Mozilla browsers fail to properly handle images

Overview A vulnerability exists in Mozilla products that may allow a remote attacker to view browser history or cause a denial of service. Description Mozilla products contain a vulnerability in the browser engine that may result in information disclosure or a denial of service when handling...

RHEL 4 / 5 : thunderbird (RHSA-2008:0105)

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 27th February 2008 The erratum text has been updated to include the...

[SECURITY] [DSA 1489-1] New iceweasel packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1489-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1485-1] New icedove packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1485-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1484-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1484-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2008 http://www.debian.org/security/faq -...

CVE-2008-0419

Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service crash via images in a page that uses designMode frames, which triggers memory corruption related to resize handles...

CVE-2008-0419

CVE-2008-0419 affects Mozilla Firefox (pre-2.0.0.12) and SeaMonkey (pre-1.1.8). It allows remote attackers to steal navigation history and to cause a denial of service (crash) by exploiting images in a page that uses designMode frames, triggering memory corruption related to resize handles. The p...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:0104 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup...

CVE-2007-0419

The CVE-2007-0419 issue affects the BEA WebLogic Server proxy plug-in for the Apache HTTP Server (pre June 2006). The root cause is improper handling of protocol errors in the plug-in, which can allow remote attackers to cause a denial of service (server outage). The vulnerability description not...

CVE-2006-0419

CVE-2006-0419 affects BEA WebLogic Server and WebLogic Express. The vulnerability allows anonymous binds to the embedded LDAP server, enabling remote attackers to read user entries or cause a denial of service via a large number of connections. Affected versions include WebLogic Server/Express 9....

CVE-2005-0419

Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command...

CVE-2005-0419

CVE-2005-0419 concerns the 3Com 3CServer/3CDaemon FTP server family. The connected documents confirm multiple heap-based buffer overflows that allow remote authenticated users to execute arbitrary code by sending long FTP commands (demonstrated via the STAT command). The vulnerability affects the...

CVE-2005-0419

Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command...

CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...

CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...

CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...

CVE-2003-0419

SMC Networks Barricade Wireless Cable/DSL Broadband Router SMC7004VWBR allows remote attackers to cause a denial of service via certain packets to PPTP port 1723 on the internal interface...

CVE-2003-0419

CVE-2003-0419 affects SMC Networks’ Barricade Wireless Cable/DSL Broadband Router, model SMC7004VWBR. The vulnerability allows a remote attacker to crash the device by sending a specially formatted series of packets to TCP/ PPTP port 1723 on the internal interface, rendering the router unresponsi...

CVE-2002-0419

Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which 2 in certain configurations, the server IP address is provided as the realm for Basic authentication, which...