Thursday, September 2, 2010
Linux: kernel regression
Users of Linux please be advised of a kernel regression vulnerability that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)
Amplify’d from www.criticalwatch.com
USN-974-2: [USN-974-2] Linux kernel regression
linux regression
A security issue affects the following Ubuntu releases:
Ubuntu 8.04 LTS
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
Original advisory details:
Gael Delalleu, Rafal Wojtczuk, and Brad Spengler discovered that the memory
manager did not properly handle when applications grow stacks into adjacent
memory regions. A local attacker could exploit this to gain control of
certain applications, potentially leading to privilege escalation, as
demonstrated in attacks against the X server. (CVE-2010-2240)
Read more at www.criticalwatch.com
See this Amp at http://bit.ly/co3CyJ
RealNetworks RealPlayer: Malformed IVR Object Index Code Execution Vulnerability http://bit.ly/aip9e1
RealNetworks RealPlayer: Malformed IVR Object Index Code Execution Vulnerability
Users of RealNetworks RealPlayer please be advised of a Malformed IVR Object Index Code Execution vulnerability that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)
Amplify’d from www.criticalwatch.com
ZDI-10-166: RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability
-- Affected Products:
RealNetworks RealPlayer
-- Vulnerability Details:
This vulnerability allows attackers to execute arbitrary code on
vulnerable installations of RealNetworks RealPlayer. User interaction is
required to exploit this vulnerability in that the target must visit a
malicious page or open a malicious file.
Read more at www.criticalwatch.com
See this Amp at http://bit.ly/aip9e1
RealNetworks RealPlayer: FLV Parsing Multiple Integer Overflow Vulnerabilities
Users of RealNetworks RealPlayer please be advised of a FLV Parsing Multiple Integer Overflow Vulnerabilities that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)
Amplify’d from www.criticalwatch.com
ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities
-- Affected Products:
RealNetworks RealPlayer
-- Vulnerability Details:
This vulnerability allows remote attackers to execute arbitrary code on
vulnerable installations of RealNetworks RealPlayer. Authentication is
not required to exploit this vulnerability.
Read more at www.criticalwatch.com
See this Amp at http://bit.ly/aFg62G
Tuesday, August 31, 2010
Subscribe to:
Posts (Atom)
