Mozilla Firefox / Opera / Microsoft Internet Explorer browsers DoS
Published:		22.09.2008
Source:		BUGTRAQ
SecurityVulns ID:		9302
Type:		client
Level:		5/10
Description:		window.sidebar.addPanel() in the loop causes browser to hang.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : Windows Vista
		MICROSOFT : Windows 2008 Server
		MOZILLA : Firefox 3.0
		OPERA : Opera 9.52

Original document		MustLive, DoS vulnerability in Opera (22.09.2008)
		MustLive, DoS vulnerability in Internet Explorer (22.09.2008)
		MustLive, DoS vulnerability in Firefox (22.09.2008)

Discuss:

Read or add your comments to this news (0 comments)

IBM DB2 multiple security vulnerabilities
Published:		22.09.2008
Source:		BUGTRAQ
SecurityVulns ID:		9303
Type:		remote
Level:		6/10
Description:		XMLQUERY and XMLEXIST buffer overflow, CLR stored procedures privilege escalation and DoS.

Affected:		IBM : DB2 9.1
		IBM : DB2 9.5
CVE:		CVE-2008-3854 (Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function.)
		CVE-2008-3852 (Unspecified vulnerability in the CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio in the Visual Studio Net component in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code via unknown vectors.)

Original document		SHATTER, Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS (22.09.2008)
		SHATTER, Team SHATTER Security Advisory: Security Vulnerability in CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio (22.09.2008)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Internet Explorer DoS
Published:		22.09.2008
Source:		BUGTRAQ
SecurityVulns ID:		9304
Type:		remote
Level:		5/10
Description:		Browser hangs on malcrafted PNG image.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : Windows Vista
		MICROSOFT : Windows 2008 Server

Original document

Aditya K Sood, Microsoft Internet Explorer DoS in Rendering Malicious PNG Files. (22.09.2008)

Discuss:

Read or add your comments to this news (0 comments)