traveler: IBM Lotus Notes Traveler before 8.5.1.2 allows remo...

2010-12-16T00:00:00+09:00

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) by omitting the Internet ID field in the person document, and then using an Apple device to (1) accept or (2) decline an invitation.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3954:publisher: Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 al...

2010-12-16T00:00:00+09:00

Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3955:publisher: pubconv.dll (aka the Publisher Converter DLL) in Mi...

2010-12-16T00:00:00+09:00

pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4552:lotus_notes_traveler: Memory leak in IBM Lotus Notes Traveler before 8.5....

2010-12-16T00:00:00+09:00

Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service (memory consumption and daemon outage) by sending many embedded objects in e-mail messages for iPhone clients.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002508:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-16T14:18:52+09:00

Apple Safari の WebKit は、Cascading Style Sheets (CSS) 3D transforms の処理中、指定されていない変数のキャストを適切に実行しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002507:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-16T14:18:36+09:00

Apple Safari の WebKit は、スクロールバーに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002506:Apple Safari および Google Chrome の WebKit における任意のコードを実行される脆弱性

2010-12-16T14:18:21+09:00

Apple Safari および Google Chrome の WebKit には、要素フォーカスに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002505:Apple Safari および Google Chrome の WebKit における任意のコードを実行される脆弱性

2010-12-16T14:17:57+09:00

Apple Safari および Google Chrome の WebKit には、プラグインによる MIME タイプの不適切な処理が行われる不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002504:Apple Safari の WebKit における DNS 先読み設定を回避される脆弱性

2010-12-16T14:17:40+09:00

Apple Mac OS X および Windows 上で稼働している Apple Safari の WebKit には、HTML LINK 要素に関する処理に不備があるため、DNS 先読み設定を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002503:Apple Safari の WebKit における整数オーバーフローの脆弱性

2010-12-16T14:17:24+09:00

Apple Mac OS X および Windows 上で稼働している Apple Safari の WebKit には、Text オブジェクトに関する処理に不備があるため、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002502:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-16T14:16:55+09:00

Apple Mac OS X および Windows 上で稼働している Apple Safari の WebKit には、要素の属性に関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3941:windows_2003_server, windows_7, windows_server_2003, windows_server_2008, windows...: Double free vulnerability in win32k.sys in the kern...

2010-12-16T00:00:00+09:00

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k Double Free Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3940:windows_2003_server, windows_7, windows_server_2003, windows_server_2008, windows...: Double free vulnerability in win32k.sys in the kern...

2010-12-16T00:00:00+09:00

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a crafted application, aka "Win32k PFE Pointer Double Free Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3338:windows_7, windows_server_2008, windows_vista: The Windows Task Scheduler in Microsoft Windows Vis...

2010-12-16T00:00:00+09:00

The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly determine the security context of scheduled tasks, which allows local users to gain privileges via a crafted application, aka "Task Scheduler Vulnerability." NOTE: this might overlap CVE-2010-3888.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3340:ie: Microsoft Internet Explorer 6 and 7 does not proper...

2010-12-16T00:00:00+09:00

Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3937:exchange_server: Microsoft Exchange Server 2007 SP2 on the x64 platf...

2010-12-16T00:00:00+09:00

Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3939:windows_2003_server, windows_7, windows_server_2003, windows_server_2008, windows...: Buffer overflow in win32k.sys in the kernel-mode dr...

2010-12-16T00:00:00+09:00

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via vectors related to improper memory allocation for copies from user mode, aka "Win32k Buffer Overflow Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3343:ie: Microsoft Internet Explorer 6 does not properly han...

2010-12-16T00:00:00+09:00

Microsoft Internet Explorer 6 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2569:publisher: pubconv.dll (aka the Publisher Converter DLL) in Mi...

2010-12-16T00:00:00+09:00

pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file, aka "Size Value Heap Corruption in pubconv.dll Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3345:ie: Microsoft Internet Explorer 8 does not properly han...

2010-12-16T00:00:00+09:00

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3348:ie: Microsoft Internet Explorer 6, 7, and 8 does not pr...

2010-12-16T00:00:00+09:00

Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified script code, aka "Cross-Domain Information Disclosure Vulnerability," a different vulnerability than CVE-2010-3342.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3346:ie: Microsoft Internet Explorer 6, 7, and 8 does not pr...

2010-12-16T00:00:00+09:00

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2742:windows_2003_server, windows_server_2003, windows_server_2008: The Netlogon RPC Service in Microsoft Windows Serve...

2010-12-16T00:00:00+09:00

The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a crafted RPC packet, aka "Netlogon RPC Null dereference DOS Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3342:ie: Microsoft Internet Explorer 6, 7, and 8 does not pr...

2010-12-16T00:00:00+09:00

Microsoft Internet Explorer 6, 7, and 8 does not prevent rendering of cached content as HTML, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified script code, aka "Cross-Domain Information Disclosure Vulnerability," a different vulnerability than CVE-2010-3348.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2571:publisher: Array index error in pubconv.dll (aka the Publisher...

2010-12-16T00:00:00+09:00

Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002501:Apple Safari の WebKit におけるロケーションバーの URL を偽装される脆弱性

2010-12-15T14:42:33+09:00

Apple Mac OS X および Windows 上で稼働している Apple Safari の WebKit は、History オブジェクトを適切に処理しないため、ロケーションバーの URL を偽装される、または履歴へ URL を追加される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002500:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-15T14:39:55+09:00

Apple Mac OS X および Windows 上で稼働している Apple Safari の WebKit は、インラインスタイルの処理中に、指定されていない変数のキャストを適切に実行しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002499:Apple Safari の WebKit における任意のコードを実行される脆弱性

2010-12-15T14:37:33+09:00

Apple Mac OS X および Windows 上で稼働している Apple Safari の WebKit は、編集コマンドの処理中に、指定されていない変数のキャストを適切に実行しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002498:Apple Safari および Google Chrome の WebKit における同一生成元ポリシーを回避される脆弱性

2010-12-15T14:35:14+09:00

Apple Safari および Google Chrome の WebKit は、CANVAS 要素から派生したイメージへの読み込み権限を適切に制限しないため、同一生成元ポリシーを回避される、あるいは重要なイメージデータを取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002497:Apple Safari の WebKit 内にある JavaScript 実装における整数アンダーフローの脆弱性

2010-12-15T14:32:26+09:00

Apple Mac OS X および Windows 上で稼働している Apple Safari の WebKit には、 WebSocket に関する処理に不備があるため、整数アンダーフローの脆弱性が存在します。なお、本問題は CVE-2010-3254 と重複する可能性があります。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002496:Apple Safari の WebKit 内にある JavaScript 実装におけるユーザを追跡可能な脆弱性

2010-12-15T14:29:29+09:00

Apple Mac OS X および Windows 上で稼働している Apple Safari の WebKit 内にある JavaScript 実装には、脆弱なアルゴリズムを使用して乱数の値を生成するため、値を予測されることにより、ユーザを追跡可能な脆弱性が存在します。本問題は、CVE-2008-5913 および CVE-2010-3171 と関連する問題です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002495:Apple Safari の WebKit における整数オーバーフローの脆弱性

2010-12-15T14:25:26+09:00

Apple Mac OS X および Windows 上で稼働している Apple Safari の WebKit には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000065:Internet Explorer におけるクロスサイトスクリプティングの脆弱性

2010-12-15T14:08:47+09:00

Internet Explorer には、クロスサイトスクリプティングの脆弱性が存在します。 Internet Explorer には、ISO-2022-JP で記述された特定の文字列の処理に問題があり、クロスサイトスクリプティングの脆弱性が存在します。詳しくは開発者が提供する情報をご確認ください。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC がベンダとの調整を行いました。報告者: 株式会社エイジア佐藤雅俊氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000064:Internet Explorer におけるクロスサイトスクリプティングの脆弱性

2010-12-15T14:07:28+09:00

Internet Explorer には、文字コーディング処理に起因するクロスサイトスクリプティングの脆弱性が存在します。 Internet Explorer には、EUC-JP や Shift_JIS で記述された特定の文字列の処理に問題があり、クロスサイトスクリプティングの脆弱性が存在します。詳しくは開発者が提供する情報をご確認ください。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC がベンダとの調整を行いました。報告者: ネットエージェント株式会社

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000063:Internet Explorer におけるクロスサイトスクリプティングの脆弱性

2010-12-15T14:05:14+09:00

Internet Explorer には、文字コーディング処理に起因するクロスサイトスクリプティングの脆弱性が存在します。 Internet Explorer には、UTF-7 で記述された特定の文字列の処理に問題があり、クロスサイトスクリプティングの脆弱性が存在します。詳しくは開発者が提供する情報をご確認ください。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者：三井物産セキュアディレクション株式会社寺田健氏, 国分裕氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000062:Internet Explorer におけるクロスサイトスクリプティングの脆弱性

2010-12-15T14:03:49+09:00

Internet Explorer には、ファイル判別処理に起因するクロスサイトスクリプティングの脆弱性が存在します。 Internet Explorer には、Content-Type の処理に問題があり、クロスサイトスクリプティングの脆弱性が存在します。詳しくは開発者が提供する情報をご確認ください。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 楽天株式会社福本佳成氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4387:realplayer, realplayer_sp: The RealAudio codec in RealNetworks RealPlayer 11.0...

2010-12-14T00:00:00+09:00

The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4396:realplayer, realplayer_sp: Cross-zone scripting vulnerability in the HandleAct...

2010-12-14T00:00:00+09:00

Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying a local file in a NavigateToURL action, as demonstrated by a local skin file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4388:realplayer, realplayer_sp: The (1) Upsell.htm, (2) Main.html, and (3) Custsupp...

2010-12-14T00:00:00+09:00

The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4389:realplayer, realplayer_sp: Heap-based buffer overflow in the cook codec in Rea...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in the cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via unspecified data in the initialization buffer.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4394:realplayer, realplayer_sp: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.5 allows remote web servers to execute arbitrary code via a long Server header in a response to an HTTP request that occurs during parsing of a RealPix file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4395:realplayer, realplayer_sp: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted conditional component in AAC frame data.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4390:realplayer, realplayer_sp: Multiple heap-based buffer overflows in RealNetwork...

2010-12-14T00:00:00+09:00

Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and Linux RealPlayer 11.0.2.1744 allow remote attackers to have an unspecified impact via a crafted header in an IVR file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4392:realplayer, realplayer_sp: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via crafted ImageMap data in a RealMedia file, related to certain improper integer calculations.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4391:realplayer, realplayer_sp: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allows remote attackers to execute arbitrary code via a crafted value in an unspecified header field in an RMX file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4397:realplayer, realplayer_sp: Integer overflow in the pnen3260.dll module in Real...

2010-12-14T00:00:00+09:00

Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002494:SystemTap の staprun runtime ツールにおけるサービス運用妨害 (DoS) の脆弱性

2010-12-14T14:35:13+09:00

SystemTap の staprun runtime ツールは、すでに SystemTap によってロードされているモジュールのアンロード処理を適切に検証しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002493:SystemTap の staprun runtime ツールにおける権限昇格の脆弱性

2010-12-14T14:32:41+09:00

SystemTap の staprun runtime ツールは、modprobe を実行する前に、MODPROBE_OPTIONS の環境変数を適切にクリアしないため、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002492:FreeType の truetype/ttgxvar.c 内にある ft_var_readpackedpoints 関数におけるバッファオーバーフローの脆弱性

2010-12-14T14:27:25+09:00

FreeType の truetype/ttgxvar.c 内にある ft_var_readpackedpoints 関数には、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002491:Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性

2010-12-14T14:24:22+09:00

Openswan のクライアント内にある programs/pluto/xauth.c には、任意のコマンドを実行される脆弱性が存在します。本脆弱性は、CVE-2010-3308 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002490:Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性

2010-12-14T14:22:23+09:00

Openswan のクライアント内にある programs/pluto/xauth.c には、任意のコマンドを実行される脆弱性が存在します。本脆弱性は、CVE-2010-3302 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002489:Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性

2010-12-14T14:20:24+09:00

Openswan のクライアント内にある programs/pluto/xauth.c には、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002488:Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性

2010-12-14T14:15:36+09:00

JVNDB-2010-002487:OpenSSL クライアントの ssl3_get_key_exchange 関数における任意のコードを実行される脆弱性

2010-12-14T14:12:25+09:00

OpenSSL の OpenSSL クライアント (ssl/s3_clnt.c) 内にある ssl3_get_key_exchange 関数は、 ECDH を使用している際、秘密鍵に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002486:OpenSSL の ssl/t1_lib.c における任意のコードを実行される脆弱性

2010-12-14T13:52:38+09:00

OpenSSL の ssl/t1_lib.c は、TLS サーバ上でマルチスレッドおよび内部キャッシュが有効の際、 TLS サーバ名の拡張子や楕円曲線暗号に関する処理に不備があるため、競合状態となり、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4379:realplayer, realplayer_sp: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to have an unspecified impact via a crafted SIPR file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4385:realplayer, realplayer_sp: Integer overflow in RealNetworks RealPlayer 11.0 th...

2010-12-14T00:00:00+09:00

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Linux RealPlayer 11.0.2.1744 allows remote attackers to have an unspecified impact via crafted frame dimensions in an SIPR stream.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0125:realplayer, realplayer_sp: RealNetworks RealPlayer 11.0 through 11.1, RealPlay...

2010-12-14T00:00:00+09:00

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4386:realplayer, realplayer_sp: RealNetworks RealPlayer 11.0 through 11.1, RealPlay...

2010-12-14T00:00:00+09:00

RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and Linux RealPlayer 11.0.2.1744 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted RealMedia video file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4384:realplayer: Array index error in RealNetworks RealPlayer 11.0 t...

2010-12-14T00:00:00+09:00

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a malformed Media Properties Header (aka MDPR) in a RealMedia file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4382:realplayer, realplayer_sp: Multiple heap-based buffer overflows in RealNetwork...

2010-12-14T00:00:00+09:00

Multiple heap-based buffer overflows in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Linux RealPlayer 11.0.2.1744 allow remote attackers to have an unspecified impact via a crafted RealMedia file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4383:realplayer, realplayer_sp: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to have an unspecified impact via a crafted RA5 file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4381:realplayer, realplayer_sp: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 allows remote attackers to have an unspecified impact via a crafted AAC file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4378:realplayer, realplayer_sp: The drv2.dll (aka RV20 decompression) module in Rea...

2010-12-14T00:00:00+09:00

The drv2.dll (aka RV20 decompression) module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, RealPlayer Enterprise 2.1.2 and 2.1.3, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted value of an unspecified length field in an RV20 video stream.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4344:exim: Heap-based buffer overflow in the string_vformat fu...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4375:realplayer: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via malformed multi-rate data in an audio stream.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4345:exim: Exim 4.72 and earlier allows local users to gain pr...

2010-12-14T00:00:00+09:00

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4376:realplayer, realplayer_sp: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2997:realplayer, realplayer_sp: Use-after-free vulnerability in RealNetworks RealPl...

2010-12-14T00:00:00+09:00

Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted StreamTitle tag in an ICY SHOUTcast stream, related to the SMIL file format.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2999:realplayer, realplayer_sp: Integer overflow in RealNetworks RealPlayer 11.0 th...

2010-12-14T00:00:00+09:00

Integer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed MLLT atom in an AAC file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0121:realplayer, realplayer_sp: The cook codec in RealNetworks RealPlayer 11.0 thro...

2010-12-14T00:00:00+09:00

The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 does not properly perform initialization, which has unspecified impact and attack vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4377:realplayer, realplayer_sp: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code by specifying many subbands in cook audio codec information in a Real Audio file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2579:realplayer, realplayer_sp: The cook codec in RealNetworks RealPlayer 11.0 thro...

2010-12-14T00:00:00+09:00

The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 does not properly initialize the number of channels, which allows attackers to obtain unspecified "memory access" via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4380:realplayer, realplayer_sp: Heap-based buffer overflow in RealNetworks RealPlay...

2010-12-14T00:00:00+09:00

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted SOUND file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002485:MIT Kerberos 5 の Key Distribution Center 内にある kdc_authdata.c における任意のコードを実行される脆弱性

2010-12-13T16:07:45+09:00

MIT Kerberos 5 の Key Distribution Center (KDC) 内にある kdc_authdata.c の merge_authdata 関数には、authorization-data リストへのインデックスを適切に管理しないため、サービス運用妨害 (DoS) 状態となる、重要な情報を取得される、管理者になりすまされる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002484:Poppler の PDF パーサ内にある poppler/Function.cc におけるサービス運用妨害 (DoS) の脆弱性

2010-12-13T16:04:56+09:00

Poppler の PDF パーサ内にある poppler/Function.cc の PostScriptFunction::PostScriptFunction 関数には、PDF ファイルに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002483:Linux kernel の KVM 実装におけるサービス運用妨害 (DoS) の脆弱性

2010-12-13T15:59:47+09:00

Linux kernel の KVM 実装には、FS および GS のセグメントレジスタサービスを適切にリロードしないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002482:Linux kernel の sctp_auth_asoc_get_hmac 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-12-13T15:57:17+09:00

Linux kernel の net/sctp/auth.c 内にある sctp_auth_asoc_get_hmac 関数には、SCTP peer の hmac_ids 配列を適切に検証しないため、サービス運用妨害 (DoS) の脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002481:Linux kernel の snd_ctl_new 関数における整数オーバーフロー脆弱性

2010-12-13T15:48:48+09:00

Linux kernel の sound/core/control.c 内にある snd_ctl_new 関数には、整数オーバーフロー脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002480:Linux kernel の pkt_find_dev_from_minor 関数における整数符号エラーの脆弱性

2010-12-13T15:41:47+09:00

Linux kernel の drivers/block/pktcdvd.c 内にある pkt_find_dev_from_minor 関数には、整数符号エラーの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002479:Linux kernel の sctp_packet_config 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-12-13T15:35:35+09:00

Linux kernel の net/sctp/output.c 内にある sctp_packet_config 関数には、パケットデータ構造体の初期化を実行しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002478:x86_64 プラットフォーム上で稼動する Linux kernel の IA32 システムコールエミュレーション機能における権限昇格の脆弱性

2010-12-13T15:29:49+09:00

x86_64 プラットフォーム上で稼動する Linux kernel の arch/x86/ia32/ia32entry.S 内にある IA32 システムコールエミュレーション機能は、32 ビット互換の ptrace システムコールを処理後に eax レジスタをゼロ拡張させないため、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3880:kernel: net/ipv4/inet_diag.c in the Linux kernel before 2.6...

2010-12-10T00:00:00+09:00

net/ipv4/inet_diag.c in the Linux kernel before 2.6.37-rc2 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message that contains multiple attribute elements, as demonstrated by INET_DIAG_BC_JMP instructions.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3773:firefox, seamonkey: Mozilla Firefox before 3.5.16 and 3.6.x before 3.6....

2010-12-10T00:00:00+09:00

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-0179.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3919:grani: Fenrir Grani 4.5 and earlier does not prevent inter...

2010-12-10T00:00:00+09:00

Fenrir Grani 4.5 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or modify the clipboard contents via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3774:firefox, seamonkey: The NS_SecurityCompareURIs function in netwerk/base...

2010-12-10T00:00:00+09:00

The NS_SecurityCompareURIs function in netwerk/base/public/nsNetUtil.h in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle (1) about:neterror and (2) about:certerror pages, which allows remote attackers to spoof the location bar via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3775:firefox, seamonkey: Mozilla Firefox before 3.5.16 and 3.6.x before 3.6....

2010-12-10T00:00:00+09:00

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via vectors involving a refresh value in the http-equiv attribute of a META element.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4157:kernel: Integer overflow in the ioc_general function in dri...

2010-12-10T00:00:00+09:00

Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3769:firefox, thunderbird, seamonkey: The line-breaking implementation in Mozilla Firefox...

2010-12-10T00:00:00+09:00

The line-breaking implementation in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 on Windows does not properly handle long strings, which allows remote attackers to execute arbitrary code via a crafted document.write call that triggers a buffer over-read.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3918:sleipnir: Fenrir Sleipnir 2.9.6 and earlier does not prevent ...

2010-12-10T00:00:00+09:00

Fenrir Sleipnir 2.9.6 and earlier does not prevent interaction between web script and the clipboard, which allows remote attackers to read or modify the clipboard contents via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3770:firefox, seamonkey: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-10T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allow remote attackers to inject arbitrary web script or HTML via (1) x-mac-arabic, (2) x-mac-farsi, or (3) x-mac-hebrew characters.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3771:firefox, seamonkey: Mozilla Firefox before 3.5.16 and 3.6.x before 3.6....

2010-12-10T00:00:00+09:00

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle injection of an ISINDEX element into an about:blank page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to redirection to a chrome: URI.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3772:firefox, seamonkey: Mozilla Firefox before 3.5.16 and 3.6.x before 3.6....

2010-12-10T00:00:00+09:00

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly calculate index values for certain child content in a XUL tree, which allows remote attackers to execute arbitrary code via vectors involving a DIV element within a treechildren element.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3768:firefox, seamonkey, thunderbird: Mozilla Firefox before 3.5.16 and 3.6.x before 3.6....

2010-12-10T00:00:00+09:00

Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 do not properly validate downloadable fonts before use within an operating system's font implementation, which allows remote attackers to execute arbitrary code via vectors related to @font-face Cascading Style Sheets (CSS) rules.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3777:firefox, thunderbird: Unspecified vulnerability in Mozilla Firefox 3.6.x ...

2010-12-10T00:00:00+09:00

Unspecified vulnerability in Mozilla Firefox 3.6.x before 3.6.13 and Thunderbird 3.1.x before 3.1.7 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3776:firefox, seamonkey, thunderbird: Multiple unspecified vulnerabilities in the browser...

2010-12-10T00:00:00+09:00

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird before 3.0.11 and 3.1.x before 3.1.7, and SeaMonkey before 2.0.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3778:firefox, thunderbird, seamonkey: Unspecified vulnerability in Mozilla Firefox 3.5.x ...

2010-12-10T00:00:00+09:00

Unspecified vulnerability in Mozilla Firefox 3.5.x before 3.5.16, Thunderbird before 3.0.11, and SeaMonkey before 2.0.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3767:firefox, seamonkey: Integer overflow in the NewIdArray function in Mozi...

2010-12-10T00:00:00+09:00

Integer overflow in the NewIdArray function in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via a JavaScript array with many elements.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3861:kernel: The ethtool_get_rxnfc function in net/core/ethtool....

2010-12-10T00:00:00+09:00

The ethtool_get_rxnfc function in net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize a certain block of heap memory, which allows local users to obtain potentially sensitive information via an ETHTOOL_GRXCLSRLALL ethtool command with a large info.rule_cnt value, a different vulnerability than CVE-2010-2478.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002477:Linux kernel の niu_get_ethtool_tcam_all 関数におけるバッファオーバーフローの脆弱性

2010-12-10T15:24:42+09:00

Linux kernel の drivers/net/niu.c 内にある niu_get_ethtool_tcam_all 関数には、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002476:Linux kernel の kernel/trace/ftrace.c におけるサービス運用妨害 (DoS) の脆弱性

2010-12-10T15:19:42+09:00

Linux kernel の kernel/trace/ftrace.c には、debugfs が有効の際、ミューテックスおよび llseek 操作を適切に処理しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002475:Linux kernel の Direct Rendering Manager サブシステムの Intel i915 ドライバにおける権限昇格の脆弱性

2010-12-10T15:16:23+09:00

Linux kernel の Direct Rendering Manager (DRM) サブシステムの Intel i915 ドライバ内にある Graphics Execution Manager (GEM) の drivers/gpu/drm/i915/i915_gem.c には、 pwrite および pread のオペレーションに関する処理に不備があり、メモリブロックへのポインタを適切に検証しないため、脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002474:Linux kernel の net/wireless/wext-compat.c 内にある cfg80211_wext_giwessid 関数における重要な情報を取得される脆弱性

2010-12-10T15:13:35+09:00

Linux kernel の net/wireless/wext-compat.c 内にある cfg80211_wext_giwessid 関数には、特定の構造体のメンバを適切に初期化しないため、net/wireless/wext-core.c 内にある ioctl_standard_iw_point 関数の off-by-one エラーを利用され、 kernel ヒープメモリから重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002473:Linux kernel の Direct Rendering Manager サブシステムの drm_ioctl 関数における重要な情報を取得される脆弱性

2010-12-10T15:11:14+09:00

Linux kernel の Direct Rendering Manager (DRM) サブシステムの drivers/gpu/drm/drm_drv.c 内にある drm_ioctl 関数には、kernel メモリから重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002472:xpdf および poppler などの製品で利用される PDF パーサの FoFiType1::parse 関数における任意のコードを実行される脆弱性

2010-12-10T15:08:42+09:00

xpdf および poppler などの製品で利用される PDF パーサの fofi/FoFiType1.cc 内にある FoFiType1::parse 関数には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002471:xpdf および poppler などの製品で利用される PDF パーサの Gfx::getPos 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-12-10T15:05:46+09:00

xpdf および poppler などの製品で利用される PDF パーサの Gfx::getPos 関数には、初期化されていないポインタ間接参照により、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1508:quicktime: Heap-based buffer overflow in Apple QuickTime befor...

2010-12-09T00:00:00+09:00

Heap-based buffer overflow in Apple QuickTime before 7.6.9 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Track Header (aka tkhd) atoms.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3922:movabletype: SQL injection vulnerability in Movable Type 4.x bef...

2010-12-09T00:00:00+09:00

SQL injection vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0530:quicktime: Apple QuickTime before 7.6.9 on Windows sets weak p...

2010-12-09T00:00:00+09:00

Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5021:cobbler: Cobbler before 1.6.1 does not properly determine wh...

2010-12-09T00:00:00+09:00

Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2235:cobbler: template_api.py in Cobbler before 2.0.7, as used in...

2010-12-09T00:00:00+09:00

template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a crafted kickstart template file, a different vulnerability than CVE-2008-6954.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4514:dotnetnuke: Cross-site scripting (XSS) vulnerability in Install...

2010-12-09T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the __VIEWSTATE parameter. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4517:com_jeauto: SQL injection vulnerability in the JExtensions JE A...

2010-12-09T00:00:00+09:00

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the char parameter in an item action to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3801:quicktime: Apple QuickTime before 7.6.9 allows remote attacker...

2010-12-09T00:00:00+09:00

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted FlashPix file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4512:cobbler: Cobbler before 2.0.4 uses an incorrect umask value,...

2010-12-09T00:00:00+09:00

Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4518:wp-safe-search: Cross-site scripting (XSS) vulnerability in wp-safe...

2010-12-09T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin 0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the v1 parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3766:firefox, seamonkey: Use-after-free vulnerability in Mozilla Firefox bef...

2010-12-10T00:00:00+09:00

Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execute arbitrary code via vectors involving a change to an nsDOMAttribute node.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4513:zimplit_cms: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-09T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4515:web_interface: Cross-site scripting (XSS) vulnerability in Citrix ...

2010-12-09T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in Citrix Web Interface 5.0, 5.1, and 5.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-6477 and CVE-2009-2454.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4516:jxtended_comments: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-09T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in the JXtended Comments component before 1.3.1 for Joomla allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4511:movabletype: Unspecified vulnerability in Movable Type 4.x befor...

2010-12-09T00:00:00+09:00

Unspecified vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 has unknown impact and attack vectors related to the "dynamic publishing error message."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4509:movabletype: Multiple unspecified vulnerabilities in Movable Typ...

2010-12-09T00:00:00+09:00

Multiple unspecified vulnerabilities in Movable Type 4.x before 4.35 and 5.x before 5.04 have unknown impact and attack vectors related to the (1) mt:AssetProperty and (2) mt:EntryFlag tags.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4009:quicktime: Integer overflow in Apple QuickTime before 7.6.9 al...

2010-12-09T00:00:00+09:00

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4508:firefox: The WebSockets implementation in Mozilla Firefox 4 ...

2010-12-09T00:00:00+09:00

The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3802:quicktime: Integer signedness error in Apple QuickTime before ...

2010-12-09T00:00:00+09:00

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted panorama atom in a QuickTime Virtual Reality (QTVR) movie file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3921:movabletype: Cross-site scripting (XSS) vulnerability in Movable...

2010-12-09T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in Movable Type 4.x before 4.35 and 5.x before 5.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3800:quicktime: Apple QuickTime before 7.6.9 allows remote attacker...

2010-12-09T00:00:00+09:00

Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-4259:fontforge: Stack-based buffer overflow in FontForge 20100501 a...

2010-12-07T00:00:00+09:00

Stack-based buffer overflow in FontForge 20100501 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long CHARSET_REGISTRY header in a BDF font file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002470:Adobe Reader および Acrobat の EScript.api プラグインにおける任意のコードを実行される脆弱性

2010-12-09T14:54:33+09:00

Adobe Reader および Acrobat の EScript.api プラグインには、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002469:Apple Mac OS X の Dovecot における電子メールを読まれる脆弱性

2010-12-09T14:50:18+09:00

Apple Mac OS X の Dovecot は、ユーザ名のためのメモリを適切に管理しないため、プライベートで使用している電子メールを読まれる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002468:EUR Form Client における任意のコードを実行される脆弱性

2010-12-09T14:47:31+09:00

EUR Form Client には、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002467:Interstage Application Server における情報漏えいの脆弱性

2010-12-09T14:43:08+09:00

Interstage Application Server には、J2EEアプリケーション運用の際、情報漏えいの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002466:Apple Mac OS X の Apple Type Services における整数符号エラーの脆弱性

2010-12-09T14:37:02+09:00

Apple Mac OS X の Apple Type Services には整数符号エラーの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002465:IBM WebSphere Application Server の Web Services Security コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性

2010-12-09T14:34:09+09:00

IBM WebSphere Application Server (WAS) の Web Services Security コンポーネントは、XML Web サービスの Java API を適切に実装しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002464:IBM WebSphere Application Server の Integrated Solution コンソールにおけるクロスサイトスクリプティングの脆弱性

2010-12-09T14:30:47+09:00

IBM WebSphere Application Server (WAS) の管理コンソールコンポーネント内にある Integrated Solution コンソールには、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4505:injader: Multiple SQL injection vulnerabilities in login.php...

2010-12-08T00:00:00+09:00

Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) un and (2) pw parameters.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-4180:openssl: OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, whe...

2010-12-06T00:00:00+09:00

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2793:spice-activex: Race condition in the SPICE (aka spice-activex) plu...

2010-12-08T00:00:00+09:00

Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3372:nordugrid-arc: Untrusted search path vulnerability in NorduGrid Ad...

2010-12-08T00:00:00+09:00

Untrusted search path vulnerability in NorduGrid Advanced Resource Connector (ARC) before 0.8.3 allows local users to gain privileges via vectors related to the LD_LIBRARY_PATH environment variable. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4108:hp-ux: HP HP-UX B.11.11, B.11.23, and B.11.31 does not pro...

2010-12-08T00:00:00+09:00

HP HP-UX B.11.11, B.11.23, and B.11.31 does not properly support threaded processes, which allows remote authenticated users to cause a denial of service via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4480:phpmyadmin: error.php in PhpMyAdmin 3.3.8.1 and earlier allows ...

2010-12-08T00:00:00+09:00

error.php in PhpMyAdmin 3.3.8.1 and earlier allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing "@" characters, as demonstrated using "[a@url@page]".

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3699:xen: The backend driver in Xen 3.x allows guest OS users...

2010-12-08T00:00:00+09:00

The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a zombie domain, causes a hang in zenwatch, or prevents unspecified xm commands from working properly, related to (1) netback, (2) blkback, or (3) blktap.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4109:palm_webos: Cross-site scripting (XSS) vulnerability in the Con...

2010-12-08T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4500:freeticket: Multiple SQL injection vulnerabilities in contact.p...

2010-12-08T00:00:00+09:00

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) subject, and (4) message parameters in a sendmess action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3860:icedtea: IcedTea before 1.9.2, as based on OpenJDK 6, declar...

2010-12-08T00:00:00+09:00

IcedTea before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1) user.name, (2) user.home, and (3) java.home system properties, and other sensitive information such as installation directories.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4503:aigaion: SQL injection vulnerability in indexlight.php in Ai...

2010-12-08T00:00:00+09:00

SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands via the ID parameter in an export action.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4502:internet_security_suite_plus_2010: Integer overflow in KmxSbx.sys 6.2.0.22 in CA Inter...

2010-12-08T00:00:00+09:00

Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of service (pool corruption) and execute arbitrary code via crafted arguments to the 0x88000080 IOCTL, which triggers a buffer overflow.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3920:lp-s7100_driver_4.1.0, lp-s7100_driver_4.1.7, lp-s9000_driver_4.1.0, lp-s9000_dri...: The Seiko Epson printer driver installers for LP-S9...

2010-12-08T00:00:00+09:00

The Seiko Epson printer driver installers for LP-S9000 before 4.1.11 and LP-S7100 before 4.1.7, or as downloaded from the vendor between may 2010 and 20101125, modifies access permissions for the "C:\Program Files" folder, which might allow local users to bypass intended access restrictions and create or modify arbitrary files and directories.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4501:io-socket-ssl: IO::Socket::SSL Perl module 1.35, when verify_mode ...

2010-12-08T00:00:00+09:00

IO::Socket::SSL Perl module 1.35, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4012:iphone_os: Race condition in Apple iOS 4.0 through 4.1 for iPh...

2010-12-08T00:00:00+09:00

Race condition in Apple iOS 4.0 through 4.1 for iPhone 3G and later allows physically proximate attackers to bypass the passcode lock by making a call from the Emergency Call screen, then quickly pressing the Sleep/Wake button.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4504:esyndicat: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-08T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to (1) suggest-category.php and (2) suggest-listing.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002463:IBM WebSphere Application Server の管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性

2010-12-08T15:31:52+09:00

IBM WebSphere Application Server (WAS) の管理コンソールには、クロスサイトリクエストフォージェリの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002462:IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性

2010-12-08T15:31:36+09:00

IBM WebSphere Application Server (WAS) の管理コンソールには、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002461:IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性

2010-12-08T15:31:14+09:00

JVNDB-2010-002460:Linux kernel の xfs_ioc_fsgetxattr 関数における重要な情報を取得される脆弱性

2010-12-08T15:30:51+09:00

Linux kernel の fs/xfs/linux-2.6/xfs_ioctl.c 内にある xfs_ioc_fsgetxattr 関数は、特定の構造体のメンバを適切に初期化しないため、kernel のスタックメモリから重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002459:ProFTPD の pr_netio_telnet_get 関数におけるスタックベースのバッファオーバーフローの脆弱性

2010-12-08T15:30:34+09:00

ProFTPD の netio.c 内にある pr_netio_telnet_get 関数には、FTP または FTPS server 上での TELNET_IAC エスケープシーケンスの処理に関して不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002458:ProFTPD の mod_site_misc モジュールにおけるディレクトリトラバーサルの脆弱性

2010-12-08T15:29:54+09:00

ProFTPD の mod_site_misc モジュールには、ディレクトリトラバーサルの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000061:Movable Type における SQL インジェクションの脆弱性

2010-12-08T14:02:37+09:00

Movable Type には、SQL インジェクションの脆弱性が存在します。シックス・アパート株式会社が提供しているウェブログシステム Movable Type には、SQL インジェクションの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000060:Movable Type におけるクロスサイトスクリプティングの脆弱性

2010-12-08T14:02:10+09:00

Movable Type には、クロスサイトスクリプティングの脆弱性が存在します。シックス・アパート株式会社が提供しているウェブログシステム Movable Type には、クロスサイトスクリプティングの脆弱性が存在します。なお、本脆弱性は過去に JVN で公開した問題とは異なります。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000059:EPSON 製プリンタドライバのインストーラがアクセス権を変更する脆弱性

2010-12-08T14:01:46+09:00

EPSON 製のプリンタドライバのインストーラには、特定のフォルダへのアクセス権を変更してしまう脆弱性が存在します。 EPSON 製のプリンタドライバをインストールすると、プログラムファイル等を格納するフォルダ(C:\Program Files) のアクセス権を変更してしまいます。その結果、本来アクセス権のないユーザがそのフォルダ以下へアクセス可能になってしまいます。開発者によると、2010年5月発売当初から2010年11月25日までに出荷された製品に同梱されたプリンタドライバおよび上記期間に開発者サイトよりダウンロードしたプリンタドライバが本脆弱性の影響を受けます。また、Windows Vista 以降の OS では本脆弱性の影響を受けません。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4479:clamav: Unspecified vulnerability in pdf.c in libclamav in ...

2010-12-07T00:00:00+09:00

Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka "bb #2380," a different vulnerability than CVE-2010-4260.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4490:chrome: Google Chrome before 8.0.552.215 allows remote atta...

2010-12-07T00:00:00+09:00

Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via malformed video content that triggers an indexing error.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4259:20100501: Stack-based buffer overflow in FontForge 20100501 a...

2010-12-07T00:00:00+09:00

CVE-2010-4179:enterprise_mrg: The installation documentation for Red Hat Enterpri...

2010-12-07T00:00:00+09:00

The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-4180:openssl: OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, whe...

2010-12-06T00:00:00+09:00

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of an unintended cipher (downgrade) via vectors involving sniffing network traffic to discover a session identifier.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4176:dracut, udev: plymouth-pretrigger.sh in dracut and udev, when run...

2010-12-07T00:00:00+09:00

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets insecure permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4494:chrome: Double free vulnerability in Google Chrome before 8...

2010-12-07T00:00:00+09:00

Double free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4150:php: Double free vulnerability in the imap_do_open funct...

2010-12-07T00:00:00+09:00

Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4482:chrome: Unspecified vulnerability in Google Chrome before 8...

2010-12-07T00:00:00+09:00

Unspecified vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to bypass the pop-up blocker via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4489:chrome: Google Chrome before 8.0.552.215 does not properly ...

2010-12-07T00:00:00+09:00

Google Chrome before 8.0.552.215 does not properly handle WebM video, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. NOTE: this vulnerability exists because of a regression.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4491:chrome: Google Chrome before 8.0.552.215 does not properly ...

2010-12-07T00:00:00+09:00

Google Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows remote attackers to cause a denial of service (memory corruption) via a crafted extension.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4488:chrome: Google Chrome before 8.0.552.215 does not properly ...

2010-12-07T00:00:00+09:00

Google Chrome before 8.0.552.215 does not properly handle HTTP proxy authentication, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4483:chrome: Google Chrome before 8.0.552.215 does not properly ...

2010-12-07T00:00:00+09:00

Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4257:wordpress: SQL injection vulnerability in the do_trackbacks fu...

2010-12-07T00:00:00+09:00

SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackbacks field.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4260:clamav: Multiple unspecified vulnerabilities in pdf.c in li...

2010-12-07T00:00:00+09:00

Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka (1) "bb #2358" and (2) "bb #2396."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4484:chrome: Google Chrome before 8.0.552.215 does not properly ...

2010-12-07T00:00:00+09:00

Google Chrome before 8.0.552.215 does not properly handle HTML5 databases, which allows attackers to cause a denial of service (application crash) via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4487:chrome: Incomplete blacklist vulnerability in Google Chrome...

2010-12-07T00:00:00+09:00

Incomplete blacklist vulnerability in Google Chrome before 8.0.552.215 on Linux and Mac OS X allows remote attackers to have an unspecified impact via a "dangerous file."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4492:chrome: Use-after-free vulnerability in Google Chrome befor...

2010-12-07T00:00:00+09:00

Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animations.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4493:chrome: Use-after-free vulnerability in Google Chrome befor...

2010-12-07T00:00:00+09:00

Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service via vectors related to the handling of mouse dragging events.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4171:systemtap: The staprun runtime tool in SystemTap 1.3 does not ...

2010-12-07T00:00:00+09:00

The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4485:chrome: Google Chrome before 8.0.552.215 does not properly ...

2010-12-07T00:00:00+09:00

Google Chrome before 8.0.552.215 does not properly restrict the generation of file dialogs, which allows remote attackers to cause a denial of service (reduced usability and possible application crash) via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4486:chrome: Use-after-free vulnerability in Google Chrome befor...

2010-12-07T00:00:00+09:00

Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to history handling.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4170:systemtap: The staprun runtime tool in SystemTap 1.3 does not ...

2010-12-07T00:00:00+09:00

The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002457:Adobe Flash Media Server における任意のコードを実行される脆弱性

2010-12-07T16:45:59+09:00

Adobe Flash Media Server (FMS) には、セグメンテーション違反に関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002456:Adobe Flash Media Server のエッジプロセスにおけるサービス運用妨害 (DoS) の脆弱性

2010-12-07T16:45:40+09:00

Adobe Flash Media Server (FMS) のエッジプロセスには、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002455:Adobe Flash Media Server におけるメモリリークの脆弱性

2010-12-07T16:45:24+09:00

Adobe Flash Media Server (FMS) には、メモリリークの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002454:Microsoft Forefront Unified Access Gateway の Signurl.asp におけるクロスサイトスクリプティングの脆弱性

2010-12-07T16:45:09+09:00

Microsoft Forefront Unified Access Gateway (UAG) の Signurl.asp には、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002453:Microsoft Forefront Unified Access Gateway のモバイルポータルにおけるクロスサイトスクリプティングの脆弱性

2010-12-07T16:44:50+09:00

Microsoft Forefront Unified Access Gateway (UAG) のモバイルポータルには、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002452:Microsoft Forefront Unified Access Gateway の Web Monitor におけるクロスサイトスクリプティングの脆弱性

2010-12-07T16:44:33+09:00

Microsoft Forefront Unified Access Gateway (UAG) の Web Monitor には、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002451:Microsoft Forefront Unified Access Gateway の Web インターフェースにおける任意の Web サイトへリダイレクトされる脆弱性

2010-12-07T16:44:14+09:00

Microsoft Forefront Unified Access Gateway (UAG) の Web インターフェースには、任意の Web サイトへリダイレクトされる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2639:websphere_commerce: IBM WebSphere Commerce Enterprise 7.0 before 7.0.0....

2010-12-06T00:00:00+09:00

IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4261:clamav: Off-by-one error in the icon_cb function in pe_icon...

2010-12-07T00:00:00+09:00

Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3904:kernel: The rds_page_copy_user function in net/rds/page.c i...

2010-12-06T00:00:00+09:00

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2008-7270:openssl: OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_C...

2010-12-06T00:00:00+09:00

OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4296:workstation, player, server, fusion: vmware-mount in VMware Workstation 7.x before 7.1.2...

2010-12-06T00:00:00+09:00

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 does not properly load libraries, which allows host OS users to gain privileges via vectors involving shared object files.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4297:workstation, player, fusion, esxi: The VMware Tools update functionality in VMware Wor...

2010-12-06T00:00:00+09:00

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2 build 332101; VMware ESXi 3.5, 4.0, and 4.1; and VMware ESX 3.0.3, 3.5, 4.0, and 4.1 allows host OS users to gain privileges on the guest OS via unspecified vectors, related to a "command injection" ...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4295:workstation, player, server, fusion: Race condition in the mounting process in vmware-mo...

2010-12-06T00:00:00+09:00

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4180:openssl: OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, whe...

2010-12-06T00:00:00+09:00

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4411:cgi.pm: Unspecified vulnerability in CGI.pm 3.50 and earlie...

2010-12-06T00:00:00+09:00

Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4410:cgi.pm, cgi-simple: CRLF injection vulnerability in the header function...

2010-12-06T00:00:00+09:00

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4408:archiva: Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4...

2010-12-06T00:00:00+09:00

Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a (1) unattended workstation or (2) cross-site request forgery (CSRF) vulnerability, a related issue to CVE-2010-3449.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4294:movie_decoder, workstation, player, server: The frame decompression functionality in the VMnc m...

2010-12-06T00:00:00+09:00

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial ...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3066:kernel: The io_submit_one function in fs/aio.c in the Linux...

2010-12-06T00:00:00+09:00

The io_submit_one function in fs/aio.c in the Linux kernel before 2.6.23 allows local users to cause a denial of service (NULL pointer dereference) via a crafted io_submit system call with an IOCB_FLAG_RESFD flag.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3449:redback: Cross-site request forgery (CSRF) vulnerability in ...

2010-12-06T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1, allows remote attackers to hijack the authentication of administrators for requests that modify credentials.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2761:cgi.pm, cgi-simple: The multipart_init function in (1) CGI.pm before 3....

2010-12-06T00:00:00+09:00

The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4409:php: Integer overflow in the NumberFormatter::getSymbol ...

2010-12-06T00:00:00+09:00

Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4412:pfsense: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-07T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in pfSense 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in an olsrd.xml action to pkg_edit.php, (2) the xml parameter to pkg.php, or the if parameter to (3) status_graph.php or (4) interfaces.php, a different vulnerability than CVE-2008-1182 and CVE-2010-4246.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4252:openssl: OpenSSL before 1.0.0c, when J-PAKE is enabled, does...

2010-12-06T00:00:00+09:00

OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4478:openssh: OpenSSH 5.6 and earlier, when J-PAKE is enabled, do...

2010-12-06T00:00:00+09:00

OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a related issue to CVE-2010-4252.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4330:pulse_cms: Directory traversal vulnerability in includes/contr...

2010-12-07T00:00:00+09:00

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4246:pfsense: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-07T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in graph.php in pfSense 1.2.3 and 2 beta 4 allow remote attackers to inject arbitrary web script or HTML via the (1) ifnum or (2) ifname parameter, a different vulnerability than CVE-2008-1182.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002450:複数の Microsoft 製品における任意のコードを実行される脆弱性

2010-12-06T16:51:22+09:00

複数の Microsoft 製品には、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002449:複数の Microsoft 製品における整数アンダーフローの脆弱性

2010-12-06T16:30:36+09:00

複数の Microsoft 製品には、整数アンダーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002448:Microsoft PowerPoint におけるバッファオーバーフローの脆弱性

2010-12-06T15:50:10+09:00

Microsoft PowerPoint には、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002447:Microsoft Office における権限昇格の脆弱性

2010-12-06T15:44:39+09:00

Microsoft Office には、権限昇格の脆弱性が存在します。本脆弱性は CVE-2010-3141 および CVE-2010-3142 と重複している可能性があります。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002446:複数の Microsoft 製品における任意のコードを実行される脆弱性

2010-12-06T15:36:57+09:00

複数の Microsoft 製品には、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002445:複数の Microsoft 製品における任意のコードを実行される脆弱性

2010-12-06T15:30:39+09:00

複数の Microsoft 製品には、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002444:複数の Microsoft 製品におけるスタックペースのバッファオーバーフローの脆弱性

2010-12-06T15:27:05+09:00

複数の Microsoft 製品には、スタックペースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002443:Zope Object Database の ZEO/StorageServer.py におけるサービス運用妨害 (DoS) の脆弱性

2010-12-06T15:20:51+09:00

Zope Object Database の ZEO/StorageServer.py には、競合状態が発生するため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4402:register_plus_plugin: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-06T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) firstname, (2) lastname, (3) website, (4) aim, (5) yahoo, (6) jabber, (7) about, (8) pass1, and (9) pass2 parameters in a register action.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4404:sh404sef: SQL injection vulnerability in the Yannick Gaultier...

2010-12-06T00:00:00+09:00

SQL injection vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4399:dynpg_cms: Directory traversal vulnerability in languages.inc....

2010-12-06T00:00:00+09:00

Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the CHG_DYNPG_SET_LANGUAGE parameter to index.php. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4403:register_plus_plugin: The Register Plus plugin 3.5.1 and earlier for Word...

2010-12-06T00:00:00+09:00

The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path in an error message.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4400:dynpg_cms: SQL injection vulnerability in _rights.php in DynPG...

2010-12-06T00:00:00+09:00

SQL injection vulnerability in _rights.php in DynPG CMS 4.2.0 allows remote attackers to execute arbitrary SQL commands via the giveRights_UserId parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4401:dynpg_cms: languages.inc.php in DynPG CMS 4.2.0 allows remote ...

2010-12-06T00:00:00+09:00

languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4405:sh404sef: Cross-site scripting (XSS) vulnerability in the Yan...

2010-12-06T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Yannick Gaultier sh404SEF component before 2.1.8.777 for Joomla! allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4254:mono: Mono, when Moonlight before 2.3.0.1 or 2.99.x befor...

2010-12-06T00:00:00+09:00

Mono, when Moonlight before 2.3.0.1 or 2.99.x before 2.99.0.10 is used, does not properly validate arguments to generic methods, which allows remote attackers to bypass generic constraints, and possibly execute arbitrary code, via a crafted method call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4398:windows_2003_server, windows_7, windows_server_2008, windows_vista, windows_xp: Stack-based buffer overflow in the RtlQueryRegistry...

2010-12-06T00:00:00+09:00

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008 through R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3613:bind: named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV be...

2010-12-06T00:00:00+09:00

named in ISC BIND 9.6.2 before 9.6.2-P3, 9.6-ESV before 9.6-ESV-R3, and 9.7.x before 9.7.2-P3 does not properly handle the combination of signed negative responses and corresponding RRSIG records in the cache, which allows remote attackers to cause a denial of service (daemon crash) via a query for cached data.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4406:littlephpgallery: Directory traversal vulnerability in gallery.php in...

2010-12-06T00:00:00+09:00

Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic_quotes_gpc is disabled, allows remote attackers to list, include, and execute arbitrary local files via a ..// (dot dot slash slash) in the repertoire parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3614:bind: named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before...

2010-12-06T00:00:00+09:00

named in ISC BIND 9.x before 9.6.2-P3, 9.7.x before 9.7.2-P3, 9.4-ESV before 9.4-ESV-R4, and 9.6-ESV before 9.6-ESV-R3 does not properly determine the security status of an NS RRset during a DNSKEY algorithm rollover, which might allow remote attackers to cause a denial of service (DNSSEC validation error) by triggering a rollover.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3615:bind: named in ISC BIND 9.7.2-P2 does not check all inten...

2010-12-06T00:00:00+09:00

named in ISC BIND 9.7.2-P2 does not check all intended locations for allow-query ACLs, which might allow remote attackers to make successful requests for private DNS records via the standard DNS query mechanism.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4407:alguest: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-06T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlGuest 1.1c-patched allow remote attackers to inject arbitrary web script or HTML via the (1) nome (nickname), (2) messaggio (message), and (3) link (homepage) parameters.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002442:Apple Mac OS X の xar におけるヒープベースのバッファオーバーフローの脆弱性

2010-12-03T13:13:51+09:00

Apple Mac OS X の xar には、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002441:Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性

2010-12-03T13:12:21+09:00

Apple Mac OS X の Wiki サーバには、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002440:Apple Mac OS X の Safari RSS における重要な情報を取得される脆弱性

2010-12-03T13:10:50+09:00

Apple Mac OS X の Safari RSS には、RSS フィード内にある Java アプレットをブロックしないため、重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002439:Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性

2010-12-03T13:09:10+09:00

Apple Mac OS X の QuickTime には、GIF 画像データの処理を行う際、初期化されていないメモリ領域へアクセスするため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002438:Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性

2010-12-03T13:07:26+09:00

Apple Mac OS X の QuickTime には、FlashPix 画像データの処理を行う際、初期化されていないメモリ領域へアクセスするため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002437:Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性

2010-12-03T13:05:30+09:00

Apple Mac OS X の QuickTime には、Sorenson のムービーファイルに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4313:orbis_cms: Unrestricted file upload vulnerability in fileman_f...

2010-12-02T00:00:00+09:00

Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users to execute arbitrary code by uploading a .php file, and then accessing it via a direct request to the file in uploads/.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4283:pandora_fms: PHP remote file inclusion vulnerability in extras/p...

2010-12-02T00:00:00+09:00

PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the argv[1] parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4371:winamp: Buffer overflow in the in_mod plugin in Winamp befo...

2010-12-02T00:00:00+09:00

Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to the comment box.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4372:winamp: Integer overflow in the in_nsv plugin in Winamp bef...

2010-12-02T00:00:00+09:00

Integer overflow in the in_nsv plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vectors related to improper allocation of memory for NSV metadata, a different vulnerability than CVE-2010-2586.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4374:winamp: The in_mkv plugin in Winamp before 5.6 allows remot...

2010-12-02T00:00:00+09:00

The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via a Matroska Video (MKV) file containing a string with a crafted length.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4278:pandora_fms: operation/agentes/networkmap.php in Pandora FMS bef...

2010-12-02T00:00:00+09:00

operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4279:pandora_fms: The default configuration of Pandora FMS 3.1 and ea...

2010-12-02T00:00:00+09:00

The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackers to bypass authentication by sending a request to index.php with "admin" in the loginhash_user parameter, in conjunction with the md5 hash of "admin" in the loginhash_data parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4282:pandora_fms: Multiple directory traversal vulnerabilities in Pan...

2010-12-02T00:00:00+09:00

Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4280:pandora_fms: Multiple SQL injection vulnerabilities in Pandora F...

2010-12-02T00:00:00+09:00

Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the id_group parameter in an operation/agentes/ver_agente action to ajax.php or (2) the group_id parameter in an operation/agentes/estado_agente action to index.php, related to operation/agentes/estado_agente.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4281:pandora_fms: Incomplete blacklist vulnerability in the safe_url_...

2010-12-02T00:00:00+09:00

Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code by using a page parameter containing a UNC share pathname, which bypasses the check for the : (colon) character.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4368:awstats: awstats.cgi in AWStats before 7.0 on Windows accept...

2010-12-02T00:00:00+09:00

awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4369:awstats: Directory traversal vulnerability in AWStats before...

2010-12-02T00:00:00+09:00

Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4367:awstats: awstats.cgi in AWStats before 7.0 accepts a configd...

2010-12-02T00:00:00+09:00

awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server or (2) NFS server.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4370:winamp: Multiple integer overflows in the in_midi plugin in...

2010-12-02T00:00:00+09:00

Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to have an unspecified impact via a crafted MIDI file that triggers a buffer overflow. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4373:winamp: The in_mp4 plugin in Winamp before 5.6 allows remot...

2010-12-02T00:00:00+09:00

The in_mp4 plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via crafted (1) metadata or (2) albumart in an invalid MP4 file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4329:phpmyadmin: Cross-site scripting (XSS) vulnerability in the PMA...

2010-12-02T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 allows remote attackers to inject arbitrary web script or HTML via a crafted request.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002436:Apple Mac OS X の QuickTime における整数符号エラーの脆弱性

2010-12-02T16:22:47+09:00

Apple Mac OS X の QuickTime には、MPEG のムービーファイルに関する処理に不備があるため、整数符号エラーの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002435:Apple Mac OS X の QuickTime におけるバッファオーバーフローの脆弱性

2010-12-02T16:20:03+09:00

Apple Mac OS X の QuickTime には、MPEG のムービーファイルに関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002434:Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性

2010-12-02T16:17:57+09:00

Apple Mac OS X の QuickTime には、ムービーファイルに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002433:Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性

2010-12-02T16:16:25+09:00

Apple Mac OS X の QuickTime には、AVI ファイルに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002432:Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性

2010-12-02T16:14:11+09:00

Apple Mac OS X の QuickTime には、JP2 画像データの処理を行う際、初期化されていないメモリ領域へアクセスするため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2586:winamp: Multiple integer overflows in in_nsv.dll in the in_...

2010-12-02T00:00:00+09:00

Multiple integer overflows in in_nsv.dll in the in_nsv plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted Table of Contents (TOC) in a (1) NSV stream or (2) NSV file that triggers a heap-based buffer overflow.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4363:freeticket: Multiple SQL injection vulnerabilities in contact.p...

2010-12-01T00:00:00+09:00

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) email parameters in a showtickets action.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4366:chameleon_social_networking: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-01T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote attackers to inject arbitrary web script or HTML via the (1) thread_title and (2) thread_description parameters in a message.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4359:jurpopage: SQL injection vulnerability in index.php in Jurpopa...

2010-12-01T00:00:00+09:00

SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands via the category parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3267:bugtracker.net: Multiple SQL injection vulnerabilities in BugTracke...

2010-12-02T00:00:00+09:00

Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the qu_id parameter to bugs.aspx, (2) the row_id parameter to delete_query.aspx, the (3) new_project or (4) us_id parameter to edit_bug.aspx, or (5) the bug_list parameter to massedit.aspx. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4356:big_truck_broker: SQL injection vulnerability in news_default.asp in ...

2010-12-01T00:00:00+09:00

SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitrary SQL commands via the txtSiteId parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4355:dadabik: Cross-site scripting (XSS) vulnerability in DaDaBIK...

2010-12-01T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in DaDaBIK before 4.3 beta2, when the insert or edit feature is enabled, allows remote authenticated users to inject arbitrary web script or HTML via the select_single parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4362:rv_dealer_website: Multiple SQL injection vulnerabilities in MicroNets...

2010-12-01T00:00:00+09:00

Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4358:guestbook: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-01T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) website, and (4) message parameters.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4021:kerberos: The Key Distribution Center (KDC) in MIT Kerberos 5...

2010-12-02T00:00:00+09:00

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5020:awstats: Open redirect vulnerability in awredir.pl in AWStat...

2010-12-02T00:00:00+09:00

Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1323:kerberos: MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6....

2010-12-02T00:00:00+09:00

MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center (KDC), or forge a KRB-SAFE message via certain checksums that (1) are unkeyed or (2) use RC4 keys.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1324:kerberos: MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1...

2010-12-02T00:00:00+09:00

MIT Kerberos 5 (aka krb5) 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via (1) an unkeyed checksum, (2) an unkeyed PAC checksum, or (3) a KrbFastArmoredReq checksum based on an RC4 key.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4365:com_jeajaxeventcalendar: SQL injection vulnerability in JE Ajax Event Calend...

2010-12-01T00:00:00+09:00

SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event_id parameter in an alleventlist_more action to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4020:kerberos: MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does ...

2010-12-02T00:00:00+09:00

MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte stream-cipher operations.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4364:dadabik: DaDaBIK 4.3 beta3, when running in a case-sensitive...

2010-12-01T00:00:00+09:00

DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct cross-site scripting (XSS) attacks via the (1) html content and (2) rich_editor fields. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4361:jurpopage: Cross-site scripting (XSS) vulnerability in url-gat...

2010-12-01T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in url-gateway.php in Jurpopage 0.2.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5019:web_wiz_newspad: Web Wiz NewsPad stores sensitive information under ...

2010-12-01T00:00:00+09:00

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4360:jurpopage: Multiple SQL injection vulnerabilities in index.php...

2010-12-01T00:00:00+09:00

Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) note and (2) pg parameters, different vectors than CVE-2010-4359. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3266:bugtracker.net: Multiple cross-site scripting (XSS) vulnerabilities...

2010-12-02T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the pcd parameter to edit_bug.aspx, (2) the bug_id parameter to edit_comment.aspx, (3) the id parameter to edit_user_permissions2.aspx, or (4) the default_name parameter to edit_customfield.aspx. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4357:siteengine: SQL injection vulnerability in comments.php in Site...

2010-12-01T00:00:00+09:00

SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002431:Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性

2010-12-01T16:33:50+09:00

Apple Mac OS X の QuickTime には、JP2 画像に関する処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002430:Apple Mac OS X の QuickLook における任意のコードを実行される脆弱性

2010-12-01T16:33:30+09:00

Apple Mac OS X の QuickLook には、Excel ファイルに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002429:Apple Mac OS X の QuickLook におけるバッファオーバーフローの脆弱性

2010-12-01T16:27:30+09:00

Apple Mac OS X の QuickLook には、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002428:Apple Mac OS X の Printing におけるサービス運用妨害 (DoS) の脆弱性

2010-12-01T16:14:20+09:00

Apple Mac OS X の Printing の PMPageFormatCreateWithDataRepresentation API は、XML データを適切に処理しないため、サービス運用妨害 (DoS) の脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002427:Apple Mac OS X のパスワードサーバにおけるパスワードの認証を回避される脆弱性

2010-12-01T16:12:03+09:00

Apple Mac OS X のパスワードサーバは、パスワードの複製処理を適切に行わないため、現在使用しているパスワードの認証を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000058:Grani におけるクリップボードの操作に関する脆弱性

2010-12-01T12:02:33+09:00

Grani には、クリップボードの操作に関する脆弱性が存在します。フェンリル社が提供するウェブブラウザ Grani には、クリップボードの操作に関する脆弱性が存在します。このため、Grani を特定の設定で使用すると、ウェブサイト側からクリップボードの内容を読み書きされてしまう可能性があります。開発者によると、バージョン 4.5 については、2010年11月25日の 15時 (日本時間) 以前に公開されていたものをデフォルト設定で利用しているユーザが本脆弱性の影響を受けるとのことです。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000057:Sleipnir におけるクリップボードの操作に関する脆弱性

2010-12-01T12:02:09+09:00

Sleipnir には、クリップボードの操作に関する脆弱性が存在します。フェンリル社が提供するウェブブラウザ Sleipnir には、クリップボードの操作に関する脆弱性が存在します。このため、Sleipnir を特定の設定で使用すると、ウェブサイト側からクリップボードの内容を読み書きされてしまう可能性があります。開発者によると、バージョン 2.9.6 については、2010年11月25日の 15時 (日本時間) 以前に公開されていたものをデフォルト設定で利用しているユーザが本脆弱性の影響を受けるとのことです。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4083:kernel: The copy_semid_to_user function in ipc/sem.c in the...

2010-11-30T00:00:00+09:00

The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) IPC_INFO, (2) SEM_INFO, (3) IPC_STAT, or (4) SEM_STAT command in a semctl system call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4080:kernel: The snd_hdsp_hwdep_ioctl function in sound/pci/rme9...

2010-11-30T00:00:00+09:00

The snd_hdsp_hwdep_ioctl function in sound/pci/rme9652/hdsp.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSP_IOCTL_GET_CONFIG_INFO ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3858:kernel: The setup_arg_pages function in fs/exec.c in the Li...

2010-11-30T00:00:00+09:00

The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service (system crash) via a crafted exec system call, a related issue to CVE-2010-2240.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4248:kernel: Race condition in the __exit_signal function in ker...

2010-11-30T00:00:00+09:00

Race condition in the __exit_signal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader in the de_thread function in fs/exec.c.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4081:kernel: The snd_hdspm_hwdep_ioctl function in sound/pci/rme...

2010-11-30T00:00:00+09:00

The snd_hdspm_hwdep_ioctl function in sound/pci/rme9652/hdspm.c in the Linux kernel before 2.6.36-rc6 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via an SNDRV_HDSPM_IOCTL_GET_CONFIG_INFO ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4354:asa_5500, pix_500, vpn_3000_concentrator, vpn_3005_concentrator, vpn_3015_concent...: The remote-access IPSec VPN implementation on Cisco...

2010-11-30T00:00:00+09:00

The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote attackers to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2008-7268:siteengine: The phpinfo function in SiteEngine 5.x allows remot...

2010-12-01T00:00:00+09:00

The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in misc.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2008-7269:siteengine: Open redirect vulnerability in api.php in SiteEngin...

2010-12-01T00:00:00+09:00

Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4082:kernel: The viafb_ioctl_get_viafb_info function in drivers/...

2010-11-30T00:00:00+09:00

The viafb_ioctl_get_viafb_info function in drivers/video/via/ioctl.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a VIAFB_GET_INFO ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2008-7267:siteengine: SQL injection vulnerability in announcements.php in...

2010-12-01T00:00:00+09:00

SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002426:FreeType における整数オーバーフローの脆弱性

2010-11-30T14:29:35+09:00

FreeType には、グリフに関する処理に不備があるため、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002425:Apple Mac OS X のカーネルにおけるサービス運用妨害 (DoS) の脆弱性

2010-11-30T14:25:51+09:00

Apple Mac OS X のカーネルは、端末デバイスのメモリ管理を適切に実行しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002424:Apple Mac OS X の Image RAW におけるヒープベースのバッファオーバーフローの脆弱性

2010-11-30T14:23:47+09:00

Apple Mac OS X の Image RAW には、RAW イメージに関する処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002423:Apple Mac OS X の ImageIO におけるサービス運用妨害 (DoS) の脆弱性

2010-11-30T14:21:45+09:00

Apple Mac OS X の ImageIO には、PSD イメージに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002422:Apple Mac OS X の Image Capture におけるサービス運用妨害 (DoS) の脆弱性

2010-11-30T14:19:40+09:00

Apple Mac OS X の Image Capture には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4075:kernel: The uart_get_count function in drivers/serial/seria...

2010-11-29T00:00:00+09:00

The uart_get_count function in drivers/serial/serial_core.c in the Linux kernel before 2.6.37-rc1 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4249:kernel: The wait_for_unix_gc function in net/unix/garbage.c...

2010-11-29T00:00:00+09:00

The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service (system hang) via crafted use of the socketpair and sendmsg system calls for SOCK_SEQPACKET sockets.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4073:kernel: The ipc subsystem in the Linux kernel before 2.6.37...

2010-11-29T00:00:00+09:00

The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4077:kernel: The ntty_ioctl_tiocgicount function in drivers/char...

2010-11-29T00:00:00+09:00

The ntty_ioctl_tiocgicount function in drivers/char/nozomi.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4078:kernel: The sisfb_ioctl function in drivers/video/sis/sis_m...

2010-11-29T00:00:00+09:00

The sisfb_ioctl function in drivers/video/sis/sis_main.c in the Linux kernel before 2.6.36-rc6 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4079:kernel: The ivtvfb_ioctl function in drivers/media/video/iv...

2010-11-29T00:00:00+09:00

The ivtvfb_ioctl function in drivers/media/video/ivtv/ivtvfb.c in the Linux kernel before 2.6.36-rc8 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FBIOGET_VBLANK ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4074:kernel: The USB subsystem in the Linux kernel before 2.6.36...

2010-11-29T00:00:00+09:00

The USB subsystem in the Linux kernel before 2.6.36-rc5 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to TIOCGICOUNT ioctl calls, and the (1) mos7720_ioctl function in drivers/usb/serial/mos7720.c and (2) mos7840_ioctl function in drivers/usb/serial/mos7840.c.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4076:kernel: The rs_ioctl function in drivers/char/amiserial.c i...

2010-11-29T00:00:00+09:00

The rs_ioctl function in drivers/char/amiserial.c in the Linux kernel 2.6.36.1 and earlier does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002421:Apple Mac OS X の Networking におけるサービス運用妨害 (DoS) の脆弱性

2010-11-29T15:53:44+09:00

Apple Mac OS X の Networking には、PIM パケットに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002420:Apple Mac OS X の AppKit におけるバッファオーバーフローの脆弱性

2010-11-29T15:47:26+09:00

Apple Mac OS X の AppKit には、双方向テキストの文字列に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002419:Apple Mac OS X の Disk Image における任意のコードを実行される脆弱性

2010-11-29T15:45:32+09:00

Apple Mac OS X の Disk Image には、UDIF イメージに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002418:Apple Mac OS X の password-validation 機能におけるスタックベースのバッファオーバーフローの脆弱性

2010-11-29T15:43:54+09:00

Apple Mac OS X の Directory Services 内にある password-validation 機能には、スタックベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002417:Apple Mac OS X の Directory Services における認証を回避される脆弱性

2010-11-29T15:41:30+09:00

Apple Mac OS X の Directory Services は、無効にしたモバイルアカウントに関するエラーを適切に処理しないため、認証を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4172:tomcat: Multiple cross-site scripting (XSS) vulnerabilities...

2010-11-26T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3911:vtiger_crm: Multiple cross-site scripting (XSS) vulnerabilities...

2010-11-26T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via (1) the username (aka default_user_name) field or (2) the password field in a Users Login action to index.php, or (3) the label parameter in a Settings GetFieldInfo action to index.php, related to modules/Settings/GetFieldInfo.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3828:iphone_os: iAd Content Display in Apple iOS before 4.2 allows ...

2010-11-26T00:00:00+09:00

iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle attackers to make calls via a crafted URL in an ad.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3855:freetype: Buffer overflow in the ft_var_readpackedpoints func...

2010-11-26T00:00:00+09:00

Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4072:kernel: The copy_shmid_to_user function in ipc/shm.c in the...

2010-11-29T00:00:00+09:00

The copy_shmid_to_user function in ipc/shm.c in the Linux kernel before 2.6.37-rc1 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the shmctl system call and the "old shm interface."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4311:free_simple_software: Free Simple Software 1.0 stores passwords in cleart...

2010-11-26T00:00:00+09:00

Free Simple Software 1.0 stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4300:wireshark: Heap-based buffer overflow in the dissect_ldss_tran...

2010-11-26T00:00:00+09:00

Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector in Wireshark 1.2.0 through 1.2.12 and 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an LDSS packet with a long digest line that triggers memory corruption.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3831:iphone_os: Photos in Apple iOS before 4.2 enables support for ...

2010-11-26T00:00:00+09:00

Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe" action.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3705:kernel: The sctp_auth_asoc_get_hmac function in net/sctp/au...

2010-11-26T00:00:00+09:00

The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate the hmac_ids array of an SCTP peer, which allows remote attackers to cause a denial of service (memory corruption and panic) via a crafted value in the last element of this array.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3827:iphone_os: Apple iOS before 4.2 does not properly validate sig...

2010-11-26T00:00:00+09:00

Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configuration installation utility, which allows remote attackers to spoof profiles via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3829:iphone_os: WebKit in Apple iOS before 4.2 allows remote attack...

2010-11-26T00:00:00+09:00

WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4298:free_simple_software: SQL injection vulnerability in the download module ...

2010-11-26T00:00:00+09:00

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloads_id parameter in a download_now action to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3910:vtiger_crm: Multiple directory traversal vulnerabilities in the...

2010-11-26T00:00:00+09:00

Multiple directory traversal vulnerabilities in the return_application_language function in include/utils/utils.php in vtiger CRM before 5.2.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the lang_crm parameter to phprint.php or (2) the current_language parameter in an Accounts Import action to graph.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3832:iphone_os: Heap-based buffer overflow in the GSM mobility mana...

2010-11-26T00:00:00+09:00

Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity (TMSI) field.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3909:vtiger_crm: Incomplete blacklist vulnerability in config.templa...

2010-11-26T00:00:00+09:00

Incomplete blacklist vulnerability in config.template.php in vtiger CRM before 5.2.1 allows remote authenticated users to execute arbitrary code by using the draft save feature in the Compose Mail component to upload a file with a .phtml extension, and then accessing this file via a direct request to the file in the storage/ directory tree.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3830:iphone_os: Networking in Apple iOS before 4.2 accesses an inva...

2010-11-26T00:00:00+09:00

Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allows local users to gain privileges via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3814:freetype: Heap-based buffer overflow in the Ins_SHZ function ...

2010-11-26T00:00:00+09:00

Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3698:kernel: The KVM implementation in the Linux kernel before 2...

2010-11-26T00:00:00+09:00

The KVM implementation in the Linux kernel before 2.6.36 does not properly reload the FS and GS segment registers, which allows host OS users to cause a denial of service (host OS crash) via a KVM_RUN ioctl call in conjunction with a modified Local Descriptor Table (LDT).

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4301:wireshark: epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL...

2010-11-26T00:00:00+09:00

epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted ZCL packet, related to Discover Attributes.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2963:kernel: drivers/media/video/v4l2-compat-ioctl32.c in the Vi...

2010-11-26T00:00:00+09:00

drivers/media/video/v4l2-compat-ioctl32.c in the Video4Linux (V4L) implementation in the Linux kernel before 2.6.36 on 64-bit platforms does not validate the destination of a memory copy operation, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via a VIDIOCSTUNER ioctl call on a /dev/video device, followed by a VIDIOCSMICROCODE ioctl call on this device.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2008-7266:adaptive_authentication: Cross-site scripting (XSS) vulnerability in an unsp...

2010-11-26T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3445:wireshark: Stack consumption vulnerability in the dissect_ber_...

2010-11-26T00:00:00+09:00

Stack consumption vulnerability in the dissect_ber_unknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a long string in an unknown ASN.1/BER encoded packet, as demonstrated using SNMP.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2962:kernel: drivers/gpu/drm/i915/i915_gem.c in the Graphics Exe...

2010-11-26T00:00:00+09:00

drivers/gpu/drm/i915/i915_gem.c in the Graphics Execution Manager (GEM) in the Intel i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.36 does not properly validate pointers to blocks of memory, which allows local users to write to arbitrary kernel memory locations, and consequently gain privileges, via crafted use of the ioctl interface, related to (1) pwrite and (2) pread operations.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4312:tomcat: The default configuration of Apache Tomcat 6.x does...

2010-11-26T00:00:00+09:00

The default configuration of Apache Tomcat 6.x does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to hijack a session via script access to a cookie.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002416:Apple Mac OS X の CoreText における任意のコードを実行される脆弱性

2010-11-26T15:39:19+09:00

Apple Mac OS X の CoreText には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002415:Apple Mac OS X の CoreGraphics におけるスタックベースのバッファオーバーフローの脆弱性

2010-11-26T15:37:54+09:00

Apple Mac OS X の CoreGraphics は、PDF ドキュメントに関する処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002414:Apple Mac OS X の CFNetwork におけるユーザを追跡可能な脆弱性

2010-11-26T15:36:05+09:00

Apple Mac OS X の CFNetwork は、cookie のドメインを適切に検証しないため、ユーザを追跡可能な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002413:Apple Mac OS X の Apple Type Services における任意のコードを実行される脆弱性

2010-11-26T15:34:16+09:00

Apple Mac OS X の Apple Type Services (ATS) には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002412:Apple Mac OS X の Apple Type Services におけるスタックペースのバッファオーバーフローの脆弱性

2010-11-26T15:32:43+09:00

Apple Mac OS X の Apple Type Services (ATS) には、スタックペースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000056:Google Chrome における情報漏えいの脆弱性

2010-11-26T11:02:03+09:00

Google Chrome には、情報漏えいの脆弱性が存在します。 Google Chrome には、XML ファイルの取扱いに関する情報漏えいの脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 三井物産セキュアディレクション株式会社諌山貴由氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002411:Apple Mac OS X の Apple Type Services における任意のコードを実行される脆弱性

2010-11-25T15:17:55+09:00

Apple Mac OS X の Apple Type Services (ATS) には、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002410:Apple Mac OS X の AFP Server における共有名を列挙される脆弱性

2010-11-25T15:17:39+09:00

Apple Mac OS X の AFP Server は、共有が存在するかどうかに応じて、異なるエラーメッセージを作成するため、共有名を列挙される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002409:Apple Mac OS X の AFP Server におけるディレクトリトラバーサルの脆弱性

2010-11-25T15:17:23+09:00

Apple Mac OS X の AFP Server には、ディレクトリトラバーサルの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002408:Apple Mac OS X の AFP Server におけるサービス運用妨害 (DoS) の脆弱性

2010-11-25T15:17:07+09:00

Apple Mac OS X の AFP Server には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002407:Apple Mac OS X の Time Machine における重要な情報を取得される脆弱性

2010-11-25T15:16:52+09:00

Apple Mac OS X の Time Machine は、リモートの AFP ボリュームの固有識別子を適切に検証しないため、重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002406:Python の rgbimg モジュール内にある RLE デコーダにおける脆弱性

2010-11-25T15:16:01+09:00

Python の rgbimg モジュール内にある RLE デコーダには、イメージファイルの処理に関する不備があるため、詳細不明な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002405:Python の rgbimg モジュール内にある rgbimgmodule.c における整数オーバーフローの脆弱性

2010-11-25T15:15:45+09:00

Python の rgbimg モジュール内にある rgbimgmodule.c には、整数オーバーフローの脆弱性が存在します。本脆弱性は CVE-2008-3143.12 の修正が不完全だったことによる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002404:Apple Mac OS X の OpenSSL における X.509 証明書の認証を回避される脆弱性

2010-11-25T15:15:28+09:00

Apple Mac OS X の OpenSSL は、計算を適切に行わないため、X.509 証明書の認証を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002403:Apple Mac OS X の hfs 実装におけるサービス運用妨害 (DoS) の脆弱性

2010-11-25T15:15:12+09:00

Apple Mac OS X の hfs 実装は、ディレクトリへのハードリンクをサポートしており、深くネストされたディレクトリの構造を制限しない不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002402:Python の rgbimg モジュールにおけるバッファアンダーフローの脆弱性

2010-11-25T15:14:43+09:00

Python の rgbimg モジュールには、バッファアンダーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002401:Google Chrome におけるクライアントユーザに関する重要な情報を取得される脆弱性

2010-11-24T15:04:41+09:00

Google Chrome は、SOCKS 5 のプロキシサーバが設定がされている際、DNS クエリの処理に関して不備があるため、クライアントユーザに関する重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002400:Google Chrome におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T15:04:24+09:00

Google Chrome には、イメージに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002399:Google Chrome における脆弱性

2010-11-24T15:04:07+09:00

Google Chrome は、拡張コンテキスト内の JavaScript コードを適切に実行しないため、詳細不明な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002398:Google Chrome の browser/login/login_prompt.cc における重要な情報を取得される脆弱性

2010-11-24T15:03:51+09:00

Google Chrome の browser/login/login_prompt.cc には、異なる Web サイトに関する Password Manager で記憶された認証情報を伴うダイアログを実装することにより、重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002397:Google Chrome の HTTP ヘッダ処理における脆弱性

2010-11-24T15:03:32+09:00

Google Chrome は、SafeBrowsing 機能を呼び出す前に HTTP ヘッダの処理を行うことにより、詳細不明な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002396:Google Chrome における脆弱性

2010-11-24T15:03:16+09:00

Google Chrome には、Web SQL データベースの削除および Strict Transport Security (STS) ステートのクリアに関する処理に不備があるため、詳細不明な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002395:Google Chrome 内にあるサンドボックスのインフラストラクチャーにおける脆弱性

2010-11-24T15:03:02+09:00

Google Chrome 内にあるサンドボックスのインフラストラクチャーは、ポインタを適切に処理しないため、詳細不明な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002394:Google Chrome 内にあるサンドボックスのインフラストラクチャーにおける競合状態の脆弱性

2010-11-24T15:02:44+09:00

Google Chrome 内にあるサンドボックスのインフラストラクチャーには、競合状態の脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002393:Google Chrome の ChildProcessSecurityPolicy::CanRequestURL 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T15:02:28+09:00

Google Chrome の browser/child_process_security_policy.cc 内にある ChildProcessSecurityPolicy::CanRequestURL 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002392:Google Chrome の ParamTraits::Read 関数における重要な情報を取得される脆弱性

2010-11-24T15:02:10+09:00

Google Chrome の common/common_param_traits.cc 内にある ParamTraits::Read 関数は、bitmap データを保持するメモリロケーションを初期化しないため、プロセスメモリからの重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002391:Google Chrome の ParamTraits::Read 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T15:01:51+09:00

Google Chrome の common/common_param_traits.cc 内にある ParamTraits::Read 関数は、整数オーバーフローを制御するために計算された適正な変数を使用しないため、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002390:Google Chrome における重要な情報を取得される脆弱性

2010-11-24T15:01:30+09:00

Google Chrome には、https から http へリダイレクトされる際、http リクエストの Referer ヘッダが https の URL を送付するため、重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002389:Google Chrome における document.styleSheets[0].href のプロパティ値を読まれる脆弱性

2010-11-24T15:01:11+09:00

Google Chrome で使用される WebKit には、IFRAME 要素に関する処理に不備があるため、Web サイトのユーザセッションのリダイレクト target URL を発見され、document.styleSheets[0].href のプロパティ値を読まれる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002388:Google Chrome にて使用される Skia における整数オーバーフローの脆弱性

2010-11-24T15:00:54+09:00

Google Chrome にて使用される Skia には、CANVAS 要素の処理に関して不備があるため、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002387:Windows 上で稼働する Google Chrome における重要な情報を取得される脆弱性

2010-11-24T15:00:38+09:00

Windows 上で稼働する Google Chrome は、エンコーディング、エスケーピングおよびクォーティングに関する処理に不備があるため、任意のプログラムを実行される、または重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002386:Google Chrome における任意のコードを実行される脆弱性

2010-11-24T15:00:23+09:00

Google Chrome には、異なる Web サイトへのナビゲートが行われている間、ブロックされたポップアップウインドウの表示に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002385:Google Chrome の sandbox/src/crosscall_server.cc における整数オーバーフロー脆弱性

2010-11-24T15:00:07+09:00

Google Chrome の sandbox/src/crosscall_server.cc 内にある CrossCallParamsEx::CreateFromBuffer 関数には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002384:Google Chrome にて使用される Google V8 内の factory.cc における整数符号エラーの脆弱性

2010-11-24T14:59:48+09:00

Google Chrome にて使用される Google V8 内の factory.cc には、整数符号エラーの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002383:Google Chrome にて使用される Google V8 内の factory.cc における整数オーバーフローの脆弱性

2010-11-24T14:59:30+09:00

Google Chrome にて使用される Google V8 内の factory.cc には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002382:Google Chrome におけるクライアントユーザに関する重要な情報を取得される脆弱性

2010-11-24T14:59:14+09:00

Google Chrome は、プロキシサーバの設定が全て無効の際、Web サイトへのダイレクト接続を試みるため、クライアントユーザに関する重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002381:Google Chrome におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:58:53+09:00

Google Chrome は、フォントを適切に処理しないため、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002380:Google Chrome におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:58:38+09:00

Google Chrome は、HTML5 メディアを適切に処理しないため、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002379:Google Chrome の Google URL Parsing Library における同一生成元ポリシーを回避される脆弱性

2010-11-24T14:58:21+09:00

Google Chrome の Google URL Parsing Library には、同一生成元ポリシーを回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002378:Google Chrome の Google V8 bindings におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:58:04+09:00

Google Chrome の Google V8 bindings には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002377:Google Chrome における脆弱性

2010-11-24T14:57:44+09:00

Google Chrome は、新規タブページの権限によってローディングされるページの制限を行わないため、詳細不明な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002376:Google Chrome におけるクロスサイトスクリプティングの脆弱性

2010-11-24T14:57:28+09:00

Google Chrome には、chrome://downloads の URI に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002375:Google Chrome におけるクロスサイトスクリプティングの脆弱性

2010-11-24T14:57:11+09:00

Google Chrome には、chrome://net-internals の URI に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002374:Google Chrome におけるローカルファイルにアクセスされる脆弱性

2010-11-24T14:56:53+09:00

Google Chrome は、developer tools に関する処理に不備があるため、ローカルファイルにアクセスされる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002373:Google Chrome のドラッグ＆ドロップ機能におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:56:37+09:00

Google Chrome には、ドラッグ＆ドロップ機能に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002372:Google Chrome における whitelist-mode プラグインブロッカーを回避される脆弱性

2010-11-24T14:56:16+09:00

Google Chrome には、whitelist-mode プラグインブロッカーを回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002371:Google Chrome の Safe Browsing 機能におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:41:04+09:00

Google Chrome には、Safe Browsing 機能に関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002370:Google Chrome における URL バーを偽造される脆弱性

2010-11-24T14:40:47+09:00

Google Chrome には、アンロードしたイベントハンドラに関する処理に不備があるため、 URL バーを偽造される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002369:Google Chrome の URL 正規化における脆弱性

2010-11-24T14:40:24+09:00

Google Chrome は、URL の正規化における Safe Browsing の仕様要求を適切に処理しないため、詳細不明な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002618:Google Chrome におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:40:06+09:00

Google Chrome は、IFRAME 要素が SRC 属性で mailto: URL を有する状況においてメールアプリケーションを実行するため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002368:Google Chrome における特定の人物を識別される脆弱性

2010-11-24T14:39:48+09:00

Google Chrome は、Invisible Hand 拡張が有効の際、 HTTP リクエストをバックグラウンドで処理時に cookies が使用されるため、特定の人物を識別され、プロダクトを検索される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002367:Google Chrome における脆弱性

2010-11-24T14:39:30+09:00

Google Chrome には、”annoyance with print dialogs” に関する処理に不備があるため、詳細不明な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002366:Google Chrome の Bidi algorithm の実装におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:39:09+09:00

Google Chrome の Unicode Bidirectional Algorithm (Bidi algorithm または UBA) の実装には、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002365:Google Chrome におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:38:52+09:00

Google Chrome には、無効な SVG ドキュメントに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002364:Google Chrome の IFRAME 要素における脆弱性

2010-11-24T14:38:35+09:00

Google Chrome は、サンドボックス化された IFRAME 要素を適切に分離しないため、詳細不明な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002363:Google Chrome におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:38:18+09:00

Google Chrome には、WebGL が使用されている際、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002362:Google Chrome の WebKit 内にある WebCore における任意のコードを実行される脆弱性

2010-11-24T14:38:02+09:00

Google Chrome の WebKit 内にある WebCore には、シャドウ DOM ツリーに関連したリモートのフォントに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。本脆弱性は CVE-2010-1771 と重複している可能性があります。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002361:Google Chrome の WebKit 内にある editing/markup.cpp におけるクロスサイトスクリプティングの脆弱性

2010-11-24T14:37:40+09:00

Google Chrome の WebKit 内にある WebCore の editing/markup.cpp には、TEXTAREA 要素の node.innerHTML プロパティに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。本脆弱性は CVE-2010-1762 と重複している可能性があります。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002360:Google Chrome の Element::normalizeAttributes 関数における任意のコードを実行される脆弱性

2010-11-24T14:37:23+09:00

Google Chrome の WebKit の WebCore 内にある dom/Element.cpp の Element::normalizeAttributes 関数には、DOM mutation イベントハンドラに関する処理に不備があるため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は CVE-2010-1759 と重複している可能性があります。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002359:Google Chrome の Clipboard::DispatchObject 関数における任意のコードを実行される脆弱性

2010-11-24T14:37:00+09:00

Google Chrome の app/clipboard/clipboard.cc 内にある Clipboard::DispatchObject 関数には、renderer プロセスに関して不備があり、ViewHostMsg_ClipboardWriteObjectsAsync メッセージの CBF_SMBITMAP オブジェクトを適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002358:Linux 上で稼働する Google Chrome におけるサンドボックスの制限を回避される脆弱性

2010-11-24T14:36:41+09:00

Linux 上で稼働する Google Chrome の browser/renderer_host/database_dispatcher_host.cc には、chroot-based サンドボックスの ViewHostMsg_DatabaseOpenFile メッセージを適切に処理しないため、サンドボックスの制限を回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002357:Google Chrome の WebKit 内にある rendering/FixedTableLayout.cpp における任意のコードを実行される脆弱性

2010-11-24T14:36:22+09:00

Google Chrome の WebKit 内にある WebCore の rendering/FixedTableLayout.cpp には、テーブル内に多数の colspan 属性を持つ HTML ドキュメントに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002356:Google Chrome の DOM メソッドの実装における同一生成元ポリシーを回避される脆弱性

2010-11-24T14:36:04+09:00

Google Chrome の DOM メソッドの実装には、同一生成元ポリシーを回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002355:Google Chrome の WebKit 内にある page/EventHandler.cpp におけるキーストロークをリダイレクトされる脆弱性

2010-11-24T14:35:39+09:00

Google Chrome の WebKit 内にある WebCore の page/EventHandler.cpp には、keydown 送信中にフォーカスされたフレームの変更を適切に処理しないため、キーストロークをリダイレクトされる脆弱性が存在します。本脆弱性は CVE-2010-1422 と重複している可能性があります。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002354:Google Chrome におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:35:14+09:00

Google Chrome には、無効な news:// URI の IFRAME 要素を作成する無限ループが含まれた JavaScript コードに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002353:Google Chrome におけるサービス運用妨害 (DoS) の脆弱性

2010-11-24T14:34:58+09:00

Google Chrome には、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4304:unified_videoconferencing_system_5110, unified_videoconferencing_system_5110_firm...: The web interface in Cisco Unified Videoconferencin...

2010-11-22T00:00:00+09:00

The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack, aka Bug ID CSCti54048.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4305:unified_videoconferencing_system_5110, unified_videoconferencing_system_5110_firm...: Cisco Unified Videoconferencing (UVC) System 3545, ...

2010-11-22T00:00:00+09:00

Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) improperly use cookies for web-interface credentials, which allows remote attackers to obtain sensitive information by reading a (1) cleartext or (2) base64-encoded cleartext cookie, aka Bug ID CSCti54052.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3037:unified_videoconferencing_system_5110, unified_videoconferencing_system_5110_firm...: goform/websXMLAdminRequestCgi.cgi in Cisco Unified ...

2010-11-22T00:00:00+09:00

goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, and possibly Unified Videoconferencing System 3545 and 5230, Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway, Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway, and Unified Videoconferencing 3515 Multipoint Control Unit (MCU), allows remote authenticated administrators to execute arbitrary commands via the username field, related to a "shell command injection v...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3038:unified_videoconferencing_system_5110, unified_videoconferencing_system_5110_firm...: Cisco Unified Videoconferencing (UVC) System 5110 a...

2010-11-22T00:00:00+09:00

Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, has a default password for the (1) root, (2) cs, and (3) develop accounts, which makes it easier for remote attackers to obtain access via the (a) FTP or (b) SSH daemon, aka Bug ID CSCti54008.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4167:imagemagick: Untrusted search path vulnerability in configure.c ...

2010-11-22T00:00:00+09:00

Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4303:unified_videoconferencing_system_5110, unified_videoconferencing_system_5110_firm...: Cisco Unified Videoconferencing (UVC) System 5110 a...

2010-11-22T00:00:00+09:00

Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4173:libsdp: The default configuration of libsdp.conf in libsdp ...

2010-11-22T00:00:00+09:00

The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4302:unified_videoconferencing_system_5110, unified_videoconferencing_system_5110_firm...: /opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val ...

2010-11-22T00:00:00+09:00

/opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses a weak hashing algorithm for the (1) administrator and (2) operator passwords, which makes it easier for local users to obtain sensitive information by recovering the cleartext values, aka Bug ID CSCti54010.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002331:Adobe Flash Player における任意のコードを実行される脆弱性

2010-11-22T15:32:14+09:00

Adobe Flash Player には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3640、CVE-2010-3641、CVE-2010-3642、CVE-2010-3643、CVE-2010-3644、CVE-2010-3645、CVE-2010-3646、CVE-2010-3648、CVE-2010-3649、CVE-2010-3650 および CVE-2010-3652 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002330:Adobe Flash Player における任意のコードを実行される脆弱性

2010-11-22T15:31:56+09:00

Adobe Flash Player には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3640、CVE-2010-3641、CVE-2010-3642、CVE-2010-3643、CVE-2010-3644、CVE-2010-3645、CVE-2010-3647、CVE-2010-3648、CVE-2010-3649、CVE-2010-3650 および CVE-2010-3652 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002329:Adobe Flash Player における任意のコードを実行される脆弱性

2010-11-22T15:31:38+09:00

Adobe Flash Player には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3640、CVE-2010-3641、CVE-2010-3642、CVE-2010-3643、CVE-2010-3644、CVE-2010-3646、CVE-2010-3647、CVE-2010-3648、CVE-2010-3649、CVE-2010-3650 および CVE-2010-3652 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002328:Adobe Flash Player における任意のコードを実行される脆弱性

2010-11-22T15:31:22+09:00

Adobe Flash Player には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3640、CVE-2010-3641、CVE-2010-3642、CVE-2010-3643、CVE-2010-3645、CVE-2010-3646、CVE-2010-3647、CVE-2010-3648、CVE-2010-3649、CVE-2010-3650 および CVE-2010-3652 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002327:Adobe Flash Player における任意のコードを実行される脆弱性

2010-11-22T15:30:43+09:00

Adobe Flash Player には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3640、CVE-2010-3641、CVE-2010-3642、CVE-2010-3644、CVE-2010-3645、CVE-2010-3646、CVE-2010-3647、CVE-2010-3648、CVE-2010-3649、CVE-2010-3650 および CVE-2010-3652 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002326:Adobe Flash Player における任意のコードを実行される脆弱性

2010-11-22T15:20:17+09:00

Adobe Flash Player には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3640、CVE-2010-3641、CVE-2010-3643、CVE-2010-3644、CVE-2010-3645、CVE-2010-3646、CVE-2010-3647、CVE-2010-3648、CVE-2010-3649、CVE-2010-3650 および CVE-2010-3652 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002325:Adobe Flash Player における任意のコードを実行される脆弱性

2010-11-22T15:19:59+09:00

Adobe Flash Player には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3640、CVE-2010-3642、CVE-2010-3643、CVE-2010-3644、CVE-2010-3645、CVE-2010-3646、CVE-2010-3647、CVE-2010-3648、CVE-2010-3649、CVE-2010-3650 および CVE-2010-3652 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002324:Adobe Flash Player における任意のコードを実行される脆弱性

2010-11-22T15:19:42+09:00

Adobe Flash Player には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3641、CVE-2010-3642、CVE-2010-3643、CVE-2010-3644、CVE-2010-3645、CVE-2010-3646、CVE-2010-3647、CVE-2010-3648、CVE-2010-3649、CVE-2010-3650 および CVE-2010-3652 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4299:zenworks_handheld_management: Heap-based buffer overflow in ZfHIPCND.exe in Novel...

2010-11-22T00:00:00+09:00

Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management (ZHM) allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3821:safari, webkit: WebKit in Apple Safari before 5.0.3 on Mac OS X 10....

2010-11-22T00:00:00+09:00

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the :first-letter pseudo-element in a Cascading Style Sheets (CSS) token sequence, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3432:kernel: The sctp_packet_config function in net/sctp/output....

2010-11-22T00:00:00+09:00

The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service (panic) via a certain sequence of SCTP traffic.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3805:safari, webkit: Integer underflow in WebKit in Apple Safari before ...

2010-11-22T00:00:00+09:00

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving WebSockets. NOTE: this may overlap CVE-2010-3254.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3872:mod_fcgid: The apr_status_t fcgid_header_bucket_read function ...

2010-11-22T00:00:00+09:00

The apr_status_t fcgid_header_bucket_read function in fcgid_bucket.c in Apache mod_fcgid before 2.3.6 does not use bytewise pointer arithmetic in certain circumstances, which has unknown impact and attack vectors related to "untrusted FastCGI applications" and a "stack buffer overwrite."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3820:safari, webkit: WebKit in Apple Safari before 5.0.3 on Mac OS X 10....

2010-11-22T00:00:00+09:00

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4169:kernel: Use-after-free vulnerability in mm/mprotect.c in th...

2010-11-22T00:00:00+09:00

Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3618:desktop_for_windows, desktop_for_mac: PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 bef...

2010-11-22T00:00:00+09:00

PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" functionality for multi-packet OpenPGP messages that represent multi-message input, which allows remote attackers to spoof signed data by concatenating an additional message to the end of a legitimately signed message, related to a "piggy-back" or "unsigned data injection" issue.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3803:safari, webkit: Integer overflow in WebKit in Apple Safari before 5...

2010-11-22T00:00:00+09:00

Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3816:safari, webkit: Use-after-free vulnerability in WebKit in Apple Saf...

2010-11-22T00:00:00+09:00

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving scrollbars.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3812:safari, webkit: Integer overflow in WebKit in Apple Safari before 5...

2010-11-22T00:00:00+09:00

Integer overflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Text objects.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3824:safari, webkit: Use-after-free vulnerability in WebKit in Apple Saf...

2010-11-22T00:00:00+09:00

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving SVG use elements.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4210:freebsd: The pfs_getextattr function in FreeBSD 7.x before 7...

2010-11-22T00:00:00+09:00

The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic), overwrite arbitrary memory locations, and possibly execute arbitrary code via vectors related to opening a file on a file system that uses pseudofs.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3819:safari, webkit: WebKit in Apple Safari before 5.0.3 on Mac OS X 10....

2010-11-22T00:00:00+09:00

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) boxes, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3817:safari, webkit: WebKit in Apple Safari before 5.0.3 on Mac OS X 10....

2010-11-22T00:00:00+09:00

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) 3D transforms, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3804:safari, webkit: The JavaScript implementation in WebKit in Apple Sa...

2010-11-22T00:00:00+09:00

The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a related issue to CVE-2008-5913 and CVE-2010-3171.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3826:safari, webkit: WebKit in Apple Safari before 5.0.3 on Mac OS X 10....

2010-11-22T00:00:00+09:00

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of colors in an SVG document, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3810:safari, webkit: WebKit in Apple Safari before 5.0.3 on Mac OS X 10....

2010-11-22T00:00:00+09:00

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly handle the History object, which allows remote attackers to spoof the location bar's URL or add URLs to the history via a cross-origin attack.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3823:safari, webkit: Use-after-free vulnerability in WebKit in Apple Saf...

2010-11-22T00:00:00+09:00

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Geolocation objects. NOTE: this might overlap CVE-2010-3415.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3809:safari, webkit: WebKit in Apple Safari before 5.0.3 on Mac OS X 10....

2010-11-22T00:00:00+09:00

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of inline styling, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4165:kernel: The do_tcp_setsockopt function in net/ipv4/tcp.c in...

2010-11-22T00:00:00+09:00

The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3808:safari, webkit: WebKit in Apple Safari before 5.0.3 on Mac OS X 10....

2010-11-22T00:00:00+09:00

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of editing commands, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3813:safari, webkit: WebKit in Apple Safari before 5.0.3 on Mac OS X 10....

2010-11-22T00:00:00+09:00

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to bypass the DNS prefetching setting via an HTML LINK element, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3822:safari, webkit: WebKit in Apple Safari before 5.0.3 on Mac OS X 10....

2010-11-22T00:00:00+09:00

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets (CSS) counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3811:safari, webkit: Use-after-free vulnerability in WebKit in Apple Saf...

2010-11-22T00:00:00+09:00

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element attributes.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3818:safari, webkit: Use-after-free vulnerability in WebKit in Apple Saf...

2010-11-22T00:00:00+09:00

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving inline text boxes.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002323:Adobe Flash Player における任意のコードを実行される脆弱性

2010-11-19T14:16:38+09:00

Adobe Flash Player には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002322:Mac OS X 上で稼働する Adobe Flash Player における重要な情報を取得される脆弱性

2010-11-19T14:13:57+09:00

Mac OS X 上で稼働する Adobe Flash Player には、Safari が使用されている際、重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002321:Adobe Flash Player の ActiveX コントロールにおける任意のコードを実行される脆弱性

2010-11-19T14:08:54+09:00

Adobe Flash Player の ActiveX コントロールには、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002320:Microsoft Internet Explorer における無効なフラグ参照に起因する脆弱性

2010-11-19T14:04:24+09:00

Microsoft Internet Explorer には、無効なフラグ参照に起因する脆弱性が存在します。マイクロソフトセキュリティアドバイザリ (2458511) によると、この脆弱性は、オブジェクトが削除された後にそのオブジェクトにアクセスできることによる、無効なフラグ参照に起因するとのことです。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002319:Attachmate Reflection for the Web におけるクロスサイトスクリプティングの脆弱性

2010-11-19T13:55:38+09:00

Attachmate Reflection for the Web には、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002318:CUPS の cupsd 内にある ipp.c における任意のコードを実行される脆弱性

2010-11-18T15:48:09+09:00

CUPS の cupsd 内にある ipp.c は、不正な文字列のデータタイプが付与された属性値のメモリを適切に割り当てないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002317:CUPS の cupsFileOpen 関数における任意のファイルを上書きされる脆弱性

2010-11-18T15:47:50+09:00

CUPS の cupsFileOpen 関数には、/var/cache/cups/remote.cache または /var/cache/cups/job.cache ファイルの処理に不備があるため、任意のファイルを上書きされる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002316:Adobe Shockwave Player における任意のコードを実行される脆弱性

2010-11-18T15:47:30+09:00

Adobe Shockwave Player には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002315:Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性

2010-11-18T15:47:12+09:00

Adobe Shockwave Player の IML32.dll には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-4087 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002314:Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性

2010-11-18T15:46:52+09:00

Adobe Shockwave Player の dirapi.dll には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-2581、CVE-2010-4084、CVE-2010-4085 および CVE-2010-4086 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3869:certificate_system, dogtag_certificate_system: Red Hat Certificate System (RHCS) 7.3 and 8 and Dog...

2010-11-17T00:00:00+09:00

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3978:spree: Spree 0.11.x before 0.11.2 and 0.30.x before 0.30.0...

2010-11-17T00:00:00+09:00

Spree 0.11.x before 0.11.2 and 0.30.x before 0.30.0 exchanges data using JavaScript Object Notation (JSON) without a mechanism for validating requests, which allows remote attackers to obtain sensitive information via vectors involving (1) admin/products.json, (2) admin/users.json, or (3) admin/overview/get_report_data, related to a "JSON hijacking" issue.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3868:certificate_system, dogtag_certificate_system: Red Hat Certificate System (RHCS) 7.3 and 8 and Dog...

2010-11-17T00:00:00+09:00

Red Hat Certificate System (RHCS) 7.3 and 8 and Dogtag Certificate System do not require authentication for requests to decrypt SCEP one-time PINs, which allows remote attackers to obtain PINs by sniffing the network for SCEP requests and then sending decryption requests to the Certificate Authority component.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-1828:mac_os_x, mac_os_x_server: AFP Server in Apple Mac OS X 10.5.8 and 10.6.x befo...

2010-11-15T00:00:00+09:00

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon restart) via crafted reconnect authentication packets.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-1829:mac_os_x, mac_os_x_server: Directory traversal vulnerability in AFP Server in ...

2010-11-15T00:00:00+09:00

Directory traversal vulnerability in AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to execute arbitrary code by creating files that are outside the bounds of a share.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4159:mono: Untrusted search path vulnerability in metadata/loa...

2010-11-17T00:00:00+09:00

Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3864:openssl: Multiple race conditions in ssl/t1_lib.c in OpenSSL...

2010-11-17T00:00:00+09:00

Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4107:9000, color_laserjet_mfp, laserjet_4100, laserjet_4200, laserjet_4300, laserjet_5...: The default configuration of the PJL Access value i...

2010-11-17T00:00:00+09:00

The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4168:openttd: Multiple use-after-free vulnerabilities in OpenTTD ...

2010-11-17T00:00:00+09:00

Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow (1) remote attackers to cause a denial of service (invalid write and daemon crash) by abruptly disconnecting during transmission of the map from the server, related to network/network_server.cpp; (2) remote attackers to cause a denial of service (invalid read and daemon crash) by abruptly disconnecting, related to network/network_server.cpp; and (3) remote servers to cause a denial of service (invalid read and applica...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-1803:mac_os_x, mac_os_x_server: Time Machine in Apple Mac OS X 10.6.x before 10.6.5...

2010-11-15T00:00:00+09:00

Time Machine in Apple Mac OS X 10.6.x before 10.6.5 does not verify the unique identifier of its remote AFP volume, which allows remote attackers to obtain sensitive information by spoofing this volume.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3789:mac_os_x, mac_os_x_server, quicktime: QuickTime in Apple Mac OS X 10.6.x before 10.6.5 al...

2010-11-16T00:00:00+09:00

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted AVI file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002313:Adobe Flash に脆弱性

2010-11-17T16:51:26+09:00

Adobe Flash には、任意のコードが実行される脆弱性が存在します。 Adobe Flash には、メモリ破損の脆弱性が存在し、任意のコードが実行される可能性があります。なお、本脆弱性を使用した攻撃活動が確認されています。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002312:Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性

2010-11-17T16:51:05+09:00

Adobe Shockwave Player の IML32.dll には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-4089 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002311:Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性

2010-11-17T16:50:45+09:00

Adobe Shockwave Player の dirapi.dll には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-2581、CVE-2010-4084、CVE-2010-4085 および CVE-2010-4088 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002310:Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性

2010-11-17T16:50:22+09:00

Adobe Shockwave Player の dirapi.dll には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-2581、CVE-2010-4084、CVE-2010-4086 および CVE-2010-4088 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002309:Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性

2010-11-17T16:50:03+09:00

Adobe Shockwave Player の dirapi.dll には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-2581、CVE-2010-4085、CVE-2010-4086 および CVE-2010-4088 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002308:Adobe Shockwave Player の dirapi.dll におけるスタックベースのバッファオーバーフローの脆弱性

2010-11-17T16:49:45+09:00

Adobe Shockwave Player の dirapi.dll には、スタックベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002307:Adobe Shockwave Player の TextXtra.x32 におけるヒープベースのバッファオーバーフローの脆弱性

2010-11-17T16:49:25+09:00

Adobe Shockwave Player の TextXtra.x32 には、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002306:Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性

2010-11-17T16:48:14+09:00

Adobe Shockwave Player の dirapi.dll には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-4084、CVE-2010-4085、CVE-2010-4086 および CVE-2010-4088 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4269:collabtive: SQL injection vulnerability in managechat.php in Co...

2010-11-17T00:00:00+09:00

SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1843:mac_os_x, mac_os_x_server: Networking in Apple Mac OS X 10.6.2 through 10.6.4 ...

2010-11-16T00:00:00+09:00

Networking in Apple Mac OS X 10.6.2 through 10.6.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted PIM packet.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3783:mac_os_x_server: Password Server in Apple Mac OS X 10.5.8 and 10.6.x...

2010-11-16T00:00:00+09:00

Password Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly perform replication, which allows remote authenticated users to bypass verification of the current password via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4233:cmnc-200, cmnc-200_firmware: The Linux installation on the Camtron CMNC-200 Full...

2010-11-17T00:00:00+09:00

The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access via the TELNET interface.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3797:mac_os_x_server: Cross-site scripting (XSS) vulnerability in Wiki Se...

2010-11-16T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3784:mac_os_x, mac_os_x_server: The PMPageFormatCreateWithDataRepresentation API in...

2010-11-16T00:00:00+09:00

The PMPageFormatCreateWithDataRepresentation API in Printing in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle XML data, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified API calls.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4272:com_sponsorwall: SQL injection vulnerability in the Pulse Infotech S...

2010-11-17T00:00:00+09:00

SQL injection vulnerability in the Pulse Infotech Sponsor Wall (com_sponsorwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4271:impresscms: SQL injection vulnerability in ImpressCMS before 1....

2010-11-17T00:00:00+09:00

SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4010:mac_os_x, mac_os_x_server: Integer signedness error in Apple Type Services (AT...

2010-11-16T00:00:00+09:00

Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code via a crafted embedded Compact Font Format (CFF) font in a document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4215:foswiki: UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remo...

2010-11-17T00:00:00+09:00

UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3785:mac_os_x, mac_os_x_server: Buffer overflow in QuickLook in Apple Mac OS X 10.5...

2010-11-16T00:00:00+09:00

Buffer overflow in QuickLook in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Office document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1847:mac_os_x, mac_os_x_server: The kernel in Apple Mac OS X 10.6.x before 10.6.5 d...

2010-11-16T00:00:00+09:00

The kernel in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform memory management associated with terminal devices, which allows local users to cause a denial of service (system crash) via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1845:mac_os_x, mac_os_x_server: ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before ...

2010-11-16T00:00:00+09:00

ImageIO in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PSD image.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3790:mac_os_x, quicktime, mac_os_x_server: QuickTime in Apple Mac OS X 10.6.x before 10.6.5 al...

2010-11-16T00:00:00+09:00

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3793:mac_os_x, quicktime, mac_os_x_server: QuickTime in Apple Mac OS X 10.6.x before 10.6.5 al...

2010-11-16T00:00:00+09:00

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Sorenson movie file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1844:mac_os_x, mac_os_x_server: Unspecified vulnerability in Image Capture in Apple...

2010-11-16T00:00:00+09:00

Unspecified vulnerability in Image Capture in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to cause a denial of service (memory consumption and system crash) via a crafted image.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4008:chrome, libxml2, safari: libxml2 before 2.7.8, as used in Google Chrome befo...

2010-11-17T00:00:00+09:00

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1846:mac_os_x, mac_os_x_server: Heap-based buffer overflow in Image RAW in Apple Ma...

2010-11-16T00:00:00+09:00

Heap-based buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted RAW image.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3787:mac_os_x, mac_os_x_server: Heap-based buffer overflow in QuickTime in Apple Ma...

2010-11-16T00:00:00+09:00

Heap-based buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3796:mac_os_x, mac_os_x_server: Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x befo...

2010-11-16T00:00:00+09:00

Safari RSS in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not block Java applets in an RSS feed, which allows remote attackers to obtain sensitive information via a feed: URL containing an applet that performs DOM modifications.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4268:com_flipwall: SQL injection vulnerability in the Pulse Infotech F...

2010-11-17T00:00:00+09:00

SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3789:mac_os_x, mac_os_x_server: QuickTime in Apple Mac OS X 10.6.x before 10.6.5 al...

2010-11-16T00:00:00+09:00

CVE-2010-4230:cmnc-200, cmnc-200_firmware: Stack-based buffer overflow in a certain ActiveX co...

2010-11-17T00:00:00+09:00

Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4232:cmnc-200, cmnc-200_firmware: The web-based administration interface on the Camtr...

2010-11-17T00:00:00+09:00

The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // (slash slash) at the beginning of a URI, as demonstrated by the //system.html URI.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4231:cmnc-200, cmnc-200_firmware: Directory traversal vulnerability in the web-based ...

2010-11-17T00:00:00+09:00

Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3794:mac_os_x, mac_os_x_server: QuickTime in Apple Mac OS X 10.6.x before 10.6.5 ac...

2010-11-16T00:00:00+09:00

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of FlashPix image data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4011:mac_os_x_server: Dovecot in Apple Mac OS X 10.6.5 10H574 does not pr...

2010-11-17T00:00:00+09:00

Dovecot in Apple Mac OS X 10.6.5 10H574 does not properly manage memory for user names, which allows remote authenticated users to read the private e-mail of other persons in opportunistic circumstances via standard e-mail clients accessing a user's own mailbox, related to a "memory aliasing issue."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3786:mac_os_x, mac_os_x_server: QuickLook in Apple Mac OS X 10.6.x before 10.6.5 al...

2010-11-16T00:00:00+09:00

QuickLook in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Excel file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3792:mac_os_x, quicktime, mac_os_x_server: Integer signedness error in QuickTime in Apple Mac ...

2010-11-16T00:00:00+09:00

Integer signedness error in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG movie file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3798:mac_os_x, mac_os_x_server: Heap-based buffer overflow in xar in Apple Mac OS X...

2010-11-16T00:00:00+09:00

Heap-based buffer overflow in xar in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted xar archive.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4270:com_netinvoice: Directory traversal vulnerability in the nBill (com...

2010-11-17T00:00:00+09:00

Directory traversal vulnerability in the nBill (com_netinvoice) component before 2.0.9 standard edition, 2.0.10 lite edition, and 1.2_10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors related to (1) administrator/components/com_nbill/admin.nbill.php, (2) components/com_nbill/nbill.php, (3) administrator/components/com_netinvoice/admin.netinvoice.php, or (4) components/com_netinvoice/netinvoice.php, as exploited in the wild ...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4273:descargarvista_acc_imoveis: SQL injection vulnerability in imoveis.php in Desca...

2010-11-17T00:00:00+09:00

SQL injection vulnerability in imoveis.php in DescargarVista ACC IMoveis 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4234:cmnc-200, cmnc-200_firmware: The web server on the Camtron CMNC-200 Full HD IP C...

2010-11-17T00:00:00+09:00

The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to cause a denial of service (device reboot) via a large number of requests in a short time interval.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3788:mac_os_x, mac_os_x_server, quicktime: QuickTime in Apple Mac OS X 10.6.x before 10.6.5 ac...

2010-11-16T00:00:00+09:00

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of JP2 image data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4274:director_agent: reset_diragent_keys in the Common agent in IBM Syst...

2010-11-17T00:00:00+09:00

reset_diragent_keys in the Common agent in IBM Systems Director 6.2.0 has 754 permissions, which allows local users to gain privileges by leveraging system group membership.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3795:mac_os_x, mac_os_x_server: QuickTime in Apple Mac OS X 10.6.x before 10.6.5 ac...

2010-11-16T00:00:00+09:00

QuickTime in Apple Mac OS X 10.6.x before 10.6.5 accesses uninitialized memory locations during processing of GIF image data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3791:mac_os_x, quicktime, mac_os_x_server: Buffer overflow in QuickTime in Apple Mac OS X 10.6...

2010-11-16T00:00:00+09:00

Buffer overflow in QuickTime in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG movie file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002305:Adobe Shockwave Player に脆弱性

2010-11-16T14:49:50+09:00

Adobe Shockwave Player には、rcsL チャンクの処理に脆弱性が存在します。なお、本脆弱性を使用した攻撃コードが公開されています。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002304:Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性

2010-11-16T14:49:33+09:00

Pidgin の libpurple には、purple_base64_decode の戻り値を適切に検証しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002303:Pidgin の MSN プロトコルプラグインの msn_emoticon_msg 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-11-16T14:49:07+09:00

Pidgin の libpurple の MSN プロトコルプラグイン内にある slp.c の msn_emoticon_msg 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002302:複数の Mozilla 製品における任意のコードを実行される脆弱性

2010-11-16T14:48:50+09:00

複数の Mozilla 製品には、nsCSSFrameConstructor::ContentAppended、appendChild method、不正なインデックストラッキングおよび複数のフレーム作成に関する処理に不備があるため、JavaScript が有効の際、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2008-002490:Interstage Application Server におけるバッファオーバーフローの脆弱性

2010-11-16T14:48:32+09:00

Interstage Application Server には、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002301:Linux カーネルにおける RDS プロトコルの実装に脆弱性

2010-11-16T14:48:06+09:00

Linux カーネルの RDS プロトコル実装には、権限昇格の脆弱性が存在します。 Linux カーネルには、ユーザが指定したメモリアドレスを正しく検証しないことに起因する権限昇格の脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1836:mac_os_x, mac_os_x_server: Stack-based buffer overflow in CoreGraphics in Appl...

2010-11-15T00:00:00+09:00

Stack-based buffer overflow in CoreGraphics in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1378:mac_os_x: OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does...

2010-11-15T00:00:00+09:00

OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a legitimate Certification Authority.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1837:mac_os_x, mac_os_x_server: CoreText in Apple Mac OS X 10.5.8 and 10.6.x before...

2010-11-15T00:00:00+09:00

CoreText in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a PDF document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1838:mac_os_x, mac_os_x_server: Directory Services in Apple Mac OS X 10.5.8 and 10....

2010-11-15T00:00:00+09:00

Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accounts, which allows remote attackers to bypass authentication by providing a valid account name.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2638:websphere_mq: Unspecified vulnerability in IBM WebSphere MQ 7.0 b...

2010-11-15T00:00:00+09:00

Unspecified vulnerability in IBM WebSphere MQ 7.0 before 7.0.1.5 allows remote authenticated users to cause a denial of service (disk consumption) via vectors that trigger an FDC with an RM680004 Probe Id value.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1832:mac_os_x, mac_os_x_server: Stack-based buffer overflow in Apple Type Services ...

2010-11-15T00:00:00+09:00

Stack-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a crafted embedded font in a document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1833:mac_os_x, mac_os_x_server: Apple Type Services (ATS) in Apple Mac OS X 10.6.x ...

2010-11-15T00:00:00+09:00

Apple Type Services (ATS) in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted embedded font in a document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1828:mac_os_x: AFP Server in Apple Mac OS X 10.5.8 and 10.6.x befo...

2010-11-15T00:00:00+09:00

CVE-2010-1834:mac_os_x, mac_os_x_server: CFNetwork in Apple Mac OS X 10.6.x before 10.6.5 do...

2010-11-15T00:00:00+09:00

CFNetwork in Apple Mac OS X 10.6.x before 10.6.5 does not properly validate the domains of cookies, which makes it easier for remote web servers to track users by setting a cookie that is associated with a partial IP address.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1830:mac_os_x, mac_os_x_server: AFP Server in Apple Mac OS X 10.5.8 and 10.6.x befo...

2010-11-15T00:00:00+09:00

AFP Server in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 generates different error messages depending on whether a share exists, which allows remote attackers to enumerate valid share names via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1841:mac_os_x, mac_os_x_server: Disk Images in Apple Mac OS X 10.5.8 and 10.6.x bef...

2010-11-15T00:00:00+09:00

Disk Images in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted UDIF image.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1831:mac_os_x, mac_os_x_server: Buffer overflow in Apple Type Services (ATS) in App...

2010-11-15T00:00:00+09:00

Buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code via a long name of an embedded font in a document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1829:mac_os_x: Directory traversal vulnerability in AFP Server in ...

2010-11-15T00:00:00+09:00

CVE-2010-1840:mac_os_x, mac_os_x_server: Stack-based buffer overflow in the password-validat...

2010-11-15T00:00:00+09:00

Stack-based buffer overflow in the password-validation functionality in Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1842:mac_os_x, mac_os_x_server: Buffer overflow in AppKit in Apple Mac OS X 10.6.x ...

2010-11-15T00:00:00+09:00

Buffer overflow in AppKit in Apple Mac OS X 10.6.x before 10.6.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a bidirectional text string with ellipsis truncation.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0113:mobile_security: The Symantec Norton Mobile Security application 1.0...

2010-11-15T00:00:00+09:00

The Symantec Norton Mobile Security application 1.0 Beta for Android records setup details, possibly including wipe/lock credentials, in the device logs, which allows user-assisted remote attackers to obtain potentially sensitive information by leveraging the ability of a separate crafted application to read these logs.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1803:mac_os_x: Time Machine in Apple Mac OS X 10.6.x before 10.6.5...

2010-11-15T00:00:00+09:00

JVNDB-2009-002617:Zabbix サーバの trapper/trapper.c 内にある process_trap 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-11-15T15:41:48+09:00

Zabbix サーバの trapper/trapper.c 内にある process_trap 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002616:Zabbix Agent の net.c 内にある NET_TCP_LISTEN 関数における任意のコマンドを実行される脆弱性

2010-11-15T15:41:19+09:00

Zabbix Agent の net.c 内にある NET_TCP_LISTEN 関数には、FreeBSD または Solaris 上で稼働している際、EnableRemoteCommands の設定を回避され、任意のコマンドを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002615:Zabbix サーバの zbx_get_next_field 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-11-15T15:40:59+09:00

Zabbix サーバの libs/zbxcommon/str.c 内にある zbx_get_next_field 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002614:Zabbix サーバの get_history_lastid 関数における SQL インジェクションの脆弱性

2010-11-15T15:40:41+09:00

Zabbix サーバの nodewatcher コンポーネント内にある get_history_lastid 関数には、SQL インジェクションの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2009-002613:Zabbix サーバの node_process_command 関数における任意のコマンドを実行される脆弱性

2010-11-15T15:40:23+09:00

Zabbix サーバの node_process_command 関数には、任意のコマンドを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002300:Apache Portable Utility ライブラリの apr_brigade_split_line 関数におけるサービス運用妨害 (DoS) の脆弱性

2010-11-15T15:39:44+09:00

Apache HTTP Server およびその他のソフトウェアの mod_reqtimeout モジュールにて使用される Apache Portable Utility ライブラリ (APR-util) の buckets/apr_brigade.c 内にある apr_brigade_split_line 関数には、APR bucket の破損に関する処理に不備があるため、メモリリークが発生し、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002299:glibc に権限昇格の脆弱性

2010-11-15T15:39:25+09:00

glibc には、権限昇格の脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002298:Quagga の bgpd の bgp_route_refresh_receive 関数におけるスタックベースのバッファオーバーフローの脆弱性

2010-11-15T15:38:41+09:00

Quagga の bgpd の bgp_packet.c 内にある bgp_route_refresh_receive 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3893:omnifind: The administrator interface in IBM OmniFind Enterpr...

2010-11-12T00:00:00+09:00

The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka SID) value to a single IP address, which allows remote attackers to perform arbitrary administrative actions by leveraging cookie theft, related to a "session impersonation" issue.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2637:websphere_mq: IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before ...

2010-11-12T00:00:00+09:00

IBM WebSphere MQ 6.0 before 6.0.2.9 and 7.0 before 7.0.1.1 does not encrypt the username and password in the security parameters field, which allows remote attackers to obtain sensitive information by sniffing the network traffic from a .NET client application.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3897:omnifind: ESSearchApplication/palette.do in IBM OmniFind Ente...

2010-11-12T00:00:00+09:00

ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in the HTML source code, which might allow remote attackers to obtain sensitive information by leveraging read access to this file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3891:omnifind: Cross-site request forgery (CSRF) vulnerability in ...

2010-11-12T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a saveNewUser action.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4236:omnifind: Untrusted search path vulnerability in estaskwrappe...

2010-11-12T00:00:00+09:00

Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges via an ES_LIBRARY_PATH environment variable and a modified PATH environment variable, which is used during execution of the estasklight program, a different vulnerability than CVE-2010-3895.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5016:php: Integer overflow in the xml_utf8_decode function in...

2010-11-12T00:00:00+09:00

Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3890:omnifind: Cross-site scripting (XSS) vulnerability in IBM Omn...

2010-11-12T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface, as demonstrated by the command parameter to ESAdmin/collection.do.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3898:omnifind: IBM OmniFind Enterprise Edition 8.x and 9.x does no...

2010-11-12T00:00:00+09:00

IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might allow remote attackers to bypass authentication by leveraging access to other pages on the web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5017:firefox: Mozilla Firefox before 3.6 Beta 3 does not properly...

2010-11-12T00:00:00+09:00

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3895:omnifind: esRunCommand in IBM OmniFind Enterprise Edition bef...

2010-11-12T00:00:00+09:00

esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitrary command name as the first argument.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3870:php: The utf8_decode function in PHP before 5.3.4 does n...

2010-11-12T00:00:00+09:00

The utf8_decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3892:omnifind: Session fixation vulnerability in the login form in...

2010-11-12T00:00:00+09:00

Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x allows remote attackers to hijack web sessions by replaying a session ID (aka SID) value.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3896:omnifind: The ESSearchApplication directory tree in IBM OmniF...

2010-11-12T00:00:00+09:00

The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote attackers to modify the server configuration via a request to palette.do.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3899:omnifind: IBM OmniFind Enterprise Edition 8.x and 9.x perform...

2010-11-12T00:00:00+09:00

IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial of service (infinite loop) via a crafted series of documents.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3894:omnifind: Stack-based buffer overflow in the Java_com_ibm_es_...

2010-11-12T00:00:00+09:00

Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Enterprise Edition before 8.5 FP6 allows remote attackers to execute arbitrary code via a long password.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002297:Linux kernel のネットワークキューイング機能の実装における重要な情報を取得される脆弱性

2010-11-12T16:32:04+09:00

Linux kernel のネットワークキューイング機能の実装における net/sched/act_police.c の tcf_act_police_dump 関数には、特定の構造体のメンバを適切に初期化しないため、カーネルメモリから重要な情報を取得される脆弱性が存在します。本脆弱性は CVE-2010-2942 の修正が不完全だったことによる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002296:Linux kernel の do_io_submit 関数における整数オーバーフローの脆弱性

2010-11-12T16:31:46+09:00

Linux kernel の fs/aio.c 内にある do_io_submit 関数には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002295:複数の Mozilla 製品の SSL 実装における暗号保護メカニズムを回避される脆弱性

2010-11-12T16:31:25+09:00

複数の Mozilla 製品の SSL 実装には、Diffie-Hellman Ephemeral (DHE) モードの最小キーの長さを適切に設定しないため、暗号保護メカニズムを回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002294:複数の Mozilla 製品における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性

2010-11-12T16:31:09+09:00

複数の Mozilla 製品は、X.509 証明書のサブジェクトの Common Name フィールド内のワイルドカードが付与された IP アドレスを認証してしまうため、任意の SSL サーバになりすまされる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002293:複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性

2010-11-12T16:30:44+09:00

複数の Mozilla 製品には、新しいウィンドウを開き、他のドメインにページを遷移させる状況において、javascript: URL によって行われるモーダルの呼び出しを適切に処理しないため、同一生成元ポリシーを回避される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002292:Mozilla Firefox および SeaMonkey の Gopher パーサにおけるクロスサイトスクリプティングの脆弱性

2010-11-12T16:30:25+09:00

Mozilla Firefox および SeaMonkey の Gopher パーサには、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002291:Windows 上で稼働する複数の Mozilla 製品における権限昇格の脆弱性

2010-11-11T15:07:52+09:00

Windows 上で稼働する複数の Mozilla 製品には、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002290:複数の Mozilla 製品の LookupGetterOrSetter 関数における任意のコードを実行される脆弱性

2010-11-11T15:07:32+09:00

複数の Mozilla 製品の LookupGetterOrSetter 関数は、引数が不足している window.__lookupGetter__ 関数の呼び出しを適切にサポートしないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002289:複数の Mozilla 製品の nsBarProp 関数における任意のコードを実行される脆弱性

2010-11-11T15:07:16+09:00

複数の Mozilla 製品の nsBarProp 関数には、閉じられたウィンドウの locationbar プロパティに関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002288:複数の Mozilla 製品の text-rendering の機能性におけるスタックペースのバッファオーバーフローの脆弱性

2010-11-11T15:06:51+09:00

複数の Mozilla 製品の text-rendering の機能性には、スタックペースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002287:複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性

2010-11-11T15:06:35+09:00

複数の Mozilla 製品のブラウザエンジンには、サービス運用妨害(DoS)状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002286:複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性

2010-11-11T15:06:14+09:00

複数の Mozilla 製品のブラウザエンジンには、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002285:Linux 上で稼働する複数の Mozilla 製品における application-launch スクリプトに関する権限昇格の脆弱性

2010-11-11T15:05:54+09:00

Linux 上で稼働する複数の Mozilla 製品の application-launch スクリプトは、 LD_LIBRARY_PATH 内に zero-length ディレクトリ名を配置するため、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002284:複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性

2010-11-11T15:05:30+09:00

複数の Mozilla 製品のブラウザエンジンには、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3637:flash_player: An unspecified ActiveX control in Adobe Flash Playe...

2010-11-07T00:00:00+09:00

An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 (Flash10h.ocx) on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FLV video.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3334:office, open_xml_file_format_converter: Microsoft Office XP SP3, Office 2003 SP3, Office 20...

2010-11-10T00:00:00+09:00

Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbtSp records and unspecified flags, which triggers memory corruption, aka "Office Art Drawing Records Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002283:複数の Adobe 製品における任意のコードを実行される脆弱性

2010-11-10T15:34:22+09:00

複数の Adobe 製品には、DLL ハイジャック攻撃を誘導され、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002282:Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性

2010-11-10T15:34:05+09:00

Adobe RoboHelp および RoboHelp Server には、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002281:Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性

2010-11-10T15:33:41+09:00

Adobe RoboHelp および RoboHelp Server には、RoboHelp for Word が含まれた WebHelp 生成に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002280:RealNetworks RealPlayer の browser-plugin 実装における任意のプログラムを実行される脆弱性

2010-11-10T15:33:16+09:00

RealNetworks RealPlayer の browser-plugin 実装は、RecordClip メソッドへの引数内にある文字を適切に処理しないため、クライアントマシン上の任意のプログラムをダウンロードおよび実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002279:RealNetworks RealPlayer の RichFX コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性

2010-11-10T15:32:54+09:00

RealNetworks RealPlayer の RichFX コンポーネントには、スタックベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002278:RealNetworks RealPlayer の ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性

2010-11-10T15:32:37+09:00

RealNetworks RealPlayer の ActiveX コントロールには、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002277:SAP BusinessObjects Axis2 におけるデフォルトパスワードの問題

2010-11-10T15:32:18+09:00

SAP BusinessObjects の Axis2 コンポーネントに出荷時に設定されている管理用アカウントは、遠隔の第三者に利用される可能性があります。 SAP BusinessObjects 製品には、Axis2 モジュール (dswsbobje.war) が含まれています。Axis2 に出荷時に設定されている管理用アカウントは製品ドキュメント以外の方法でも入手可能です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002276:Oracle WebLogic Node Manager に脆弱性

2010-11-10T15:31:51+09:00

Oracle WebLogic Node Manager には、脆弱性が存在します。 Oracle WebLogic Node Manager には、遠隔の第三者によって UNC Path による設定ファイルの指定が可能な脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0785:websphere_application_server: Cross-site request forgery (CSRF) vulnerability in ...

2010-11-09T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3867:proftpd: Multiple directory traversal vulnerabilities in the...

2010-11-09T00:00:00+09:00

Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories, delete directories, create symlinks, and modify file timestamps via directory traversal sequences in a (1) SITE MKDIR, (2) SITE RMDIR, (3) SITE SYMLINK, or (4) SITE UTIME command.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3039:unified_communications_manager: /usr/local/cm/bin/pktCap_protectData in Cisco Unifi...

2010-11-09T00:00:00+09:00

/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs CSCti52041 and CSCti74930.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2733:forefront_unified_access_gateway: Cross-site scripting (XSS) vulnerability in the Web...

2010-11-10T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "UAG XSS Allows EOP Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3334:office, open_xml_file_format_converter: Microsoft Office XP SP3, Office 2003 SP3, Office 20...

2010-11-10T00:00:00+09:00

Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Office Art Drawing Records Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3077:horde_application_framework: Cross-site scripting (XSS) vulnerability in util/ic...

2010-11-09T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in util/icon_browser.php in the Horde Application Framework before 3.3.9 allows remote attackers to inject arbitrary web script or HTML via the subdir parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4218:enovia: Unspecified vulnerability in Web Services in IBM EN...

2010-11-09T00:00:00+09:00

Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed to the internet."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3634:flash_media_server: Unspecified vulnerability in the edge process in Ad...

2010-11-10T00:00:00+09:00

Unspecified vulnerability in the edge process in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a denial of service via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4217:tivoli_directory_server: Use-after-free vulnerability in the proxy server in...

2010-11-09T00:00:00+09:00

Use-after-free vulnerability in the proxy server in IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 and 6.1.x before 6.1.0-TIV-ITDS-FP0005 allows remote attackers to cause a denial of service (daemon crash) via an unbind request that occurs during a certain search operation.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3694:horde_application_framework: Cross-site request forgery (CSRF) vulnerability in ...

2010-11-09T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3635:flash_media_server: Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, ...

2010-11-10T00:00:00+09:00

Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to execute arbitrary code via unspecified vectors, related to a "segmentation fault vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2734:forefront_unified_access_gateway: Cross-site scripting (XSS) vulnerability in the mob...

2010-11-10T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2008-7265:proftpd: The pr_data_xfer function in ProFTPD before 1.3.2rc...

2010-11-09T00:00:00+09:00

The pr_data_xfer function in ProFTPD before 1.3.2rc3 allows remote authenticated users to cause a denial of service (CPU consumption) via an ABOR command during a data transfer.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4156:libmbfl: The mb_strcut function in Libmbfl 1.1.0, as used in...

2010-11-10T00:00:00+09:00

The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter (aka the length parameter).

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3633:flash_media_server: Memory leak in Adobe Flash Media Server (FMS) 3.0.x...

2010-11-10T00:00:00+09:00

Memory leak in Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x before 3.5.5, and 4.0.x before 4.0.1 allows attackers to cause a denial of service (memory consumption) via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3336:office, open_xml_file_format_converter: Microsoft Office XP SP3, Office 2004 and 2008 for M...

2010-11-10T00:00:00+09:00

Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2635:websphere_commerce: SQL injection vulnerability in IBM WebSphere Commer...

2010-11-09T00:00:00+09:00

SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admin Console JavaServer pages."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4220:websphere_application_server: Cross-site scripting (XSS) vulnerability in the Int...

2010-11-09T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Integrated Solution Console in the Administrative Console component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0783:websphere_application_server: Cross-site scripting (XSS) vulnerability in the Adm...

2010-11-09T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0786:websphere_application_server: The Web Services Security component in IBM WebSpher...

2010-11-09T00:00:00+09:00

The Web Services Security component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 does not properly implement the Java API for XML Web Services (aka JAX-WS), which allows remote attackers to cause a denial of service (data corruption) via a crafted JAX-WS request that leads to incorrectly encoded data.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4219:websphere_portal: Cross-site scripting (XSS) vulnerability in Semanti...

2010-11-09T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in SemanticTagService.js in IBM WebSphere Portal 6.1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2636:websphere_commerce: Multiple cross-site scripting (XSS) vulnerabilities...

2010-11-09T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in sample store pages in IBM WebSphere Commerce 7.0 before 7.0.0.1 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3936:forefront_unified_access_gateway: Cross-site scripting (XSS) vulnerability in Signurl...

2010-11-10T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "XSS in Signurl.asp Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3040:intelligent_contact_manager: Multiple stack-based buffer overflows in agent.exe ...

2010-11-09T00:00:00+09:00

Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll, (2) AgentUpgrade, (3) HandleQueryNodeInfoReq, or (4) HandleUpgradeTrace TCP packet, aka Bug IDs CSCti45698, CSCti45715, CSCti45726, and CSCti46164.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4221:proftpd: Multiple stack-based buffer overflows in the pr_net...

2010-11-09T00:00:00+09:00

Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to execute arbitrary code via vectors involving a TELNET IAC escape character to a (1) FTP or (2) FTPS server.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2573:office, powerpoint, powerpoint_viewer: Integer underflow in Microsoft PowerPoint 2002 SP3 ...

2010-11-10T00:00:00+09:00

Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Integer Underflow Causes Heap Corruption Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2732:forefront_unified_access_gateway: Open redirect vulnerability in the web interface in...

2010-11-10T00:00:00+09:00

Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka "UAG Redirection Spoofing Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3871:mahara: Cross-site scripting (XSS) vulnerability in blockty...

2010-11-09T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in blocktype/groupviews/theme/raw/groupviews.tpl in Mahara before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2572:powerpoint: Buffer overflow in Microsoft PowerPoint 2002 SP3 an...

2010-11-10T00:00:00+09:00

Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3333:office, open_xml_file_format_converter: Stack-based buffer overflow in Microsoft Office XP ...

2010-11-10T00:00:00+09:00

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4216:tivoli_directory_server: IBM Tivoli Directory Server (TDS) 6.0.0.x before 6....

2010-11-09T00:00:00+09:00

IBM Tivoli Directory Server (TDS) 6.0.0.x before 6.0.0.8-TIV-ITDS-IF0007 does not properly handle invalid buffer references in LDAP BER requests, which might allow remote attackers to cause a denial of service (daemon crash) via vectors involving a buffer that has a memory address near the maximum possible address.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0784:websphere_application_server: Cross-site scripting (XSS) vulnerability in the Adm...

2010-11-09T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3337:office: Untrusted search path vulnerability in Microsoft Of...

2010-11-10T00:00:00+09:00

Untrusted search path vulnerability in Microsoft Office 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Insecure Library Loading Vulnerability." NOTE: this might overlap CVE-2010-3141 and CVE-2010-3142.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3335:office, open_xml_file_format_converter: Microsoft Office XP SP3, Office 2003 SP3, Office 20...

2010-11-10T00:00:00+09:00

Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Drawing Exception Handling Vulnerability."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002275:RealNetworks RealPlayer における QCP ファイルの処理に関するヒープベースのバッファオーバーフローの脆弱性

2010-11-09T14:51:07+09:00

RealNetworks RealPlayer には、QCP ファイルの処理に関するヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002274:RealNetworks RealPlayer の rjrmrpln.dll における任意のコードを実行される脆弱性

2010-11-09T14:50:49+09:00

RealNetworks RealPlayer の rjrmrpln.dll は、ヒープバッファとの相互作用中に使用されるファイルコンテンツを適切に検証しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002273:RealNetworks RealPlayer の ActiveX コントロールにおける任意のコードを実行される脆弱性

2010-11-09T14:50:28+09:00

RealNetworks RealPlayer の ActiveX コントロールには、CDDA URI の構文解析の際、オブジェクトコンポーネントを適切に初期化しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002272:RealNetworks RealPlayer における任意のコードを実行される脆弱性

2010-11-09T14:50:05+09:00

RealNetworks RealPlayer には、配列インデックスエラーにより、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002271:IBM DB2 UDB の Administration Server コンポーネントにおけるバッファオーバーフローの脆弱性

2010-11-09T14:49:48+09:00

IBM DB2 UDB の Administration Server コンポーネントには、バッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002270:Oracle Sun Products Suite の Oracle Communications Messaging Server コンポーネントにおける脆弱性

2010-11-09T14:47:52+09:00

Oracle Sun Products Suite の Oracle Communications Messaging Server (Sun Java System Messaging Server) コンポーネントには、Webmail に関する処理に不備があるため、機密性および完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002269:Ghostscript にサービス運用妨害 (DoS) の脆弱性

2010-11-09T14:46:58+09:00

Ghostscript には、サービス運用妨害 (DoS) の脆弱性が存在します。 Ghostscript の gs_type2_interpret 関数には、入力値検証が不十分なことに起因するサービス運用妨害 (DoS) の脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000054:Flash Player におけるアクセス制限回避の脆弱性

2010-11-09T11:01:29+09:00

Flash Player には、アクセス制限回避が可能な脆弱性が存在します。 Flash Player が、Flash コンテンツが設置されているウェブサイトとは別のウェブサイトを参照する場合、参照されるウェブサイトがクロスドメインポリシーファイルによりアクセスを許可している必要があります。 Flash Player には、クロスドメインポリシーファイルによるアクセス制限が回避される脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 株式会社シマンテック　コンサルティングサービス本部赤嶺徳治氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3915:ichitaro: Unspecified vulnerability in JustSystems Ichitaro a...

2010-11-06T00:00:00+09:00

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3916.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4207:yui: Cross-site scripting (XSS) vulnerability in the Fla...

2010-11-07T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3436:php: fopen_wrappers.c in PHP 5.3.x through 5.3.3 might a...

2010-11-09T00:00:00+09:00

fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3650:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3702:poppler, kdegraphics, xpdf: The Gfx::getPos function in the PDF parser in xpdf ...

2010-11-05T00:00:00+09:00

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4206:chrome: Google Chrome before 7.0.517.44 accesses memory at ...

2010-11-06T00:00:00+09:00

Google Chrome before 7.0.517.44 accesses memory at an out-of-bounds array index during processing of an SVG document, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3704:poppler, kdegraphics, xpdf: The FoFiType1::parse function in fofi/FoFiType1.cc ...

2010-11-05T00:00:00+09:00

The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted Type1 font that contains a negative array index, which bypasses input validation and which triggers memory corruption.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4201:chrome: Use-after-free vulnerability in Google Chrome befor...

2010-11-06T00:00:00+09:00

Use-after-free vulnerability in Google Chrome before 7.0.517.44 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text control selections.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4091:acrobat_reader: The EScript.api plugin in Adobe Acrobat Reader 9.4....

2010-11-07T00:00:00+09:00

The EScript.api plugin in Adobe Acrobat Reader 9.4.0, 8.1.7, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4211:paypal: The PayPal app before 3.0.1 for iOS does not verify...

2010-11-09T00:00:00+09:00

The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an arbitrary certificate.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3916:ichitaro: Unspecified vulnerability in JustSystems Ichitaro a...

2010-11-06T00:00:00+09:00

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3915.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3640:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3648:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3641:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4001:gromacs: DISPUTED GMXRC.bash in Gromacs 4.5.1 and earl...

2010-11-06T00:00:00+09:00

** DISPUTED ** GMXRC.bash in Gromacs 4.5.1 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: CVE disputes this issue because the GMXLDLIB value is always added to the beginning of LD_LIBRARY_PATH at a later point in the script.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3647:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3644:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4198:chrome: Google Chrome before 7.0.517.44 does not properly h...

2010-11-06T00:00:00+09:00

Google Chrome before 7.0.517.44 does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3646:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3642:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4212:usaa: The USAA application 3.0 for Android stores a mirro...

2010-11-09T00:00:00+09:00

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4199:chrome: Google Chrome before 7.0.517.44 does not properly p...

2010-11-06T00:00:00+09:00

Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SVG document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4214:wells_fargo_mobile: The Wells Fargo Mobile application 1.1 for Android ...

2010-11-09T00:00:00+09:00

The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3638:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Mac OS X, when Safari is used, allows attackers to obtain sensitive information via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3709:php: The ZipArchive::getArchiveComment function in PHP 5...

2010-11-09T00:00:00+09:00

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4200:chrome: Google Chrome before 7.0.517.44 reads from invalid ...

2010-11-06T00:00:00+09:00

Google Chrome before 7.0.517.44 reads from invalid memory locations during processing of XPath expressions, which allows remote attackers to cause a denial of service via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4213:bank_of_america: The Bank of America application 2.12 for Android st...

2010-11-09T00:00:00+09:00

The Bank of America application 2.12 for Android stores a security question's answer in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4204:chrome: Google Chrome before 7.0.517.44 accesses a frame ob...

2010-11-06T00:00:00+09:00

Google Chrome before 7.0.517.44 accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3636:flash_player: Adobe Flash Player before 9.0.289.0 and 10.x before...

2010-11-07T00:00:00+09:00

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3649:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4205:chrome: Google Chrome before 7.0.517.44 does not properly h...

2010-11-06T00:00:00+09:00

Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3646:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3852:luci: The default configuration of Luci 0.22.4 and earlie...

2010-11-06T00:00:00+09:00

The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses "[INSERT SECRET HERE]" as its secret key for cookies, which makes it easier for remote attackers to bypass repoze.who authentication via a forged ticket cookie.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3639:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4005:1.5.2: The (1) tomboy and (2) tomboy-panel scripts in GNOM...

2010-11-06T00:00:00+09:00

The (1) tomboy and (2) tomboy-panel scripts in GNOME Tomboy 1.5.2 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: vector 1 exists because of an incorrect fix for CVE-2005-4790.2.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3652:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3650.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4197:chrome: Use-after-free vulnerability in Google Chrome befor...

2010-11-06T00:00:00+09:00

Use-after-free vulnerability in Google Chrome before 7.0.517.44 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3643:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4203:chrome: WebM libvpx (aka the VP8 Codec SDK), as used in Goo...

2010-11-06T00:00:00+09:00

WebM libvpx (aka the VP8 Codec SDK), as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-4184:netsupport_manager: NetSupport Manager (NSM) before 11.00.0005 sends HT...

2010-11-05T00:00:00+09:00

NetSupport Manager (NSM) before 11.00.0005 sends HTTP headers with cleartext fields containing details about client machines, which allows remote attackers to obtain potentially sensitive information by sniffing the network.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002268:複数の Oracle 製品の Networking コンポーネントにおける脆弱性

2010-11-08T16:07:58+09:00

複数の Oracle 製品の Networking コンポーネントには、機密性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002267:複数の Oracle 製品の Networking コンポーネントにおける脆弱性

2010-11-08T16:07:39+09:00

JVNDB-2010-002266:複数の Oracle 製品の JNDI コンポーネントにおける脆弱性

2010-11-08T16:07:21+09:00

複数の Oracle 製品の JNDI コンポーネントには、機密性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002265:複数の Oracle 製品の Networking コンポーネントにおける脆弱性

2010-11-08T16:06:57+09:00

複数の Oracle 製品の Networking コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002264:複数の Oracle 製品の Networking コンポーネントにおける脆弱性

2010-11-08T16:06:36+09:00

JVNDB-2010-002263:複数の Oracle 製品の Networking コンポーネントにおける脆弱性

2010-11-08T16:06:16+09:00

JVNDB-2010-002262:複数の Oracle 製品の Swing コンポーネントにおける脆弱性

2010-11-08T16:05:48+09:00

複数の Oracle 製品の Swing コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002261:複数の Oracle 製品の Networking コンポーネントにおける脆弱性

2010-11-08T16:05:26+09:00

JVNDB-2010-002260:複数の Oracle 製品の CORBA コンポーネントにおける脆弱性

2010-11-08T16:05:04+09:00

複数の Oracle 製品の CORBA コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002259:複数の Oracle 製品の Deployment Toolkit コンポーネントにおける脆弱性

2010-11-08T16:04:39+09:00

複数の Oracle 製品の Deployment Toolkit コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3645:flash_player: Unspecified vulnerability in Adobe Flash Player bef...

2010-11-07T00:00:00+09:00

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3916:ichitaro, ichitaro_government: Unspecified vulnerability in JustSystems Ichitaro a...

2010-11-06T00:00:00+09:00

Unspecified vulnerability in JustSystems Ichitaro and Ichitaro Government allows remote attackers to execute arbitrary code via a crafted document, a different vulnerability than CVE-2010-3915.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3637:flash_player: An unspecified ActiveX control in Adobe Flash Playe...

2010-11-07T00:00:00+09:00

An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3998:banshee: The (1) banshee-1 and (2) muinshee scripts in Bansh...

2010-11-06T00:00:00+09:00

The (1) banshee-1 and (2) muinshee scripts in Banshee 1.8.0 and earlier place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4000:gnome-shell: gnome-shell in GNOME Shell 2.31.5 places a zero-len...

2010-11-06T00:00:00+09:00

gnome-shell in GNOME Shell 2.31.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3915:ichitaro, ichitaro_government: Unspecified vulnerability in JustSystems Ichitaro a...

2010-11-06T00:00:00+09:00

CVE-2010-3852:conga, luci: The default configuration of Luci 0.22.4 and earlie...

2010-11-06T00:00:00+09:00

CVE-2010-2477:paste: Multiple cross-site scripting (XSS) vulnerabilities...

2010-11-06T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1523:winamp: Multiple heap-based buffer overflows in vp6.w5s (ak...

2010-11-06T00:00:00+09:00

Multiple heap-based buffer overflows in vp6.w5s (aka the VP6 codec) in Winamp before 5.59 Beta build 3033 might allow remote attackers to execute arbitrary code via a crafted VP6 (1) video file or (2) video stream.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5015:turbogears2: The URL dispatch mechanism in TurboGears2 (aka tg2)...

2010-11-06T00:00:00+09:00

The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5014:turbogears2: The default quickstart configuration of TurboGears2...

2010-11-06T00:00:00+09:00

The default quickstart configuration of TurboGears2 (aka tg2) before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication via a forged authorization cookie, a related issue to CVE-2010-3852.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4092:shockwave_player: Use-after-free vulnerability in an unspecified comp...

2010-11-05T00:00:00+09:00

Use-after-free vulnerability in an unspecified compatibility component in Adobe Shockwave Player 11.5.9.615 allows user-assisted remote attackers to execute arbitrary code via a crafted web site, related to the Shockwave Settings window and an unloaded library. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4186:oasys_professional: SQL injection vulnerability in process.asp in Onlin...

2010-11-05T00:00:00+09:00

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4185:energine: SQL injection vulnerability in index.php in Energin...

2010-11-05T00:00:00+09:00

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3704:kdegraphics, xpdf, poppler: The FoFiType1::parse function in fofi/FoFiType1.cc ...

2010-11-05T00:00:00+09:00

CVE-2010-3703:poppler: The PostScriptFunction::PostScriptFunction function...

2010-11-05T00:00:00+09:00

The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service (crash) via a PDF file that triggers an uninitialized pointer dereference.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3702:kdegraphics, xpdf, poppler: The Gfx::getPos function in the PDF parser in xpdf ...

2010-11-05T00:00:00+09:00

CVE-2010-4184:netsupport_manager_client: NetSupport Manager (NSM) before 11.00.0005 sends HT...

2010-11-05T00:00:00+09:00

CVE-2010-4183:htmlpurifier: Multiple cross-site scripting (XSS) vulnerabilities...

2010-11-05T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading Style Sheets (CSS) property, a different vulnerability than CVE-2010-2479.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3999:gnucash: gnc-test-env in GnuCash 2.3.15 and earlier places a...

2010-11-05T00:00:00+09:00

gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3996:festival: festival_server in Centre for Speech Technology Res...

2010-11-05T00:00:00+09:00

festival_server in Centre for Speech Technology Research (CSTR) Festival, probably 2.0.95-beta and earlier, places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3962:ie: Use-after-free vulnerability in Microsoft Internet ...

2010-11-05T00:00:00+09:00

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences, aka an "invalid flag reference" issue, as exploited in the wild in November 2010.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3913:active!_mail: CRLF injection vulnerability in TransWARE Active! m...

2010-11-05T00:00:00+09:00

CRLF injection vulnerability in TransWARE Active! mail 6 build 6.40.010047750 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3863:jsecurity, shiro: Apache Shiro before 1.1.0, and JSecurity 0.9.x, doe...

2010-11-05T00:00:00+09:00

Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows remote attackers to bypass intended access restrictions via a crafted request, as demonstrated by the /./account/index.jsp URI.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3846:cvs: Array index error in the apply_rcs_change function ...

2010-11-05T00:00:00+09:00

Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3764:bugzilla: The Old Charts implementation in Bugzilla 2.12 thro...

2010-11-05T00:00:00+09:00

The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, which allows remote attackers to obtain sensitive information via a modified URL.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3172:bugzilla: CRLF injection vulnerability in Bugzilla before 3.2...

2010-11-05T00:00:00+09:00

CRLF injection vulnerability in Bugzilla before 3.2.9, 3.4.x before 3.4.9, 3.6.x before 3.6.3, and 4.0.x before 4.0rc1, when Server Push is enabled in a web browser, allows remote attackers to inject arbitrary HTTP headers and content, and conduct HTTP response splitting attacks, via a crafted URL.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4209:yui: Cross-site scripting (XSS) vulnerability in the Fla...

2010-11-07T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4208:yui: Cross-site scripting (XSS) vulnerability in the Fla...

2010-11-07T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002258:複数の Oracle 製品の Java Web Start コンポーネントにおける脆弱性

2010-11-05T15:07:35+09:00

複数の Oracle 製品の Java Web Start コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002257:複数の Oracle 製品の Java Web Start コンポーネントにおける脆弱性

2010-11-05T15:06:52+09:00

JVNDB-2010-002256:複数の Oracle 製品の Swing コンポーネントにおける脆弱性

2010-11-05T15:06:29+09:00

JVNDB-2010-002255:複数の Oracle 製品の Sound コンポーネントにおける脆弱性

2010-11-05T15:06:11+09:00

複数の Oracle 製品の Sound コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002254:複数の Oracle 製品の Sound コンポーネントにおける脆弱性

2010-11-05T15:05:53+09:00

JVNDB-2010-002253:複数の Oracle 製品の New Java Plug-in コンポーネントにおける脆弱性

2010-11-05T15:05:21+09:00

複数の Oracle 製品の New Java Plug-in コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002252:複数の Oracle 製品の Java Web Start コンポーネントにおける脆弱性

2010-11-05T15:05:03+09:00

JVNDB-2010-002251:複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性

2010-11-05T15:03:30+09:00

複数の Oracle 製品の Java Runtime Environment コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002250:複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性

2010-11-05T15:03:09+09:00

JVNDB-2010-002249:複数の Oracle 製品の Deployment コンポーネントにおける脆弱性

2010-11-05T15:02:52+09:00

複数の Oracle 製品の Deployment コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3611:dhcp: ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2,...

2010-11-04T00:00:00+09:00

ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service (crash) via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4182:windows_2003_server, windows_7, windows_vista, windows_xp: Untrusted search path vulnerability in the Data Acc...

2010-11-04T00:00:00+09:00

Untrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) in Microsoft Windows XP Professional SP3, Windows Server 2003 R2 Enterprise Edition SP3, Windows Vista Business SP1, and Windows 7 Professional allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse msjet49.dll that is located in the same folder as a file that is processed by dao360.dll. NOTE: the provenance of this information i...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2941:cups: ipp.c in cupsd in CUPS 1.4.4 and earlier does not p...

2010-11-05T00:00:00+09:00

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4181:yaws: Directory traversal vulnerability in Yaws 1.89 allo...

2010-11-04T00:00:00+09:00

Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backslash) and other sequences.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3851:libguestfs: libguestfs before 1.5.23, as used in virt-v2v, virt...

2010-11-04T00:00:00+09:00

libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, related to lack of support for a disk format specifier.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002248:複数の Oracle 製品の CORBA コンポーネントにおける脆弱性

2010-11-04T15:33:53+09:00

JVNDB-2010-002247:複数の Oracle 製品の 2D コンポーネントにおける脆弱性

2010-11-04T15:33:32+09:00

複数の Oracle 製品の 2D コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002246:複数の Oracle 製品の 2D コンポーネントにおける脆弱性

2010-11-04T15:33:13+09:00

JVNDB-2010-002245:複数の Oracle 製品の 2D コンポーネントにおける脆弱性

2010-11-04T15:32:52+09:00

JVNDB-2010-002244:複数の Oracle 製品の 2D コンポーネントにおける脆弱性

2010-11-04T15:32:34+09:00

JVNDB-2010-002243:複数の Oracle 製品の 2D コンポーネントにおける脆弱性

2010-11-04T15:32:12+09:00

JVNDB-2010-002242:複数の Oracle 製品の 2D コンポーネントにおける脆弱性

2010-11-04T15:31:56+09:00

JVNDB-2010-002241:Oracle Solaris および OpenSolaris における USB の処理に関する脆弱性

2010-11-04T15:31:37+09:00

Oracle Solaris および OpenSolaris には、USB に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002240:Oracle Solaris および OpenSolaris における Device Drivers の処理に関する脆弱性

2010-11-04T15:31:19+09:00

Oracle Solaris および OpenSolaris には、Device Drivers に関する処理に不備があるため、完全性および可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002239:Oracle Solaris における Solaris Zones の処理に関する脆弱性

2010-11-04T15:30:57+09:00

Oracle Solaris には、Solaris Zones に関する処理に不備があるため、機密性および完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000053:一太郎シリーズにおける任意のコードが実行される脆弱性

2010-11-04T14:02:17+09:00

ジャストシステムが提供する一太郎シリーズには、任意のコードを実行される脆弱性が存在します。なお、本脆弱性は JVN#19173793 および過去に JVN で公開した問題とは異なります。ジャストシステムが提供する一太郎シリーズには、任意のコードを実行される脆弱性が存在します。詳しくは開発者が提供する情報をご確認ください。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000052:一太郎シリーズにおける任意のコードが実行される脆弱性

2010-11-04T14:01:54+09:00

ジャストシステムが提供する一太郎シリーズには、任意のコードを実行される脆弱性が存在します。なお、本脆弱性は JVN#01948274 および過去に JVN で公開した問題とは異なります。ジャストシステムが提供する一太郎シリーズには、任意のコードを実行される脆弱性が存在します。詳しくは開発者が提供する情報をご確認ください。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4151:deluxebb: SQL injection vulnerability in misc.php in DeluxeBB...

2010-11-03T00:00:00+09:00

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4153:crossftp_pro: Directory traversal vulnerability in CrossFTP Pro 1...

2010-11-03T00:00:00+09:00

Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4006:links, wsn_links: Multiple SQL injection vulnerabilities in search.ph...

2010-11-03T00:00:00+09:00

Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4154:ftp_voyager: Directory traversal vulnerability in Rhino Software...

2010-11-03T00:00:00+09:00

Directory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4152:4site_cms: SQL injection vulnerability in catalog/index.shtml ...

2010-11-03T00:00:00+09:00

SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4155:exv2: Multiple cross-site scripting (XSS) vulnerabilities...

2010-11-03T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to (2) modules/news/archive.php, (3) modules/news/topics.php, and (4) modules/contact/index.php, different vectors than CVE-2007-1965.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-4030:insight_control_performance_management: Cross-site scripting (XSS) vulnerability in HP Insi...

2010-11-02T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-4031:insight_control_performance_management: Unspecified vulnerability in HP Insight Control Per...

2010-11-02T00:00:00+09:00

Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-4032:insight_control_performance_management: Cross-site request forgery (CSRF) vulnerability in ...

2010-11-02T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3914:gvim: Untrusted search path vulnerability in VIM Developm...

2010-11-03T00:00:00+09:00

Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3977:cforms: Multiple cross-site scripting (XSS) vulnerabilities...

2010-11-03T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-4146:reflection_for_the_web: Cross-site scripting (XSS) vulnerability in Attachm...

2010-11-02T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in Attachmate Reflection for the Web 2008 R2 (builds 10.1.569 and earlier), 2008 R1, and 9.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2583:ssl-vpn_end-point_interrogator/installer_activex_control: Stack-based buffer overflow in SonicWALL SSL-VPN En...

2010-11-03T00:00:00+09:00

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002238:Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性

2010-11-02T15:53:52+09:00

Oracle Sun Products Suite の Oracle iPlanet Web Server (Sun Java System Web Server) コンポーネントには、 DAV (WebDAV) に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002237:Oracle Solaris および OpenSolaris における SCSI enclosure services デバイスドライバの処理に関する脆弱性

2010-11-02T15:53:36+09:00

Oracle Solaris および OpenSolaris には、SCSI enclosure services デバイスドライバに関する処理に不備があるため、完全性および可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002236:Oracle Solaris および OpenSolaris における ZFS の処理に関する脆弱性

2010-11-02T15:53:12+09:00

Oracle Solaris および OpenSolaris には、ZFS に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002235:Oracle Solaris および OpenSolaris における InfiniBand の処理に関する脆弱性

2010-11-02T15:52:49+09:00

Oracle Solaris および OpenSolaris には、InfiniBand に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002234:Oracle Solaris および OpenSolaris の Solaris コンポーネントにおける脆弱性

2010-11-02T15:52:32+09:00

Oracle Solaris および OpenSolaris の Solaris コンポーネントには、 Kernel/Disk Driver に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002233:Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性

2010-11-02T15:52:15+09:00

Oracle Sun Products Suite の Oracle iPlanet Web Server (Sun Java System Web Server) コンポーネントには、 Web Container に関する処理に不備があるため、完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002232:Oracle Solaris および OpenSolaris における Kernel/X86 の処理に関する脆弱性

2010-11-02T15:51:55+09:00

Oracle Solaris および OpenSolaris には、Kernel/X86 に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002231:Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性

2010-11-02T15:51:35+09:00

Oracle Sun Products Suite の Oracle iPlanet Web Server (Sun Java System Web Server) コンポーネントには、 Administration に関する処理に不備があるため、機密性および完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002230:Oracle Solaris における su の処理に関する脆弱性

2010-11-02T15:51:12+09:00

Oracle Solaris には、su に関する処理に不備があるため、機密性および完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4032:insight_control_power_management: Cross-site request forgery (CSRF) vulnerability in ...

2010-11-02T00:00:00+09:00

CVE-2010-4100:insight_control_performance_management: Unspecified vulnerability in HP Insight Control Per...

2010-11-02T00:00:00+09:00

Unspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows remote attackers to read arbitrary files via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4144:kisisel_radyo_script: SQL injection vulnerability in radyo.asp in Kisisel...

2010-11-02T00:00:00+09:00

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4031:insight_control_power_management: Unspecified vulnerability in HP Insight Control Per...

2010-11-02T00:00:00+09:00

CVE-2010-4104:insight_orchestration: Unspecified vulnerability in HP Insight Orchestrati...

2010-11-02T00:00:00+09:00

Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to read arbitrary files via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4142:realwin: Multiple stack-based buffer overflows in DATAC Real...

2010-11-02T00:00:00+09:00

Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCPC_INITIALIZE, (2) SCPC_INITIALIZE_RF, or (3) SCPC_TXTEVENT packet. NOTE: it was later reported that 1.06 is also affected by one of these requests.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4105:insight_orchestration: Unspecified vulnerability in HP Insight Orchestrati...

2010-11-02T00:00:00+09:00

Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and obtain sensitive information or modify data, via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4106:insight_control_for_linux: Cross-site request forgery (CSRF) vulnerability in ...

2010-11-02T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4030:insight_control_power_management: Cross-site scripting (XSS) vulnerability in HP Insi...

2010-11-02T00:00:00+09:00

CVE-2010-4103:insight_managed_system_setup_wizard: Unspecified vulnerability in HP Insight Managed Sys...

2010-11-02T00:00:00+09:00

Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4102:insight_recovery: Unspecified vulnerability in HP Insight Recovery be...

2010-11-02T00:00:00+09:00

Unspecified vulnerability in HP Insight Recovery before 6.2 allows remote attackers to read arbitrary files via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4101:insight_recovery: Cross-site scripting (XSS) vulnerability in HP Insi...

2010-11-02T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Insight Recovery before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4143:phpcheckz: SQL injection vulnerability in chart.php in phpChec...

2010-11-02T00:00:00+09:00

SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4147:avactis_shopping_cart: Multiple SQL injection vulnerabilities in Pentasoft...

2010-11-02T00:00:00+09:00

Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers to execute arbitrary SQL commands via the User-Agent header to (1) index.php and (2) product-list.php.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4148:anyconnect: Directory traversal vulnerability in AnyConnect 1.2...

2010-11-02T00:00:00+09:00

Directory traversal vulnerability in AnyConnect 1.2.3.0, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4146:reflection_for_the_web_2008: Cross-site scripting (XSS) vulnerability in Attachm...

2010-11-02T00:00:00+09:00

CVE-2010-4145:kisisel_radyo_script: Kisisel Radyo Script stores sensitive information u...

2010-11-02T00:00:00+09:00

Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4149:fresh_ftp: Directory traversal vulnerability in FreshWebMaster...

2010-11-02T00:00:00+09:00

Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002229:Oracle Solaris における Live Upgrade の処理に関する脆弱性

2010-11-01T15:41:58+09:00

Oracle Solaris には、Live Upgrade に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002228:Oracle Solaris における Scheduler の処理に関する脆弱性

2010-11-01T15:41:41+09:00

Oracle Solaris には、Scheduler に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002227:Oracle Fusion Middleware の Forms コンポーネントにおける脆弱性

2010-11-01T15:41:25+09:00

Oracle Fusion Middleware の Forms コンポーネントには、完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002226:Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性

2010-11-01T15:41:06+09:00

Oracle Fusion Middleware の Cabo/UIX コンポーネントには、完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002225:Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性

2010-11-01T15:40:39+09:00

JVNDB-2010-002224:Oracle Fusion Middleware の Cabo/UIX コンポーネントにおける脆弱性

2010-11-01T15:39:37+09:00

JVNDB-2010-002223:Oracle Fusion Middleware の OID コンポーネントにおける脆弱性

2010-11-01T15:39:14+09:00

Oracle Fusion Middleware の OID コンポーネントには、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002222:複数の Oracle 製品の Perl コンポーネントにおける脆弱性

2010-11-01T15:38:39+09:00

複数の Oracle 製品の Perl コンポーネントには、完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002221:Oracle Database Server の Core RDBMS コンポーネントにおける脆弱性

2010-11-01T15:37:28+09:00

Oracle Database Server の Core RDBMS コンポーネントには、機密性および完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002220:Oracle Database Server の XDK コンポーネントにおける脆弱性

2010-11-01T15:37:08+09:00

Oracle Database Server の XDK コンポーネントには、完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000051:GVim における DLL 読み込みに関する脆弱性

2010-11-01T12:00:52+09:00

GVim には、DLL 読み込みに関する脆弱性が存在します。 GVim は、テキストエディタです。GVim はテキストファイルを開く際に、特定の DLL を読み込みます。GVim には、DLL を読み込む際の DLL 検索パスに問題があり、意図しない DLL を読み込んでしまう脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 塩月誠人氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4085:shockwave_player: dirapi.dll in Adobe Shockwave Player before 11.5.9....

2010-10-29T00:00:00+09:00

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4086, and CVE-2010-4088.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4087:shockwave_player: IML32.dll in Adobe Shockwave Player before 11.5.9.6...

2010-10-29T00:00:00+09:00

IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-4089.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4088:shockwave_player: dirapi.dll in Adobe Shockwave Player before 11.5.9....

2010-10-29T00:00:00+09:00

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4086.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4090:shockwave_player: Adobe Shockwave Player before 11.5.9.615 allows att...

2010-10-29T00:00:00+09:00

Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4089:shockwave_player: IML32.dll in Adobe Shockwave Player before 11.5.9.6...

2010-10-29T00:00:00+09:00

IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-4087.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4086:shockwave_player: dirapi.dll in Adobe Shockwave Player before 11.5.9....

2010-10-29T00:00:00+09:00

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4088.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3700:acegi-security, springsource_spring_security, websphere_application_server: VMware SpringSource Spring Security 2.x before 2.0....

2010-10-29T00:00:00+09:00

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Application Server (WAS) 6.1 and 7.0, allows remote attackers to bypass security constraints via a path parameter.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4084:shockwave_player: dirapi.dll in Adobe Shockwave Player before 11.5.9....

2010-10-29T00:00:00+09:00

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4085, CVE-2010-4086, and CVE-2010-4088.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3654:flash_player, acrobat, acrobat_reader: Adobe Flash Player 10.1.85.3 and earlier on Windows...

2010-10-29T00:00:00+09:00

Adobe Flash Player 10.1.85.3 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.95.2 and earlier on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3655:shockwave_player: Stack-based buffer overflow in dirapi.dll in Adobe ...

2010-10-29T00:00:00+09:00

Stack-based buffer overflow in dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3036:ciscoworks_common_services, ciscoworks_lan_management_solution, qos_policy_manage...: Multiple buffer overflows in the authentication fun...

2010-10-29T00:00:00+09:00

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2582:shockwave_player: Heap-based buffer overflow in Adobe Shockwave Playe...

2010-10-29T00:00:00+09:00

Heap-based buffer overflow in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2581:shockwave_player: dirapi.dll in Adobe Shockwave Player before 11.5.9....

2010-10-29T00:00:00+09:00

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-4084, CVE-2010-4085, CVE-2010-4086, and CVE-2010-4088.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

[Update]CVE-2010-3765:firefox: Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x thro...

2010-10-28T00:00:00+09:00

Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, when JavaScript is enabled, allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption, as exploited in the wild in October 2010 by the Belmoo malware.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002219:Oracle Database Server の Job Queue コンポーネントにおける脆弱性

2010-10-29T16:35:28+09:00

Oracle Database Server の Job Queue コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002218:Oracle Database Server の Change Data Capture コンポーネントにおける脆弱性

2010-10-29T16:34:53+09:00

Oracle Database Server の Change Data Capture コンポーネントには、機密性および完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002217:Oracle Database Server の OLAP コンポーネントにおける脆弱性

2010-10-29T16:34:27+09:00

Oracle Database Server の OLAP コンポーネントには、機密性および完全性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002216:Oracle Database Server の Java Virtual Machine コンポーネントにおける脆弱性

2010-10-29T16:34:05+09:00

Oracle Database Server の Java Virtual Machine コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002215:複数の Oracle 製品の Database Control コンポーネントにおける脆弱性

2010-10-29T16:33:36+09:00

複数の Oracle 製品の Database Control コンポーネントには、機密性、完全性、可用性に影響のある脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002214:ActiveCollab のアクセス制御機能における問題

2010-10-29T16:33:06+09:00

ActiveCollab には、ログインユーザが、許可されていないプロジェクトやファイルを閲覧できたり、作成できたりする問題が存在します。 ActiveCollab には、細工された URL にアクセスすることで、ActiveCollab のログインユーザが、許可されていないプロジェクトへ参加したり、ファイルを削除したりする脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002213:Microsoft Windows Server の Microsoft Cluster Service 内にあるユーザインターフェイスにおけるディスク上のデータを読まれるまたは編集される脆弱性

2010-10-29T16:32:01+09:00

Microsoft Windows Server の Microsoft Cluster Service 内にあるユーザインターフェイスには、フェールオーバークラスタの一部として共有される新しいクラスタディスクに対する管理者用共有のアクセス許可を適切に設定しないため、ディスク上のデータを読まれる、または編集される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002212:複数の Microsoft 製品の UpdateFrameTitleForDocument メソッドにおけるスタックベースのバッファオーバーフローの脆弱性

2010-10-29T16:31:32+09:00

複数の Microsoft 製品の Microsoft Foundation Class (MFC) Library の mfc42.dll 内にある CFrameWnd クラスの UpdateFrameTitleForDocument メソッドには、スタックベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002211:複数の Microsoft 製品の Secure Channel におけるサービス運用妨害 (DoS) の脆弱性

2010-10-29T16:30:56+09:00

複数の Microsoft 製品の Secure Channel には、IIS を使用する際、TLS および SSL サーバのハンドシェイク処理中におけるクライアント認証の手続き処理を適切に行わないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002210:複数の Microsoft 製品の Remote Procedure Call Subsystem におけるスタックベースのバッファオーバーフローの脆弱性

2010-10-29T16:30:12+09:00

複数の Microsoft 製品の Remote Procedure Call Subsystem (RPCSS) には、スタックベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002209:Microsoft Windows Media Player における任意のコードを実行される脆弱性

2010-10-29T16:27:32+09:00

Microsoft Windows Media Player は、ブラウザの再読み込み中に、オブジェクトの割り当て処理を適切に解除しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000050:Active! mail 6 における HTTP ヘッダインジェクションの脆弱性

2010-10-29T16:01:30+09:00

トランスウエアが提供する Active! mail 6 には、HTTP ヘッダインジェクションの脆弱性が存在します。トランスウエアが提供する Active! mail 6 は、ウェブメールです。Active! mail 6 には、HTTP ヘッダインジェクションの脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 株式会社日立ソリューションズ池内丈人氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3989:insight_control_virtual_machine_management: Cross-site request forgery (CSRF) vulnerability in ...

2010-10-28T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3988:insight_control_virtual_machine_management: Unspecified vulnerability in HP Insight Control Vir...

2010-10-28T00:00:00+09:00

Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to bypass intended access restrictions and cause a denial of service via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4025:palm_webos: Unspecified vulnerability in Doc Viewer in HP Palm ...

2010-10-28T00:00:00+09:00

Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a crafted document, as demonstrated by a Word document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3991:insight_control_server_migration, insight_control_server_migration6.0.1: Cross-site scripting (XSS) vulnerability in HP Insi...

2010-10-28T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3992:insight_control_server_migration, insight_control_server_migration6.0.1: Unspecified vulnerability in HP Insight Control Ser...

2010-10-28T00:00:00+09:00

Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote authenticated users to gain privileges via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3990:virtual_server_environment: Unspecified vulnerability in HP Virtual Server Envi...

2010-10-28T00:00:00+09:00

Unspecified vulnerability in HP Virtual Server Environment before 6.2 allows remote attackers to read arbitrary files via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3994:hp, version_control_repository_manager: Cross-site scripting (XSS) vulnerability in HP Vers...

2010-10-28T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3987:insight_control_virtual_machine_management: Cross-site scripting (XSS) vulnerability in HP Insi...

2010-10-28T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4027:palm_webos: Unspecified vulnerability in the camera application...

2010-10-28T00:00:00+09:00

Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0112:im_manager: Multiple SQL injection vulnerabilities in the Admin...

2010-10-28T00:00:00+09:00

Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via (1) the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and SQL statements contained within a certain report file; (2) unspecified parameters in a DetailReportGroup (aka DetailReportGroup.lgx) action to rdpageimlogic.aspx; the (3) selclause, (4) whereTrendT...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4023:insight_control_power_management: Cross-site scripting (XSS) vulnerability in HP Insi...

2010-10-28T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3993:insight_control_server_migration, insight_control_server_migration6.0.1: Unspecified vulnerability in HP Insight Control Ser...

2010-10-28T00:00:00+09:00

Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to obtain sensitive information or modify data via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4024:insight_control_power_management: Cross-site request forgery (CSRF) vulnerability in ...

2010-10-28T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4121:tivoli_provisioning_manager_os_deployment: DISPUTED The TCP-to-ODBC gateway in IBM Tivol...

2010-10-28T00:00:00+09:00

** DISPUTED ** The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020. NOTE: the vendor disputes this issue, stating that the "default Microsoft Access database is not password protected because it is intended to be used for evaluation purposes only."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4026:palm_webos: Unspecified vulnerability in the service API in HP ...

2010-10-28T00:00:00+09:00

Unspecified vulnerability in the service API in HP Palm webOS 1.4.1 allows local users to gain privileges by leveraging the ability to perform certain service calls.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4028:loadrunner, loadrunner_web_tours: Unspecified vulnerability in LoadRunner Web Tours 9...

2010-10-28T00:00:00+09:00

Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4029:storage_essentials: Unspecified vulnerability in HP Storage Essentials ...

2010-10-28T00:00:00+09:00

Unspecified vulnerability in HP Storage Essentials before 6.3.0, when LDAP authentication is enabled, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4120:tivoli_access_manager_for_e-business: Multiple cross-site scripting (XSS) vulnerabilities...

2010-10-28T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002208:複数の Microsoft 製品の Comctl32.dll におけるヒープベースのバッファオーバーフローの脆弱性

2010-10-28T16:35:19+09:00

複数の Microsoft 製品の Comctl32.dll には、サードパーティの SVG ビューアを使用する際、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002207:複数の Microsoft 製品における任意のコードを実行される脆弱性

2010-10-28T16:35:01+09:00

複数の Microsoft 製品には、レコード情報を適切に検証しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002206:Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性

2010-10-28T16:34:45+09:00

Microsoft Excel および Microsoft Office は、バイナリファイル形式の情報を適切に検証しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002205:複数の Microsoft 製品における任意のコードを実行される脆弱性

2010-10-28T16:34:27+09:00

複数の Microsoft 製品は、レコード情報を適切に検証しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002204:Microsoft Excel における任意のコードを実行される脆弱性

2010-10-28T16:34:12+09:00

Microsoft Excel は、レコード情報を適切に検証しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002203:複数の Microsoft 製品における任意のコードを実行される脆弱性

2010-10-28T16:33:52+09:00

JVNDB-2010-002202:複数の Microsoft 製品における任意のコードを実行される脆弱性

2010-10-28T16:33:29+09:00

JVNDB-2010-002201:複数の Microsoft 製品における任意のコードを実行される脆弱性

2010-10-28T16:33:13+09:00

複数の Microsoft 製品は、バイナリファイル形式の情報を適切に検証しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002200:Microsoft Excel における任意のコードを実行される脆弱性

2010-10-28T16:32:56+09:00

JVNDB-2010-002199:Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性

2010-10-28T16:32:33+09:00

Microsoft Excel および Microsoft Office は、レコード情報を適切に検証しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3842:curl: Absolute path traversal vulnerability in curl 7.20....

2010-10-28T00:00:00+09:00

Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ (backslash) as a separator of path components within the Content-disposition HTTP header.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3765:firefox: Unspecified vulnerability in Mozilla Firefox 3.5.x ...

2010-10-28T00:00:00+09:00

Unspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, when JavaScript is enabled, allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in October 2010 by the Belmoo malware.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3933:ruby_on_rails: Ruby on Rails 2.3.9 and 3.0.0 does not properly han...

2010-10-28T00:00:00+09:00

Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3713:usebb: rss.php in UseBB before 1.0.11 does not properly ha...

2010-10-28T00:00:00+09:00

rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4099:nitroview_esm_software: ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ...

2010-10-27T00:00:00+09:00

ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3711:pidgin: libpurple in Pidgin before 2.7.4 does not properly ...

2010-10-28T00:00:00+09:00

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purple_base64_decode function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a crafted message, related to the plugins for MSN, MySpaceIM, XMPP, and Yahoo! and the NTLM authentication support.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3712:joomla!: Cross-site scripting (XSS) vulnerability in Joomla!...

2010-10-28T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x before 1.5.21 allows remote attackers to inject arbitrary web script or HTML via vectors involving "multiple encoded entities."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2891:libsmi: Buffer overflow in the smiGetNode function in lib/s...

2010-10-28T00:00:00+09:00

Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical string containing many components separated by . (dot) characters.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4096:monkeysphere: share/ma/keys_for_user in Monkeysphere 0.31 and 0.3...

2010-10-27T00:00:00+09:00

share/ma/keys_for_user in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4097:aardvark_topsites_php: Multiple cross-site scripting (XSS) vulnerabilities...

2010-10-27T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) title, (3) u, and (4) url parameters. NOTE: the q parameter is already covered by CVE-2009-2302.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4098:monotone: monotone before 0.48.1, when configured to allow re...

2010-10-27T00:00:00+09:00

monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service (crash) via an empty argument to the mtn command.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002198:Microsoft Excel における任意のコードを実行される脆弱性

2010-10-27T15:17:29+09:00

Microsoft Excel は、数式の情報を適切に検証しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002197:Microsoft Excel における任意のコードを実行される脆弱性

2010-10-27T15:17:12+09:00

JVNDB-2010-002196:複数の Microsoft 製品における任意のコードを実行される脆弱性

2010-10-27T15:16:53+09:00

JVNDB-2010-002195:Microsoft Excel における整数オーバーフローの脆弱性

2010-10-27T15:16:37+09:00

Microsoft Excel には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002194:複数の Microsoft 製品におけるスタックペースのバッファオーバーフローの脆弱性

2010-10-27T15:16:17+09:00

複数の Microsoft 製品は、Word ドキュメントの構文解析の際、不正な形式のレコードを適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002193:複数の Microsoft 製品におけるスタックペースのバッファオーバーフローの脆弱性

2010-10-27T15:15:56+09:00

JVNDB-2010-002192:Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性

2010-10-27T15:15:16+09:00

Microsoft Word および Microsoft Office には、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002191:Microsoft Word における任意のコードを実行される脆弱性

2010-10-27T15:14:53+09:00

Microsoft Word は、Word ドキュメントの構文解析の際、インデックスを適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002190:Microsoft Word におけるヒープベースのバッファオーバーフローの脆弱性

2010-10-27T15:14:34+09:00

Microsoft Word には、ヒープベースのバッファオーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002189:Microsoft Word における任意のコードを実行される脆弱性

2010-10-27T15:14:16+09:00

Microsoft Word は、Word ドキュメントの構文解析の際、ポインタを適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2885:robohelp, robohelp_server: Cross-site scripting (XSS) vulnerability in Adobe R...

2010-10-26T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allows remote attackers to inject arbitrary web script or HTML via vectors related to WebHelp generation with RoboHelp for Word.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2886:robohelp, robohelp_server: Multiple cross-site scripting (XSS) vulnerabilities...

2010-10-26T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in Adobe RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4095:robo-ftp: Directory traversal vulnerability in the FTP client...

2010-10-26T00:00:00+09:00

Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7.5, allows remote FTP servers to write arbitrary files via a .. (dot dot) in a filename in a server response.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3985:operations_orchestration: Cross-site scripting (XSS) vulnerability in HP Oper...

2010-10-26T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3227:windows_7, windows_server, windows_vista, windows_xp: Stack-based buffer overflow in the UpdateFrameTitle...

2010-10-26T00:00:00+09:00

Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows context-dependent attackers to execute arbitrary code via a long window title that this library attempts to create at the request of an application, as demonstrated by the Trident PowerZip 7.2 B...

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3491:activematrix_businessworks_service_engine, activematrix_service_bus, activematrix...: The (1) ActiveMatrix Runtime and (2) ActiveMatrix A...

2010-10-26T00:00:00+09:00

The (1) ActiveMatrix Runtime and (2) ActiveMatrix Administrator components in TIBCO ActiveMatrix Service Grid before 2.3.1, ActiveMatrix Service Bus before 2.3.1, ActiveMatrix BusinessWorks Service Engine before 5.8.1, and ActiveMatrix Service Performance Manager before 1.3.2 do not properly handle JMX connections, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2585:module_activex_control: Multiple buffer overflows in the RealPage Module Up...

2010-10-26T00:00:00+09:00

Multiple buffer overflows in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls allow remote attackers to execute arbitrary code via a long (1) DestURL or (2) SourceFile property value.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-1693:enterprise_distribution: openibd in OpenFabrics Enterprise Distribution (OFE...

2010-10-26T00:00:00+09:00

openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib_set_node_desc.sh temporary file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3653:shockwave_player: The Director module (dirapi.dll) in Adobe Shockwave...

2010-10-26T00:00:00+09:00

The Director module (dirapi.dll) in Adobe Shockwave player 11.5.8.612, and probably other versions, allows remote attackers to execute arbitrary code via a Directory movie with a crafted rcsL chunk containing a field whose value is used as a pointer offset, which triggers memory corruption. NOTE: some of these details are obtained from third party information.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4094:rational_quality_manager, rational_test_lab_manager: The Tomcat server in IBM Rational Quality Manager a...

2010-10-26T00:00:00+09:00

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role. NOTE: this might overlap CVE-2009-3548.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2584:module_activex_controls: The Upload method in the RealPage Module Upload Act...

2010-10-26T00:00:00+09:00

The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an http URL in the DestURL property.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3986:virtual_connect_enterprise_manager: Unspecified vulnerability in HP Virtual Connect Ent...

2010-10-26T00:00:00+09:00

Unspecified vulnerability in HP Virtual Connect Enterprise Manager (VCEM) 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002188:Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性

2010-10-26T15:35:24+09:00

Microsoft Word および Microsoft Office は、Word ドキュメントの構文解析の際、ブックマークを適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002187:Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性

2010-10-26T15:34:39+09:00

Microsoft Word および Microsoft Office は、Word ドキュメントの構文解析の際、戻り値を適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002186:Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性

2010-10-26T15:33:54+09:00

Microsoft Word および Microsoft Office は、Word ドキュメントの構文解析の際、インデックス値を適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002185:Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性

2010-10-26T15:33:08+09:00

Microsoft Word および Microsoft Office は、Word ドキュメントの構文解析の際、不適切な境界をチェックしないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002184:Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性

2010-10-26T15:32:25+09:00

Microsoft Word および Microsoft Office は、Word ドキュメントの構文解析の際、初期化されていないポインタを適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002183:複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性

2010-10-26T15:31:31+09:00

複数の Microsoft 製品の OpenType Font (OTF) フォーマットドライバは、フォントの処理中に不正な整数計算を実行するため、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002182:複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性

2010-10-26T15:29:28+09:00

複数の Microsoft 製品の OpenType Font (OTF) フォーマットドライバは、フォント構文解析の際、メモリ割り当て処理を適切に行わないため、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002181:複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性

2010-10-26T15:28:38+09:00

複数の Microsoft 製品のカーネルモードドライバは、window クラスを適切に管理しないため、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002180:複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性

2010-10-26T15:28:00+09:00

複数の Microsoft 製品のカーネルモードドライバには、権限を取得される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3717:typo3: The t3lib_div::validEmail function in TYPO3 4.2.x b...

2010-10-25T00:00:00+09:00

The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly restrict input to filter_var FILTER_VALIDATE_EMAIL operations in PHP, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string, a related issue to CVE-2010-3710.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4069:informix_dynamic_server: Stack-based buffer overflow in IBM Informix Dynamic...

2010-10-25T00:00:00+09:00

Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 7.x through 7.31, 9.x through 9.40, 10.00 before 10.00.xC10, 11.10 before 11.10.xC3, and 11.50 before 11.50.xC3 allows remote authenticated users to execute arbitrary code via long DBINFO keyword arguments in a SQL statement, aka idsdb00165017, idsdb00165019, idsdb00165021, idsdb00165022, and idsdb00165023.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3161:terapad: Untrusted search path vulnerability in TeraPad befo...

2010-10-25T00:00:00+09:00

Untrusted search path vulnerability in TeraPad before 1.00 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4068:typo3: Unspecified vulnerability in the Extension Manager ...

2010-10-25T00:00:00+09:00

Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter, a different vulnerability than CVE-2010-3714.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3163:sleipnir, grani: Untrusted search path vulnerability in Fenrir Sleip...

2010-10-25T00:00:00+09:00

Untrusted search path vulnerability in Fenrir Sleipnir before 2.9.5 and Grani before 4.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3159:explzh: Untrusted search path vulnerability in Explzh 5.67 ...

2010-10-25T00:00:00+09:00

Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4070:informix_dynamic_server: Integer overflow in librpc.dll in portmap.exe (aka ...

2010-10-25T00:00:00+09:00

Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted parameter size, aka idsdb00146931, idsdb00146930, idsdb00146929, and idsdb00138308.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3162:apsaly: Untrusted search path vulnerability in Apsaly befor...

2010-10-25T00:00:00+09:00

Untrusted search path vulnerability in Apsaly before 3.74 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3160:archive_decoder: Untrusted search path vulnerability in Archive Deco...

2010-10-25T00:00:00+09:00

Untrusted search path vulnerability in Archive Decoder 1.23 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3156:k2editor: Untrusted search path vulnerability in K2 K2Editor ...

2010-10-25T00:00:00+09:00

Untrusted search path vulnerability in K2 K2Editor before 1.5.9 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3164:sleipnir, grani: Untrusted search path vulnerability in Fenrir Sleip...

2010-10-25T00:00:00+09:00

Untrusted search path vulnerability in Fenrir Sleipnir 2.9.4 and earlier and Grani 4.3 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3165:deuxeditor, noeditor, ouieditor, sqleditor8, sqleditorclassic, sqleditorte, sqled...: Untrusted search path vulnerability in Yokka NoEdit...

2010-10-25T00:00:00+09:00

Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier, UnEditor 1.10.1.2 and earlier, DeuxEditor 1.7.1.2 and earlier, SQLEditorXP 3.14.1.2 and earlier, SQLEditorTE 1.9.1.3 and earlier, SQLEditor8 3.8.1.2 and earlier, and SQLEditorClassic 1.8.1.3 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3710:php: Stack consumption vulnerability in the filter_var f...

2010-10-25T00:00:00+09:00

Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3714:typo3: The jumpUrl (aka access tracking) implementation in...

2010-10-25T00:00:00+09:00

The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote attackers to read arbitrary files via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3715:typo3: Multiple cross-site scripting (XSS) vulnerabilities...

2010-10-25T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the RemoveXSS function, and allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (2) the backend.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3716:typo3: The be_user_creation task in TYPO3 4.2.x before 4.2...

2010-10-25T00:00:00+09:00

The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that creates a user account with arbitrary group memberships.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002179:64-bit プラットフォーム上で稼働している Microsoft .NET Framework の JIT コンパイラにおける任意のコードを実行される脆弱性

2010-10-25T16:37:42+09:00

64-bit プラットフォーム上で稼働している Microsoft .NET Framework の JIT コンパイラは、最適化処理を適切に行わないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002178:複数の Microsoft 製品の Embedded OpenType Font Engine における整数オーバーフローの脆弱性

2010-10-25T16:37:04+09:00

複数の Microsoft 製品の Embedded OpenType (EOT) Font Engine には、整数オーバーフローの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002177:複数の Microsoft 製品の Media Player Network Sharing Service における任意のコードを実行される脆弱性

2010-10-25T16:36:26+09:00

複数の Microsoft 製品の Media Player Network Sharing Service には、Real Time Streaming Protocol (RTSP) パケットの処理に関して不備があるため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002176:Microsoft Internet Explorer における任意のコードを実行される脆弱性

2010-10-25T16:35:56+09:00

Microsoft Internet Explorer は、Microsoft Word の使用による Word ドキュメントの読み込みを含む特定の状況において、メモリ内のオブジェクトを適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002175:Microsoft Internet Explorer における重要な情報を取得される脆弱性

2010-10-25T16:35:26+09:00

Microsoft Internet Explorer は、異なるドメインまたはゾーンからコンテンツへアクセスするスクリプトを適切に制限しないため、重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002174:Microsoft Internet Explorer における任意のコードを実行される脆弱性

2010-10-25T16:34:52+09:00

Microsoft Internet Explorer は、Microsoft Word の使用による HTML ファイルの読み込みを含む特定の状況において、メモリ内のオブジェクトを適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002173:Microsoft Internet Explorer における任意のコードを実行される脆弱性

2010-10-25T16:33:33+09:00

Microsoft Internet Explorer は、メモリ内のオブジェクトを適切に処理しないため、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002172:Microsoft Internet Explorer の HTML コンテンツ作成の実装における削除済みの重要な情報を取得される脆弱性

2010-10-25T16:32:50+09:00

Microsoft Internet Explorer の HTML コンテンツ作成の実装には、貼りつけおよび編集処理の際、Anchor 要素を削除しないため、Web ページへの訪問により、削除済みの重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002171:Microsoft Internet Explorer における任意のコードを実行される脆弱性

2010-10-25T16:32:14+09:00

JVNDB-2010-002170:Microsoft Internet Explorer における重要な情報を取得される脆弱性

2010-10-25T16:31:44+09:00

Microsoft Internet Explorer は、Cascading Style Sheets (CSS) ドキュメント内の特殊文字を適切に処理しないため、異なるドメインまたはゾーンから重要な情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3288:systems_insight_manager: Cross-site request forgery (CSRF) vulnerability in ...

2010-10-23T00:00:00+09:00

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3290:systems_insight_manager: Unspecified vulnerability in HP Systems Insight Man...

2010-10-23T00:00:00+09:00

Unspecified vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote authenticated users to gain privileges via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4053:informix_dynamic_server: Stack-based buffer overflow in an unspecified loggi...

2010-10-23T00:00:00+09:00

Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1 allows remote authenticated users to execute arbitrary code via a crafted EXPLAIN directive, aka idsdb00154125 and idsdb00154243.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3289:systems_insight_manager: Cross-site scripting (XSS) vulnerability in HP Syst...

2010-10-23T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4057:soliddb: solid.exe in IBM solidDB 6.5.0.3 and earlier does n...

2010-10-23T00:00:00+09:00

solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service (invalid memory access and daemon crash) via a TCP session on port 1315.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4054:afpl_ghostscript, ghostscript_fonts, gpl_ghostscript: The gs_type2_interpret function in Ghostscript allo...

2010-10-23T00:00:00+09:00

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4055:soliddb: Stack consumption vulnerability in solid.exe in IBM...

2010-10-23T00:00:00+09:00

Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denial of service (memory consumption and daemon crash) by connecting to TCP port 1315 and sending a packet with many integer fields, which trigger many recursive calls of a certain function.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4056:soliddb: solid.exe in IBM solidDB 6.5.0.3 and earlier does n...

2010-10-23T00:00:00+09:00

solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing a single integer field, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TCP session on port 1315.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002169:複数の Microsoft 製品の toStaticHTML 関数および SafeHTML 関数におけるクロスサイトスクリプティングの脆弱性

2010-10-22T14:37:40+09:00

複数の Microsoft 製品の toStaticHTML および SafeHTML 関数には、クロスサイトスクリプティングに対する保護メカニズムを回避され、攻撃を実行される脆弱性が存在します。本脆弱性は、CVE-2010-1257 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002168:Microsoft Internet Explorer の toStaticHTML 関数におけるクロスサイトスクリプティングの脆弱性

2010-10-22T14:37:19+09:00

Microsoft Internet Explorer の toStaticHTML 関数、および Microsoft Windows SharePoint Services と Office SharePoint Server の SafeHTML 関数には、クロスサイトスクリプティングの脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002167:Windows 上で稼働する Microsoft Internet Explorer における重要なフォーム情報を取得される脆弱性

2010-10-22T14:36:57+09:00

Windows 上で稼働する Microsoft Internet Explorer は、シミュレーティングユーザとオートコンプリート機能の相互作用によるスクリプトを制限しないため、重要なフォーム情報を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000049:複数の Yokka 提供製品における実行ファイル読み込みに関する脆弱性

2010-10-22T11:09:34+09:00

Yokka 氏が提供する複数の製品には、実行ファイル読み込みに関する脆弱性が存在します。 Yokka 氏が提供するテキストエディタなどの複数の製品には、実行ファイルを読み込む際のファイル検索パスに問題があり、意図しない実行ファイルを読み込んでしまう脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 塩月誠人氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000048:Sleipnir および Grani における実行ファイル読み込みに関する脆弱性

2010-10-22T11:08:45+09:00

フェンリル社が提供する Sleipnir および Grani には、実行ファイル読み込みに関する脆弱性が存在します。フェンリル社が提供する Sleipnir および Grani はウェブブラウザです。 Sleipnir および Grani は閲覧中の HTML ファイルのソースを表示する際に、特定の実行ファイルを読み込みます。Sleipnir および Grani には、実行ファイルを読み込む際のファイル検索パスに問題があり、意図しない実行ファイルを読み込んでしまう脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 塩月誠人氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000047:Sleipnir および Grani における DLL 読み込みに関する脆弱性

2010-10-22T11:06:03+09:00

フェンリル社が提供する Sleipnir および Grani には、DLL 読み込みに関する脆弱性が存在します。フェンリル社が提供する Sleipnir および Grani はウェブブラウザです。 Sleipnir および Grani は HTML ファイルを開く際に、特定の DLL を読み込みます。Sleipnir および Grani には、DLL を読み込む際の DLL 検索パスに問題があり、意図しない DLL を読み込んでしまう脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 塩月誠人氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3180:firefox, seamonkey, thunderbird: Use-after-free vulnerability in the nsBarProp funct...

2010-10-21T00:00:00+09:00

Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3174:seamonkey, firefox, thunderbird: Unspecified vulnerability in the browser engine in ...

2010-10-21T00:00:00+09:00

Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.14, Thunderbird before 3.0.9, and SeaMonkey before 2.0.9 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3175:firefox, thunderbird: Multiple unspecified vulnerabilities in the browser...

2010-10-21T00:00:00+09:00

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4044:opera_browser: Opera before 10.63 does not ensure that the portion...

2010-10-21T00:00:00+09:00

Opera before 10.63 does not ensure that the portion of a URL shown in the Address Bar contains the beginning of the URL, which allows remote attackers to spoof URLs by changing a window's size.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4035:chrome: Google Chrome before 7.0.517.41 does not properly p...

2010-10-21T00:00:00+09:00

Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4041:chrome: The sandbox implementation in Google Chrome before ...

2010-10-21T00:00:00+09:00

The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4039:chrome: Google Chrome before 7.0.517.41 on Linux does not p...

2010-10-21T00:00:00+09:00

Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4040:chrome: Google Chrome before 7.0.517.41 does not properly h...

2010-10-21T00:00:00+09:00

Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted image.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4037:chrome: Unspecified vulnerability in Google Chrome before 7...

2010-10-21T00:00:00+09:00

Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3173:firefox, seamonkey, thunderbird: The SSL implementation in Mozilla Firefox before 3....

2010-10-21T00:00:00+09:00

The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman Ephemeral (DHE) mode, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4036:chrome: Google Chrome before 7.0.517.41 does not properly h...

2010-10-21T00:00:00+09:00

Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoof URLs via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4046:opera_browser: Opera before 10.63 does not properly verify the ori...

2010-10-21T00:00:00+09:00

Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4038:chrome: The Web Sockets implementation in Google Chrome bef...

2010-10-21T00:00:00+09:00

The Web Sockets implementation in Google Chrome before 7.0.517.41 does not properly handle a shutdown action, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4045:opera_browser: Opera before 10.63 does not properly restrict web s...

2010-10-21T00:00:00+09:00

Opera before 10.63 does not properly restrict web script in unspecified circumstances involving reloads and redirects, which allows remote attackers to spoof the Address Bar, conduct cross-site scripting (XSS) attacks, and possibly execute arbitrary code by leveraging the ability of a script to interact with a web page from (1) a different domain or (2) a different security context.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4049:opera_browser: Opera before 10.63 allows remote attackers to cause...

2010-10-21T00:00:00+09:00

Opera before 10.63 allows remote attackers to cause a denial of service (application crash) via a Flash movie with a transparent Window Mode (aka wmode) property, which is not properly handled during navigation away from the containing HTML document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4050:opera_browser: Opera before 10.63 allows remote attackers to cause...

2010-10-21T00:00:00+09:00

Opera before 10.63 allows remote attackers to cause a denial of service (memory corruption) by referencing an SVG document in an IMG element.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4043:opera_browser: Opera before 10.63 does not prevent interpretation ...

2010-10-21T00:00:00+09:00

Opera before 10.63 does not prevent interpretation of a cross-origin document as a CSS stylesheet when the document lacks a CSS token sequence, which allows remote attackers to obtain sensitive information via a crafted document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4047:opera_browser: Opera before 10.63 does not properly select the sec...

2010-10-21T00:00:00+09:00

Opera before 10.63 does not properly select the security context of JavaScript code associated with an error page, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4048:opera_browser: Opera before 10.63 allows user-assisted remote web ...

2010-10-21T00:00:00+09:00

Opera before 10.63 allows user-assisted remote web servers to cause a denial of service (application crash) by sending a redirect during the saving of a file.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4042:chrome: Google Chrome before 7.0.517.41 does not properly h...

2010-10-21T00:00:00+09:00

Google Chrome before 7.0.517.41 does not properly handle element maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "stale elements."

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3183:firefox, seamonkey, thunderbird: The LookupGetterOrSetter function in Mozilla Firefo...

2010-10-21T00:00:00+09:00

The LookupGetterOrSetter function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__lookupGetter__ function calls that lack arguments, which allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a crafted HTML document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4033:chrome: Google Chrome before 7.0.517.41 does not properly i...

2010-10-21T00:00:00+09:00

Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spamming" attacks via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3176:firefox, seamonkey, thunderbird: Multiple unspecified vulnerabilities in the browser...

2010-10-21T00:00:00+09:00

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4034:chrome: Google Chrome before 7.0.517.41 does not properly h...

2010-10-21T00:00:00+09:00

Google Chrome before 7.0.517.41 does not properly handle forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3177:firefox, seamonkey: Multiple cross-site scripting (XSS) vulnerabilities...

2010-10-21T00:00:00+09:00

Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML via a crafted name of a (1) file or (2) directory on a Gopher server.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3291:assetcenter, assetmanager: Cross-site scripting (XSS) vulnerability in HP Asse...

2010-10-21T00:00:00+09:00

Cross-site scripting (XSS) vulnerability in HP AssetCenter 5.0x through AC_5.03, and AssetManager 5.1x through AM_5.12 and 5.2x through AM_5.22, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3178:firefox, seamonkey, thunderbird: Mozilla Firefox before 3.5.14 and 3.6.x before 3.6....

2010-10-21T00:00:00+09:00

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window and performing cross-domain navigation, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3179:firefox, seamonkey, thunderbird: Stack-based buffer overflow in the text-rendering f...

2010-10-21T00:00:00+09:00

Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a long argument to the document.write method.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3181:firefox, seamonkey, thunderbird: Untrusted search path vulnerability in Mozilla Fire...

2010-10-21T00:00:00+09:00

Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3182:firefox, seamonkey, thunderbird: A certain application-launch script in Mozilla Fire...

2010-10-21T00:00:00+09:00

A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002166:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat におけるサービス運用妨害 (DoS) の脆弱性

2010-10-21T16:08:05+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3656 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002165:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-21T16:05:12+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-2890、CVE-2010-3619、CVE-2010-3621、CVE-2010-3622、CVE-2010-3628 および CVE-2010-3632 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002164:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat におけるサービス運用妨害 (DoS) の脆弱性

2010-10-21T16:04:49+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3657 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002163:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-21T16:04:31+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-2890、CVE-2010-3619、CVE-2010-3621、CVE-2010-3622、CVE-2010-3628 および CVE-2010-3658 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002162:Apple Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-21T16:04:14+09:00

Apple Mac OS X 上で稼働する Adobe Reader および Acrobat には、配列インデックスエラーにより、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002161:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-21T16:03:56+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002160:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-21T16:03:31+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される脆弱性が存在します。本脆弱性は、CVE-2010-3620 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002159:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-21T16:03:10+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-2890、CVE-2010-3619、CVE-2010-3621、CVE-2010-3622、CVE-2010-3632 および CVE-2010-3658 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002158:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-21T16:02:51+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002157:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-21T16:02:32+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される脆弱性が存在します。本脆弱性は、CVE-2010-2889 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002156:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-21T16:01:47+09:00

JVNDB-2010-000046:Apsaly における実行ファイル読み込みに関する脆弱性

2010-10-21T11:03:19+09:00

Apsaly には、実行ファイル読み込みに関する脆弱性が存在します。 Apsaly は、外部プログラムとの連携機能を持つテキストエディタです。Apsaly は編集中のテキストファイルを保存しているフォルダを開くなど、外部プログラム集として実装された機能を使用する際、特定の実行ファイルを読み込みます。Apsaly には、実行ファイルを読み込む際のファイル検索パスに問題があり、意図しない実行ファイルを読み込んでしまう脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 塩月誠人氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000045:TeraPad における DLL 読み込みに関する脆弱性

2010-10-21T11:01:41+09:00

TeraPad には、DLL 読み込みに関する脆弱性が存在します。 TeraPad は、テキストエディタです。TeraPad はテキストファイルを開く際に、特定の DLL を読み込みます。TeraPad には、DLL を読み込む際の DLL 検索パスに問題があり、意図しない DLL を読み込んでしまう脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 塩月誠人氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3355:ember: Ember 0.5.7 places a zero-length directory name in ...

2010-10-20T00:00:00+09:00

Ember 0.5.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3365:mistelix: Mistelix 0.31 places a zero-length directory name i...

2010-10-20T00:00:00+09:00

Mistelix 0.31 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3369:mono-debugger: The (1) mdb and (2) mdb-symbolreader scripts in mon...

2010-10-20T00:00:00+09:00

The (1) mdb and (2) mdb-symbolreader scripts in mono-debugger 2.4.3 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3363:roaraudio: roarify in roaraudio 0.3 places a zero-length direc...

2010-10-20T00:00:00+09:00

roarify in roaraudio 0.3 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3364:vips: The vips-7.22 script in VIPS 7.22.2 places a zero-l...

2010-10-20T00:00:00+09:00

The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3376:root: The (1) proofserv, (2) xrdcp, (3) xrdpwdadmin, and ...

2010-10-20T00:00:00+09:00

The (1) proofserv, (2) xrdcp, (3) xrdpwdadmin, and (4) xrd scripts in ROOT 5.18/00 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3383:teamspeak: The (1) teamspeak and (2) teamspeak-server scripts ...

2010-10-20T00:00:00+09:00

The (1) teamspeak and (2) teamspeak-server scripts in TeamSpeak 2.0.32 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3382:tau: tauex in Tuning and Analysis Utilities (TAU) 2.16.4...

2010-10-20T00:00:00+09:00

tauex in Tuning and Analysis Utilities (TAU) 2.16.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3385:tuxguitar: TuxGuitar 1.2 places a zero-length directory name i...

2010-10-20T00:00:00+09:00

TuxGuitar 1.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3386:ust: usttrace in LTTng Userspace Tracer (aka UST) 0.7 pl...

2010-10-20T00:00:00+09:00

usttrace in LTTng Userspace Tracer (aka UST) 0.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3387:vdr: DISPUTED vdrleaktest in Video Disk Recorder ...

2010-10-20T00:00:00+09:00

** DISPUTED ** vdrleaktest in Video Disk Recorder (VDR) 1.6.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: a third party disputes this issue because the script erroneously uses a semicolon in a context where a colon was intended.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3384:torcs: The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper...

2010-10-20T00:00:00+09:00

The (1) torcs, (2) nfsperf, (3) accc, (4) texmapper, (5) trackgen, and (6) nfs2ac scripts in TORCS 1.3.1 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3393:magics++: magics-config in Magics++ 2.10.0 places a zero-leng...

2010-10-20T00:00:00+09:00

magics-config in Magics++ 2.10.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3361:vpn_client: The (1) iked, (2) ikea, and (3) ikec scripts in Shr...

2010-10-20T00:00:00+09:00

The (1) iked, (2) ikea, and (3) ikec scripts in Shrew Soft IKE 2.1.5 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3362:last.fm: lastfm 1.5.4 places a zero-length directory name in...

2010-10-20T00:00:00+09:00

lastfm 1.5.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3381:tangerine: The (1) tangerine and (2) tangerine-properties scri...

2010-10-20T00:00:00+09:00

The (1) tangerine and (2) tangerine-properties scripts in Tangerine 0.3.2.2 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3377:salome: The (1) runSalome, (2) runTestMedCorba, (3) runLigh...

2010-10-20T00:00:00+09:00

The (1) runSalome, (2) runTestMedCorba, (3) runLightSalome, and (4) hxx2salome scripts in SALOME 5.1.3 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3378:scilab: The (1) scilab, (2) scilab-cli, and (3) scilab-adv-...

2010-10-20T00:00:00+09:00

The (1) scilab, (2) scilab-cli, and (3) scilab-adv-cli scripts in Scilab 5.2.2 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3349:ardour: Ardour 2.8.11 places a zero-length directory name i...

2010-10-20T00:00:00+09:00

Ardour 2.8.11 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3350:bareftp: bareFTP 0.3.4 places a zero-length directory name i...

2010-10-20T00:00:00+09:00

bareFTP 0.3.4 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3360:hipo: Hipo 0.6.1 places a zero-length directory name in t...

2010-10-20T00:00:00+09:00

Hipo 0.6.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3366:mn_fit: Mn_Fit 5.13 places a zero-length directory name in ...

2010-10-20T00:00:00+09:00

Mn_Fit 5.13 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-2057:myfaces: shared/util/StateUtils.java in Apache MyFaces 1.1.x...

2010-10-20T00:00:00+09:00

shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3351:bristol: startBristol in Bristol 0.60.5 places a zero-length...

2010-10-20T00:00:00+09:00

startBristol in Bristol 0.60.5 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3354:dropbox: dropboxd in Dropbox 0.7.110 places a zero-length di...

2010-10-20T00:00:00+09:00

dropboxd in Dropbox 0.7.110 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3357:gnome-subtitles: gnome-subtitles 1.0 places a zero-length directory ...

2010-10-20T00:00:00+09:00

gnome-subtitles 1.0 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3170:firefox, seamonkey, thunderbird: Mozilla Firefox before 3.5.14 and 3.6.x before 3.6....

2010-10-21T00:00:00+09:00

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-0782:websphere_mq: IBM WebSphere MQ 6.x before 6.0.2.10 and 7.x before...

2010-10-20T00:00:00+09:00

IBM WebSphere MQ 6.x before 6.0.2.10 and 7.x before 7.0.1.3 allows remote attackers to spoof X.509 certificate authentication, and send or receive channel messages, via a crafted Subject Distinguished Name (DN) value in a certificate.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3353:cowbell: Cowbell 0.2.7.1 places a zero-length directory name...

2010-10-20T00:00:00+09:00

Cowbell 0.2.7.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-4007:mojarra: Oracle Mojarra uses an encrypted View State without...

2010-10-20T00:00:00+09:00

Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3389:ocf_resource_agents: The (1) SAPDatabase and (2) SAPInstance scripts in ...

2010-10-20T00:00:00+09:00

The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3394:texmacs: The (1) texmacs and (2) tm_mupad_help scripts in Te...

2010-10-20T00:00:00+09:00

The (1) texmacs and (2) tm_mupad_help scripts in TeXmacs 1.0.7.4 place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3358:henplus: HenPlus JDBC SQL-Shell 0.9.7 places a zero-length d...

2010-10-20T00:00:00+09:00

HenPlus JDBC SQL-Shell 0.9.7 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002155:Apple Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-20T14:38:13+09:00

Apple Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002154:Apple Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-20T14:37:56+09:00

Apple Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002153:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-20T14:37:38+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-2890、CVE-2010-3619、CVE-2010-3621、CVE-2010-3628、CVE-2010-3632 および CVE-2010-3658 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002152:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-20T14:37:21+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-2890、CVE-2010-3619、CVE-2010-3622、CVE-2010-3628、CVE-2010-3632 および CVE-2010-3658 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002151:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-20T14:37:03+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される脆弱性が存在します。本脆弱性は、CVE-2010-3629 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002150:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-20T14:36:42+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-2890、CVE-2010-3621、CVE-2010-3622、CVE-2010-3628、CVE-2010-3632 および CVE-2010-3658 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002149:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-20T14:36:23+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-3619、CVE-2010-3621、CVE-2010-3622、CVE-2010-3628、CVE-2010-3632 および CVE-2010-3658 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002148:Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-20T14:35:58+09:00

Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される脆弱性が存在します。本脆弱性は、CVE-2010-3626 とは異なる脆弱性です。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002147:Windows 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性

2010-10-20T14:35:41+09:00

Windows 上で稼働する Adobe Reader および Acrobat の ActiveX には、任意のコードを実行される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002146:Linux 上で稼働する Adobe Reader および Acrobat における権限を取得される脆弱性

2010-10-20T14:35:23+09:00

Linux 上で稼働する Adobe Reader および Acrobat には、権限を取得される脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-002145:Linux kernel の arch/x86/hvm/vmx/vmcs.c におけるサービス運用妨害 (DoS) の脆弱性

2010-10-20T14:35:03+09:00

Red Hat Enterprise Linux (RHEL) 上で稼動する Linux kernel の virtual-machine control structure (VMCS) 実装内にある arch/x86/hvm/vmx/vmcs.c は、Extended Page Tables (EPT) 機能がない状態において Intel platform を使用した際、ハードウェアのサポートによる検証を行わないまま VMCS フィールドにアクセスしてしまうため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000044:Archive Decoder における実行ファイル読み込みに関する脆弱性

2010-10-20T14:03:31+09:00

Archive Decoder には、実行ファイル読み込みに関する脆弱性が存在します。 Archive Decoder は、複数の圧縮ファイル形式に対応した、圧縮ファイルの展開を行うソフトウェアです。Archive Decoder は圧縮ファイルを展開する際に、特定の実行ファイルを読み込みます。Archive Decoder には、実行ファイルを読み込む際のファイル検索パスに問題があり、意図しない実行ファイルを読み込んでしまう脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 塩月誠人氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

JVNDB-2010-000043:Explzh における実行ファイル読み込みに関する脆弱性

2010-10-20T14:02:05+09:00

Explzh には、実行ファイル読み込みに関する脆弱性が存在します。 Explzh は、複数の圧縮ファイル形式に対応した圧縮・展開を主な機能とするソフトウェアです。Explzh は圧縮ファイルを展開する際に、特定の実行ファイルを読み込みます。Explzh には、実行ファイルを読み込む際のファイル検索パスに問題があり、意図しない実行ファイルを読み込んでしまう脆弱性が存在します。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 塩月誠人氏

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2007-6741:pyftpdlib: The ftp_PORT function in FTPServer.py in pyftpdlib ...

2010-10-19T00:00:00+09:00

The ftp_PORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authenticated users to conduct FTP bounce attacks via crafted FTP data, as demonstrated by an FTP bounce attack against a NAT server, a related issue to CVE-1999-0017.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2008-7262:pyftpdlib: Multiple directory traversal vulnerabilities in FTP...

2010-10-19T00:00:00+09:00

Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 allow remote authenticated users to access arbitrary files and directories via vectors involving a symlink in a pathname to a (1) CWD, (2) DELE, (3) STOR, or (4) RETR command.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2007-6736:pyftpdlib: Multiple directory traversal vulnerabilities in FTP...

2010-10-19T00:00:00+09:00

Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.2.0 allow remote authenticated users to access arbitrary files and directories via a .. (dot dot) in a (1) LIST, (2) STOR, or (3) RETR command.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5012:pyftpdlib: ftpserver.py in pyftpdlib before 0.5.2 does not req...

2010-10-19T00:00:00+09:00

ftpserver.py in pyftpdlib before 0.5.2 does not require the l permission for the MLST command, which allows remote authenticated users to bypass intended access restrictions and list the root directory via an FTP session.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2009-5013:pyftpdlib: Memory leak in the on_dtp_close function in ftpserv...

2010-10-19T00:00:00+09:00

Memory leak in the on_dtp_close function in ftpserver.py in pyftpdlib before 0.5.2 allows remote authenticated users to cause a denial of service (memory consumption) by sending a QUIT command during a data transfer.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3157:xacrett: Untrusted search path vulnerability in XacRett befo...

2010-10-19T00:00:00+09:00

Untrusted search path vulnerability in XacRett before 50 allows attackers to execute arbitrary code via a Trojan horse executable file, related to the explorer.exe filename and use of Windows Explorer.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3571:jre, jdk, sdk: Unspecified vulnerability in the 2D component in Or...

2010-10-19T00:00:00+09:00

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3573:jre, jdk: Unspecified vulnerability in the Networking compone...

2010-10-19T00:00:00+09:00

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3574:jre, jdk, sdk: Unspecified vulnerability in the Networking compone...

2010-10-19T00:00:00+09:00

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3158:lhaplus: Untrusted search path vulnerability in Lhaplus befo...

2010-10-19T00:00:00+09:00

Untrusted search path vulnerability in Lhaplus before 1.58 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3492:python: The asyncore module in Python before 3.2 does not p...

2010-10-19T00:00:00+09:00

The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier for remote attackers to conduct denial of service attacks that terminate these applications via network connections.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3566:jre, jdk: Unspecified vulnerability in the 2D component in Or...

2010-10-19T00:00:00+09:00

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

CVE-2010-3570:jre, jdk: Unspecified vulnerability in the Deployment Toolkit...

2010-10-19T00:00:00+09:00

Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Vulnerability Analysis Summary
Analysis Information Source Type : Advisory, Alert

VRDA Feed : Provides information for vulnerability impact analysis

CVE-2010-4628:mybb: member.php in MyBB (aka MyBulletinBoard) before 1.4...

CVE-2010-4630:wp-survey-and-quiz-tool: Cross-site scripting (XSS) vulnerability in pages/a...

CVE-2010-4629:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 does not p...

CVE-2010-4627:mybb: Cross-site request forgery (CSRF) vulnerability in ...

CVE-2010-4642:xwiki: Cross-site scripting (XSS) vulnerability in XWiki E...

CVE-2010-4641:xwiki: SQL injection vulnerability in XWiki Enterprise bef...

CVE-2010-4640:xwiki_watch: Multiple cross-site scripting (XSS) vulnerabilities...

CVE-2010-4639:mysource_matrix: SQL injection vulnerability in index.php in MySourc...

CVE-2010-4635:vacation_rental_listings: SQL injection vulnerability in detail.asp in Site2N...

CVE-2010-4634:osticket: ** DISPUTED ** Directory traversal vulnerability i...

CVE-2010-4265:jboss_enterprise_application_platform, jboss_enterprise_web_platform, jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

CVE-2010-4633:digishop: SQL injection vulnerability in cart.php in digiSHOP...

CVE-2010-4522:mybb: Multiple cross-site scripting (XSS) vulnerabilities...

CVE-2010-4625:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 does not p...

CVE-2010-4626:mybb: The my_rand function in functions.php in MyBB (aka ...

CVE-2010-4636:business_e-listings: SQL injection vulnerability in detail.asp in Site2N...

[Update]CVE-2010-3862:jboss_enterprise_application_platform, jboss_enterprise_web_platform, jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

CVE-2010-4624:mybb: MyBB (aka MyBulletinBoard) before 1.4.12 allows rem...

CVE-2010-4631:pilot_cart: Multiple cross-site scripting (XSS) vulnerabilities...

CVE-2010-4632:pilot_cart: Multiple SQL injection vulnerabilities in ASPilot P...

CVE-2010-4637:feedlist: Cross-site scripting (XSS) vulnerability in feedlis...

CVE-2010-4638:com_jquarks4s: SQL injection vulnerability in the submitSurvey fun...

CVE-2010-4616:impresscms: Cross-site scripting (XSS) vulnerability in modules...

CVE-2010-4617:com_jotloader: Directory traversal vulnerability in the JotLoader ...

CVE-2010-4619:mafya_oyun_scrpti: SQL injection vulnerability in profil.php in Mafya ...

CVE-2010-3850:kernel: The ec_dev_ioctl function in net/econet/af_econet.c...

CVE-2010-4614:ero_auktion: SQL injection vulnerability in item.php in Ero Aukt...

CVE-2010-4615:oto_galeri_sistemi: Multiple SQL injection vulnerabilities in Oto Galer...

CVE-2010-3878:jboss_enterprise_application_platform: Cross-site request forgery (CSRF) vulnerability in ...

CVE-2010-3862:jboss_remoting: The org.jboss.remoting.transport.bisocket.BisocketS...

CVE-2010-4342:kernel: The aun_incoming function in net/econet/af_econet.c...

CVE-2010-4608:habari: Habari 0.6.5 allows remote attackers to obtain sens...

CVE-2010-4321:iprint_client: Stack-based buffer overflow in an ActiveX control i...

CVE-2010-4276:livezilla: Cross-site scripting (XSS) vulnerability in the lz_...

CVE-2010-4623:tivoli_access_manager_for_e-business: WebSEAL in IBM Tivoli Access Manager for e-business...

CVE-2010-3708:jboss_enterprise_application_platform, jboss_enterprise_soa_platform: The serialization implementation in JBoss Drools in...

CVE-2010-4258:kernel: The do_exit function in kernel/exit.c in the Linux ...

CVE-2010-4507:ispot, ispot_firmware, clearspot, clearspot_firmware: Multiple cross-site request forgery (CSRF) vulnerab...

CVE-2010-4622:tivoli_access_manager_for_e-business: Directory traversal vulnerability in WebSEAL in IBM...

CVE-2010-4607:habari: Multiple cross-site scripting (XSS) vulnerabilities...

CVE-2010-4606:tivoli_storage_manager: Unspecified vulnerability in the Space Management c...

CVE-2010-4161:enterprise_linux, linux_kernel: The udp_queue_rcv_skb function in net/ipv4/udp.c in...

CVE-2010-4605:tivoli_storage_manager: Unspecified vulnerability in the backup-archive cli...

CVE-2010-3923:attachecase: Untrusted search path vulnerability in AttacheCase ...

CVE-2010-4612:cms: Multiple SQL injection vulnerabilities in index.php...

CVE-2010-3848:kernel: Stack-based buffer overflow in the econet_sendmsg f...

CVE-2010-3849:kernel: The econet_sendmsg function in net/econet/af_econet...

CVE-2010-4610:cms: Cross-site scripting (XSS) vulnerability in index.p...

CVE-2010-4158:kernel: The sk_run_filter function in net/core/filter.c in ...

CVE-2010-4352:dbus: Stack consumption vulnerability in D-Bus (aka DBus)...

CVE-2010-4618:aicontactsafe: Cross-site scripting (XSS) vulnerability in the Alg...

CVE-2010-4609:cms: SQL injection vulnerability in index.php in Html-ed...

CVE-2010-4613:hycus_cms: Multiple directory traversal vulnerabilities in Hyc...

CVE-2010-3874:kernel: Heap-based buffer overflow in the bcm_connect funct...

CVE-2010-3859:kernel: Multiple integer signedness errors in the TIPC impl...

CVE-2010-4604:tivoli_storage_manager: Stack-based buffer overflow in the GeneratePassword...

CVE-2010-4602:rational_clearquest: The Web client in IBM Rational ClearQuest 7.1.1.x b...

CVE-2010-4601:rational_clearquest: Multiple unspecified vulnerabilities in IBM Rationa...

CVE-2010-4343:kernel: drivers/scsi/bfa/bfa_core.c in the Linux kernel bef...

CVE-2010-4600:dojo_toolkit, rational_clearquest: Dojo Toolkit, as used in the Web client in IBM Rati...

CVE-2010-4565:kernel: The bcm_connect function in net/can/bcm.c (aka the ...

JVNDB-2010-002563:複数の VMware 製品の VMware-Tools アップデート機能における権限昇格の脆弱性

JVNDB-2010-002562:複数の VMware 製品の vmware-mount における権限昇格の脆弱性

JVNDB-2010-002561:複数の VMware 製品の vmware-mount における権限昇格の脆弱性

JVNDB-2010-002560:複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能における任意のコードを実行される脆弱性

JVNDB-2010-002559:Apple QuickTime における整数オーバーフローの脆弱性

JVNDB-2010-002558:Windows 上で稼働する Apple QuickTime における重要な情報を取得される脆弱性

JVNDB-2010-002557:Windows 上で稼働する Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性

JVNDB-2010-002556:Apple QuickTime における整数符号エラーの脆弱性

JVNDB-2010-002555:Apple QuickTime における任意のコードを実行される脆弱性

JVNDB-2010-002554:Apple QuickTime における任意のコードを実行される脆弱性

JVNDB-2010-002553:CA PSFormX および CA WebScan ActiveX コントロールにおける任意のコードを実行される脆弱性

JVNDB-2010-002552:CA eHealth Performance Manager におけるクロスサイトスクリプティングの脆弱性

JVNDB-2009-002631:CA eTrust PestPatrol の PestPatrol ActiveX コントロールにおけるスタックペースのバッファオーバーフローの脆弱性

JVNDB-2009-002630:CA Service Desk の Web インターフェイスにおけるクロスサイトスクリプティングの脆弱性

JVNDB-2009-002629:複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントおけるサービス運用妨害 (DoS) の脆弱性

JVNDB-2009-002628:複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントにおける任意のコードを実行される脆弱性

JVNDB-2009-002627:CA Host-Based Intrusion Prevention System の kmxIds.sys におけるサービス運用妨害 (DoS) の脆弱性

JVNDB-2009-002626:CA SiteMinder における J2EE アプリケーションのクロスサイトスクリプティングに対する保護を回避される脆弱性

CVE-2010-4634:osticket: DISPUTED Directory traversal vulnerability i...