Mac OS X : Apple Safari < 3.2

The version of Apple Safari installed on the remote Mac OS X host is earlier than 3.2. As such, it is potentially affected by several issues : - A signedness issue in Safari's handling of JavaScript array indices could lead to a crash or arbitrary code execution. CVE-2008-2303 - A memory corrupti...

Safari < 3.2 Multiple Vulnerabilities

Binary data 4754.prm...

CVE-2008-2303

CVE-2008-2303 affects Safari on Apple iPhone before 2.0 and iPod touch before 2.0. It is caused by an integer signedness error in handling JavaScript array indices, which can trigger an out-of-bounds access. The result can be remote arbitrary code execution or a denial of service (application cra...

CVE-2002-2303

3D3.Com ShopFactory 5.8 is affected by a vulnerability where client-side encryption and decryption of sensitive price data enables remote attackers to modify shopping cart prices by using JavaScript to decrypt the cookie containing the data. This indicates a weakness in where price data is stored...

CVE-2007-2303

CVE-2007-2303 – News Manager Deluxe NMDeluxe 1.0.1 A directory traversal vulnerability exists in includes/footer.php that allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the template parameter. This affects NMDeluxe 1.0.1 as described in the CVE...

CVE-2006-2303

CVE-2006-2303 describes a Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier. The flaw allows a remote attacker to inject arbitrary web script from one application into another via a banner, which is processed in the My Computer zone using the Internet Explo...

CVE-2006-2303

Cross-Application Scripting XAS vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web script from one application into another via a banner, which is processed in the My Computer zone using the Internet Explorer COM object...

CVE-2004-2303

CVE-2004-2303 affects MTools Mformat prior to 3.9.9. When installed setuid root, mformat can create files with world-readable and world-writable permissions, enabling local users to read and overwrite files. Root cause is the setuid root usage and permissive file creation. In Mandrake/MKSA adviso...

CVE-2005-2303

...

CVE-2005-2303

CVE-2005-2303 is rejected/not used; refer to CVE-2005-1218.

CVE-2004-2303

MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files...

Mandrake Linux Security Advisory : mtools (MDKSA-2004:016)

Sebastian Krahmer found that the mformat program, when installed suid root, can create any file with 0666 permissions as root, and that it also does not drop privileges when reading local configuration files. The updated packages remove the suid bit from mformat. %NASLMINLEVEL 70300 C Tenable...

CVE-2002-2303

3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data...