:: Deepquest ::

Apple Security Advisory 2012-06-11-1 – iTunes 10.6.3 is now available and addresses multiple issues. Importing a maliciously crafted .m3u playlist may lead to an unexpected application termination or arbitrary code execution Description: A heap buffer overflow existed in the handling of .m3u playlists. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: A memory corruption issue existed in WebKit.

Apple iTunes version 10.6.1.7 M3U playlist file walking heap buffer overflow proof of concept exploit. This also affects 10.6.0.40.

Proof of concept crash exploit for Safari on iOS that leverage a denial of service vulnerability.

Military judge refuses to drop 10 counts against Bradley Manning in … msnbc.com FORT MEADE, Md.

Wikileaks : Diplomatii americani au explicat cum au gestionat scandalul Ziare.com Dupa scandalul Wikileaks , de amploare internationala, in care sute de mii de documente guvernamentale au fost facute publice, mai multi diplomati americani au explicat joi, in fata justitiei, cum au gestionat criza. Astfel, Rena Bitter, directoarea ..

Defense scores partial victory in WikiLeaks pretrial Radio Netherlands Lawyers for WikiLeaks suspect Bradley Manning scored a partial victory when a judge ruled his defense team should be given access to government documents …

Zero Day Initiative Advisory 12-078 – This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Apple QuickTime handles file with the Sorenson v3 Codec

Zero Day Initiative Advisory 12-077 – This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the QuickTimeVR.qtx component

Zero Day Initiative Advisory 12-076 – This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple’s QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Zero Day Initiative Advisory 12-075 – This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application decodes video samples encoded with the RLE codec