CVE-2008-2264

The CVE-2008-2264 entry concerns an XSS vulnerability in CyrixMED 1.4, triggered in index.php via the msg_erreur parameter. Affected component: index.php function handling user-supplied input. Underlying cause is a lack of proper input sanitization sufficient to prevent HTML/script injection. Imp...

Debian Security Advisory DSA 779-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 779-1. Several problems have been discovered in Mozilla Firefox, a lightweight web browser based on Mozilla. For more details, please visit the referenced security advisory. The old stable distribution woody is not...

ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability

ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-063.html October 25, 2007 -- CVE ID: CVE-2007-2264 -- Affected Vendor: RealNetworks RealPlayer version 10.5 -- Affected Products: RealPlayer 6.x -- TippingPointTM IPS...

CVE-2007-2264

The CVE-2007-2264 issue is a heap overflow in RealNetworks RealPlayer/RealOne/HelixPlayer when processing RA/RAM headers with an overly large size field. Affected products include RealPlayer 8, 10, 10.1 (and possibly 10.5), RealOne Player 1 and 2, and RealPlayer Enterprise. The underlying cause i...

CVE-2002-2264

Technical details for CVE-2002-2264 are not publicly provided in the supplied documents; the connected entries do not specify the affected product, impact, or fix for this CVE. Monitor for updates.

CentOS 4 : firefox (CESA-2005:586)

An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox...

CVE-2006-2264

CVE-2006-2264 affects Ocean12 Calendar Manager Pro 1.00, with multiple SQL injection vulnerabilities that allow a remote attacker to execute arbitrary SQL commands via (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. The explo...

firefox security update

CentOS Errata and Security Advisory CESA-2005:586 An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source We...

Important: Red Hat Security Advisory: firefox security update

An updated firefox package that fixes various security bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox...

RHEL 4 : firefox (RHSA-2005:586)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:586 advisory. Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content...

Fedora Core 3 : firefox-1.0.6-1.1.fc3 (2005-603)

Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or execute malicious JavaScript code. The Common Vulnerabilities an...

Fedora Core 4 : firefox-1.0.6-1.1.fc4 (2005-605)

Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or execute malicious JavaScript code. The Common Vulnerabilities an...

CVE-2004-2264

Format string bug in the openaltfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a...

CVE-2005-2264

CVE-2005-2264 affects Firefox prior to 1.0.5, allowing a remote attacker to steal data by guiding a user to open a malicious link in the browser’s sidebar via the _search target and then inject script into other pages using a data: URL. The connected documents corroborate Firefox involvement and ...

BELL-CVE-2004-2264 CVE-2004-2264 does not affect BellSoft software

Bulletin has no description...

CVE-2002-2264

Unspecified vulnerability in Internet Group Management Protocol IGMP of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: this might be the same issue as CVE-2002-2185, but there are insufficient details to be certain...