Computer Security Vulnerabilities

21.03.2010 Detailed

6! PHP DoS   Crash on XML-RPC requests processing.   IBM Lotus Domino response splitting   Response splitting via POST request to /names.nsf   Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)   PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

18.03.2010 Detailed

7! SAP MaxDB code execution   Buffer overflow on TCP/7210 request parsing.

httpdx DoS   Crash on malformed HTTP request.

QuickZip buffer overflow   Buffer overflow on .zip files parsing.

libpng DoS   Resources exhaustion on data decompression in png_decompress_chunk().

Miranda IM TLS encryption vulnerability   Under some conditions TLS is not used for Jabber server connection regradless of settings.

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 18.03.2010   PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Microsoft Virtual PC protection bypass   Invalid memory regions protection for memory >2GB allows to bypass Windows memory protection techniques for guest system.

MediaCoder buffer overflow   Buffer overflow on .lst files parsing.

Windisc buffer overflow   Buffer overflow on Banzhaf (.bnz) files parsing.

17.03.2010 Detailed

7! WebKit / Apple Safari / Google Chrome multiple security vulnerabilities updated since 15.03.2010   Use-after-free, integer overflow, clickjacking.