212 matches found
Debian DSA-1694-1 : xterm - design flaw
Paul Szabo discovered that xterm, a terminal emulator for the X Window System, places arbitrary characters into the input buffer when displaying certain crafted escape sequences CVE-2008-2383 . As an additional precaution, this security update also disables font changing, user-defined keys, and X...
[SECURITY] [DSA 1694-1] New xterm packages fix remote code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1694-1 [email protected] http://www.debian.org/security/ Florian Weimer January 02, 2009 http://www.debian.org/security/faq -...
CVE-2008-2383
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...
CVE-2008-2383
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF aka \n characters surrounding a command name within a Device Control Request Status String DECRQSS escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071...
CVE-2002-2383
Technical details sufficient to assess affected products, vulnerable components, impact, or fixes are not provided in the supplied documents; monitor for updates from authoritative sources.
CVE-2007-2383
The Prototype prototypejs framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and...
CVE-2007-2383
The Prototype prototypejs framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation JSON without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and...
CVE-2006-2383
Summary (CVE-2006-2383) : A remote code execution vulnerability in the DXImageTransform.Microsoft.Light ActiveX control (and related components) allows code execution when a user visits a crafted web page. Affected: Internet Explorer 5.01 SP4, IE 6 SP1, and earlier versions. Root cause: improper ...
Microsoft DXImageTransform Light filter fails to validate input
Overview The Microsoft DXImageTransform Light COM object fails to validate input, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft COMMicrosoft COM is a technology that allows programmers to create reusable software components that can be...
CVE-2004-2383
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain...
CVE-2004-2383
Microsoft Internet Explorer 5.0–6.0 is identified as vulnerable to a Cross-Frame Scripting Restriction bypass (CVE-2004-2383). The issue arises when an HTML document with JavaScript outside a frameset that includes the target domain can cause the frameset to retain focus, enabling an attacker to ...