seamonkey < 1.0.7 multiple vulnerabilities

Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1.0.7 allow remote attackers to execute arbitrary code via 1 external message modies with long Content-Type headers or 2 long RFC2047-encoded MIME non-ASCII headers...

CVE-2006-3079

Summary: CVE-2006-3079 describes a Cross-site scripting (XSS) vulnerability in the SSPwiz Plus product, specifically in index.cfm for version 1.0.7 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the message parameter. The published metrics indicate a Med...

PT-2006-2289 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 1.0.7 through 1.5.0.1 Description: The issue allows remote attackers to cause a denial of service via an HTML tag with a large number of script action handlers such as onload and onmouseover. This triggers the crash...

CVE-2006-1048

Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the 1 Weblink, 2 Polls, 3 Newsfeeds, 4 Weblinks, 5 Content, 6 Content Section, 7 Content Category, 8 Contact items, or 9 Contact Search, 10 Content...

CVE-2006-1028

feedcreator.class.php aka the syndication component in Joomla! 1.0.7 allows remote attackers to cause a denial of service stressed file cache by creating many files via filenames in the feed parameter to index.php...

CVE-2006-1029

The cross-site scripting XSS countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to cause a denial of service via a crafted mosmsg parameter to index.php with a malformed sequence of multiple tags, as demonstrated using "AAA", possibly due to nested or empty tags...

CVE-2006-1028

Vulnerability: CVE-2006-1028 affects Joomla! 1.0.7 via the feedcreator.class.php (syndication component). Attackers can trigger a denial of service by creating many files through filenames supplied in the feed parameter to index.php, stressing the file cache. Impact: remote DoS with complete avai...

CVE-2006-1027

The CVE-2006-1027 issue affects Joomla! 1.0.7, specifically feedcreator.class.php (the syndication component). A remote attacker can cause an information disclosure by passing a "/" in the feed parameter to index.php, which leaks the installation path in an error message. The available sources de...

joomla.txt

RST/GHC -- JOOMLA CMS -- ADVISORY 37 Product: Joomla Affected version: 1.0.7 Last version: 1.0.7 Vendor: Joomla! URL: http://www.joomla.org/ online demo: http://demo.joomla.org/ VULNERABILITY CLASS: DoS, path disclosing Product Description Joomla! is a Content Management System CMS created by the...

mozThunDoS.txt

Mozilla Thunderbird : Remote Code Execution & Denial of Service //----- Advisory Program : Mozilla Thunderbird Homepage : http://www.mozilla.com/thunderbird/ Tested version : Denial of service application crash : iframe src="javascript:parent.document.write'Found by www.s...

[SA18513] Joomla! Multiple Unspecified Vulnerabilities

TITLE: Joomla! Multiple Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA18513 VERIFY ADVISORY: http://secunia.com/advisories/18513/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Joomla! 1.x http://secunia.com/product/5788/ DESCRIPTION: Multiple vulnerabilities with...

MDKSA-2005:169 : mozilla-firefox

A number of vulnerabilities have been discovered in Mozilla Firefox that have been corrected in version 1.0.7: A bug in the way Firefox processes XBM images could be used to execute arbitrary code via a specially crafted XBM image file CVE-2005-2701. A bug in the way Firefox handles certain Unico...

thunderbird security update

CentOS Errata and Security Advisory CESA-2005:791 An updated thunderbird package that fixes various bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail...

security flaw

Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla...

Mozilla Firefox 1.0.7 - Integer Overflow Denial of Service

Mozilla Firefox 1.0.7 - Integer Overflow Denial of Service Copyright Georgi Guninski Cannot be used in vulnerability databases Especially securityfocus/mitre/cve/cert var s=String.fromCharCode257; var ki=""; var me=""; fori=0;i milw0rm.com 2005-09-26...

security flaw

Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code...

security flaw

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface...

CVE-2005-2726

CVE-2005-2726 describes a directory traversal vulnerability in Home Ftp Server 1.0.7 that allows remote authenticated users to read arbitrary files by supplying Windows drive-letter paths such as “C:\” in commands like LIST or RETR. The condition is authenticated access; impact is partial disclos...

CVE-2005-2081

Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character...

CVE-2005-2081

Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character...