Hardcoded credentials

WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document...

CVE-2009-2200

WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document...

MS Internet Explorer EMBED Memory Corruption PoC (MS09-014)

No description provided by source. BODY onload=go/BODY !-- MS09-014: MSIE EMBED element race condition memory corruption Code by SkyLined [email protected] http://skypher.com/SkyLined/Repro/MSIE/EMBED%20memory%20corruption/repro3.html...

Microsoft Internet Explorer Memory Corruption

http://skypher.com/SkyLined/Repro/MSIE/EMBED%20memory%20corruption/repro3.html http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption -- var asMimeTypes = "x-world/x-3dmf", "x-world/x-3dmf", "application/octet-stream", "application/x-authorware-bin",...

MS Internet Explorer EMBED Memory Corruption PoC (MS09-014)

Exploit for unknown platform in category dos / poc =========================================================== MS Internet Explorer EMBED Memory Corruption PoC MS09-014 =========================================================== var asMimeTypes = "x-world/x-3dmf", "x-world/x-3dmf",...

Microsoft Internet Explorer - EMBED Memory Corruption (PoC) (MS09-014)

Microsoft Internet Explorer - EMBED Memory Corruption PoC MS09-014 http://skypher.com/SkyLined/Repro/MSIE/EMBED%20memory%20corruption/repro3.html http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption -- var asMimeTypes = "x-world/x-3dmf", "x-world/x-3dmf",...

MS09-014: MSIE EMBED element race condition memory corruption

Some details + repro: http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption/ Cheers, SkyLined Berend-Jan Wever [email protected] http://skypher.com/SkyLined...

Microsoft Internet Explorer - EMBED Memory Corruption (PoC) (MS09-014)

http://skypher.com/SkyLined/Repro/MSIE/EMBED%20memory%20corruption/repro3.html http://skypher.com/index.php/2009/04/19/ms09-014-embed-element-memory-corruption -- var asMimeTypes = "x-world/x-3dmf", "x-world/x-3dmf", "application/octet-stream", "application/x-authorware-bin",...

Microsoft Internet Explorer 'EMBED' Tag Uninitialized Memory Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. The asn1bufimbed function in the ASN.1 decoder in MIT Kerberos 5 aka krb5 1.6.3, when PK-INIT is used, allows remote attackers to cause a denial of service application crash via a crafted length value that trigger...

Internet Explorer embed tag src extension buffer overflow

Added: 12/11/2008 CVE: CVE-2008-4261 BID: 32595 OSVDB: 50610 Background The HTML embed tag allows developers to embed plug-ins in web pages. Problem A vulnerability in Internet Explorer allows command execution when a user loads a page containing an embed tag with a src attribute containing a...

Internet Explorer embed tag src extension buffer overflow

Added: 12/11/2008 CVE: CVE-2008-4261 BID: 32595 OSVDB: 50610 Background The HTML embed tag allows developers to embed plug-ins in web pages. Problem A vulnerability in Internet Explorer allows command execution when a user loads a page containing an embed tag with a src attribute containing a...

Internet Explorer embed tag src extension buffer overflow

Added: 12/11/2008 CVE: CVE-2008-4261 BID: 32595 OSVDB: 50610 Background The HTML embed tag allows developers to embed plug-ins in web pages. Problem A vulnerability in Internet Explorer allows command execution when a user loads a page containing an embed tag with a src attribute containing a...

Internet Explorer embed tag src extension buffer overflow

Added: 12/11/2008 CVE: CVE-2008-4261 BID: 32595 OSVDB: 50610 Background The HTML embed tag allows developers to embed plug-ins in web pages. Problem A vulnerability in Internet Explorer allows command execution when a user loads a page containing an embed tag with a src attribute containing a...

Autodesk DWF Viewer Control / LiveUpdate Module Remote Exploit

Exploit for unknown platform in category remote exploits ============================================================== Autodesk DWF Viewer Control / LiveUpdate Module Remote Exploit ============================================================== !-- Autodesk DWF Viewer Control / LiveUpdate Module...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 8 : nagios-2.11-3.fc8 (2008-3098)

Tue Mar 18 2008 Tom 'spot' Callaway 2.11-3 - add Requires for versioned perl libperl.so - get rid of pointless file Requires - Mon Mar 17 2008 Mike McGrath 2.11-2 - Upstream released new version - Added perl-ExtUtils-Embed - Tue Feb 12 2008 Mike McGrath 2.10-6 - Rebuild for gcc43 - Thu Nov 29...

Design/Logic Flaw

Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed, allows remote attackers to execute arbitrary commands via a QuickTime Media Link QTL file with an embed XML element and a qtnext parameter containing the...

Tikiwiki 1.9.7 HTML/embed object injection

Tikiwiki Version: 1.9.7 Example Address http://example.com/tiki-remindpassword.php Overview: The following codes can be added to the HTML password page by placing the HTML codes in the user name input box and hitting the "send me my password" button. Examples: 1.brbrbuXSS/u/b 2.EMBED...

Apple QuickTime插件任意脚本执行漏洞

Apple QuickTime是一款流行的媒体播放程序。 Apple QuickTime处理Media Link文件存在问题，远程攻击者可以利用漏洞导致任意脚本代码执行，获得敏感信息。 Media Link文件提供对媒体文件更方便的访问模式，.qtl文件使用xml语言，类似语法如下： ?xml version="1.0" ?quicktime type="application/x-quicktime-media-link"? embed src="Sample.mov" autoplay="true"/...