A vulnerability has been discovered in PLIB, which can be
exploited by malicious people to compromise an application
using the library. The vulnerability is caused due to a
boundary error within the "ulSetError()" function
(src/util/ulError.cxx) wh’à † † ‚ €‚ †c ‚ acks, which has the similar
consequence. Another vulnerability allowed an attacker to bypass
the CSRF protection mechanism in place, thereby mounting more CSRF
attackes. These attacks allow an attacker without direct access to
Jenkins to mount an attack.
The code used to decompress a file created by compress(1) does not
do suf²€ † †
+ ¿ t €j †c ) Net.Edit0r from BlACK Hat Group reported an X¸ † † ‚ €‚ †c ‚ Problem Description:
[78524] Critical CVE-2011-1302: Heap overflow in the GPU process.
Credit to Christoph Diehl.
Fixed in 10.0.648.204Äà † † T
€R vƒ †8+Rry>
TPTEST is prone to a remote stack-based buffer-overflow
vulnerability. An attacker can exploit this issue to
execute arbitrary Ñ † † ‚ €‚ †c ‚ ect JS wrapper class object MFSA 2009-27 SSL tampering via non-200 responses to proxy
CONNECT requests MFSA 2009-26 Arbitrary domain cookie access by local file:
resources MFSA 2009-25 URL spoofing with invalid unicode characters MFSA ×À † † N
Q‚®~€L †c LThe GLPI project reports: Input passed via unspecified parameters is not properly sanitised
Ýà † † %€ OÊ~Ž O„Ùt †?$#
context of the affected site. This may allow the attacker
to steal cookie-based authentication credentials and to
launch other attackbid>31928€ †c @r overflow via a specially
crafted IFF ILBM file7-6697
Security Enhancements and Fixes in PHP 5.2.5: