CVE-2005-0401

FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolli...

RHEL 4 : firefox (RHSA-2005:336)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:336 advisory. Mozilla Firefox is an open source Web browser. A buffer overflow bug was found in the way Firefox processes GIF images. It is possible for an...

RHEL 4 : mozilla (RHSA-2005:335)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:335 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A buffer overflow bug was found...

CVE-2005-0401

CVE-2005-0401 affects Mozilla Firefox 1.0.1 and Mozilla before 1.7.6. The issue arises from insufficient mitigation of attack vectors for loading chrome files and hijacking drag-and-drop events, enabling a remote attacker to execute arbitrary XUL code by tricking a user into dragging a scrollbar ...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix various bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A buffer overflow bug was found in the way Firefox processes GIF images. It is...

Mozilla Browser < 1.7.6 Multiple Vulnerabilities

The remote version of Mozilla contains multiple security issues that could allow an attacker to impersonate a website and to trick a user into accepting and executing arbitrary files or to cause a heap overflow in the FireFox process and execute arbitrary code on the remote host. C Tenable Networ...

CVE-2004-0401

Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions...

CVE-2004-0401

CVE-2004-0401 affects libtasn1 in the 0.1.x line prior to 0.1.2 and the 0.2.x line prior to 0.2.7, with the underlying issue in the DER parsing functions. The vulnerability is described as unknown but severe (CVSSv2 base score 10.0; Confidentiality, Integrity, and Availability impacts all complet...

CVE-2003-0401

Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template...

CVE-2003-0401

Affected software/impact (summary). CVE-2003-0401 affects Vignette StoryServer and Vignette V/5. The vulnerability is describ ed as allowing remote attackers to obtain sensitive information by requesting the /vgn/style template. The NVD entry provides a network-accessible impact with partial conf...

CVE-2003-0401

Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template...

CVE-2002-0401

SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer...

CVE-2002-0401

The CVE-2002-0401 issue affects Ethereal SMB dissector: versions 0.9.3 and earlier are vulnerable to remote denial of service or arbitrary code execution due to a NULL pointer dereference when handling malformed SMB packets. Connected sources confirm the flaw and indicate remediation by upgrading...

CVE-2002-0401

SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer...

CVE-2001-0401

Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable...

CVE-2001-0401

CVE-2001-0401 involves a buffer overflow in the Solaris tip tool on Solaris 8 and earlier. The overflow is triggered by a long HOME environment variable, allowing local users to execute arbitrary commands. The core details provided indicate the affected component is the tip program, with the root...

CVE-2000-0401

Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string...

CVE-2000-0401

PDGSoft Shopping Cart vulnerability (CVE-2000-0401) affects redirect.exe and changepw.exe. The issue is remote buffer overflows that allow an attacker to execute arbitrary commands via a long query string, potentially leading to data disclosure or privilege escalation on the web server. Exploitat...

CVE-2000-0401

Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string...

CVE-1999-0401

CVE-1999-0401 describes a race condition in Linux kernel 2.2.1 that allows local users to read arbitrary memory from /proc files. The vulnerability arises from a race in the /proc handling in Linux 2.2.1, enabling partial/possible disclosure of memory contents to unprivileged local users. Affecte...