libxslt: Heap address leak in XLST

The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT...

Mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2011-12 Miscellaneous memory safety hazards MFSA 2011-13 Multiple dangling pointer vulnerabilities MFSA 2011-14 Information stealing via form history MFSA 2011-15 Escalation of privilege through Java Embedding Plugin MFSA 2011-16 Directory traversal in resource:...

XSLT generate-id() function heap address leak — Mozilla

Chris Evans of the Chrome Security Team reported that the XSLT generate-id function returned a string that revealed a specific valid address of an object on the memory heap. It is possible that in some cases this address would be valuable information that could be used by an attacker while...

CVE-2011-1713

Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. NOTE: this might overlap CVE-2011-1202...

CVE-2011-1712

The txXPathNodeUtils::getXSLTId function in txMozillaXPathTreeWalker.cpp and txStandaloneXPathTreeWalker.cpp in Mozilla Firefox before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1, and SeaMonkey before 2.0.14, allows remote attackers to obtain potentially sensitive information about heap...

CVE-2011-1713

Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. NOTE: this might overlap CVE-2011-1202...

PT-2011-3313

Name of the Vulnerable Software and Affected Versions Internet Explorer 8 on Windows 7 Description The issue allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. Recommendation...

PT-2011-2175

Name of the Vulnerable Software and Affected Versions Apple iOS versions 4.3.0 through 4.3.1 Description The issue allows remote attackers to obtain potentially sensitive information about heap memory addresses via a crafted web site, leveraging the generate-id XPath function in libxslt...

PT-2011-3312

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.19 Mozilla Firefox versions 3.6.x prior to 3.6.17 Mozilla Firefox versions 4.x prior to 4.0.1 SeaMonkey versions prior to 2.0.14 Description The issue allows remote attackers to obtain potentially sensitiv...

CVE-2011-1713: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. NOTE: this might overlap CVE-2011-1202...

CVE-2011-1712: Exposure of Sensitive Information to an Unauthorized Actor

The txXPathNodeUtils::getXSLTId function in txMozillaXPathTreeWalker.cpp and txStandaloneXPathTreeWalker.cpp in Mozilla Firefox before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1, and SeaMonkey before 2.0.14, allows remote attackers to obtain potentially sensitive information about heap...

DEBIAN-CVE-2011-1202

The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT...

CVE-2011-1202

The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT...

PT-2011-2944

Name of the Vulnerable Software and Affected Versions libxslt versions 1.1.26 and earlier Description The issue allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function. This is...

PT-2010-5570 · Ibm · Ibm Tivoli Storage Manager

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager TSM versions 5.3.x through 5.3.6.9 IBM Tivoli Storage Manager TSM versions 5.4.x through 5.4.3.3 IBM Tivoli Storage Manager TSM versions 5.5.x through 5.5.2.9 IBM Tivoli Storage Manager TSM versions 6.1.x through...

CVE-2010-3869

Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN...

Deepburner Pro version 1.9.0.228 dbr file universal buffer overflow exploit

No description provided by source. / Deepburner pro 1.9.0.228 dbr file buffer overflow exploituniversal This is buffer: header 253 bytes + junk+ next seh + seh addr + tail 957 bytes dbr/dbi file Date: 29.01.2010 Dicovery Credits: fl0 fl0w Exploit Credits : fl0 fl0w ?Download latest vuln vs from:...

linux/x86 generate portbind payload

No description provided by source. ?php / Utility : Generate Payload PortBind Linux/x86 Author : Jonathan Salwan Mail : submit ! shell-storm.org More shellcodes in = http://www.shell-storm.org/shellcode/ / function syntax echo "\nSyntax:\nroot@laptop:/ php ./payload.php port\n\n"; function...

Generic x86 Debug Trap

Generate a debug trap in the target process This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 1 include Msf::Payload::Single def initializeinfo = supermergeinfoinfo, 'Name' = 'Generi...

selfgen-xss.txt

Release Date: August 23 2008 Platform: Web Severity: Important Summary: Bam host a large number of websites for student unions throughout the uk using a custom cms system called Self Generate. This vulnerability affects all of these websites and allows attackers to inject arbitrary html/javascrip...