Hírolvasó

The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor.

Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via unknown vectors, related to the put_tty_queue and __f_setown functions. NOTE: the vulnerability was addressed in a different way in 2.6.32.9.

Linux Kernel Btrfs Integer Overflow Information Disclosure Vulnerability

Linux Kernel Btrfs Overwrite Append-Only Files Local Security Bypass Vulnerability

FreeType BDF Font File Parsing Remote Denial of Service Vulnerability

Oracle Java SE and Java for Business CVE-2010-0094 Remote Java Runtime Environment Vulnerability

Invision Power Board BBCode Cross Site Scripting Vulnerability

Google Chrome prior to 6.0.472.53 Multiple Security Vulnerabilities

FreeType Stack Buffer Overflow and Memory Corruption Vulnerabilities

Wireshark 0.10.8 to 1.0.14 and 1.2.0 to 1.2.9 Multiple Vulnerabilities

Linux Kernel GFS2 Directory Rename NULL Pointer Dereference Local Denial of Service Vulnerability

FreeType Compact Font Format (CFF) Multiple Stack Based Buffer Overflow Vulnerabilities

Wireshark 0.8.20 through 1.2.8 Multiple Vulnerabilities

Wireshark DOCSIS Dissector Denial of Service Vulnerability

RETIRED: libmikmod Multiple Buffer Overflow Vulnerabilities

Re: KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)

XSS in Horde Application Framework <=3.3.8, icon_browser.php

Re: Re: IIS5.1 Directory Authentication Bypass by using ?:$I30:$Index_Allocation?

VUPEN Security Research - Google Chrome Focus Processing Memory Corruption Vulnerability (VUPEN-SR-2010-249)

[SECURITY] [DSA-2102-1] New barnowl packages fix arbitrary code execution