93 matches found
Fedora 9 : WebKit-1.0.0-0.11.svn34655.fc9 (2008-6186)
This updated WebKit snapshot fixes CVE-2008-2307. A memory corruption issue exists in WebKit's handling of JavaScript arrays. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. Note that Tenable Network Security has extracted the...
Apple Safari内存破坏漏洞
BUGTRAQ ID: CVE ID：CVE-2008-2307 CNCVE ID：CNCVE-20082307 Apple Safari是一款流行的WEB浏览器。 Apple Safari处理JavaScript数组存在内存破坏问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者必须构建恶意WEB页，诱使用户访问来触发。目前没有详细漏洞细节提供。 Safari 3.x 厂商解决方案 升级到Safari3.1.2版本： http://www.apple.com/support/downloads/safari312fortiger.html...
Mac OS X : Apple Safari < 3.1.2
The version of Apple Safari installed on the remote host reportedly has a memory corruption issue in WebKit's handling of JavaScript arrays. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33286; scriptversion"1.15"; scriptcvsdate"Date: 2018/07/14 1:59:35";...
Mac OS X 10.5.x < 10.5.4 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.4. Mac OS X 10.5.4 contains security fixes for multiple components. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid33281;...
CVE-2008-2307
CVE-2008-2307 concerns a high-severity, remote code execution/DoS vulnerability in WebKit used by Apple Safari (pre-3.1.2) on Mac OS X
CVE-2002-2307
The CVE-2002-2307 entry describes a vulnerability in BenHur Firewall release 3 update 066 fix 2 where remote attackers can access services by connecting from source port 20, due to an ACL restriction bypass. Connected documents corroborate a port-20 bypass vulnerability and reference published ad...
CVE-2007-2307
The CVE-2007-2307 entry concerns WebKalk2 (vendor not specified) version 1.9.0, where the PHP file engine/engine.inc.php is vulnerable to remote file inclusion. The underlying issue is an improper handling of the absolute_path parameter, allowing an attacker to cause arbitrary PHP code execution ...
CVE-2007-2307
PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...
CVE-2006-2307
CVE-2006-2307 describes a cross-site scripting (XSS) vulnerability in Website Baker CMS prior to 2.6.4. The issue allows remote attackers to inject arbitrary web script or HTML via a user display name. The provided connected documents confirm the vendor/product and the vulnerable version range, a...
CVE-2004-2307
CVE-2004-2307 affects Microsoft Internet Explorer 6.0.2600 on Windows XP. The vulnerability allows remote attackers to cause a denial of service (browser crash) by using a shell: URI with double backslashes (\) in an HTML tag (e.g., IFRAME or A). The connected documents confirm the attack vector ...
CVE-2005-2307
CVE-2005-2307 is a denial-of-service vulnerability in the Windows Network Connection Manager (Network Connection Manager) where a web or local attacker could crash the Network Connections Service by sending a specially crafted input to netman.dll. The issue affects the Network Connection Manager ...
CVE-2004-2307
Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service browser crash via a shell: URI with double backslashes \ in an HTML tag such as IFRAME or A...
