CVE-2009-2472

Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via a crafted document, related to a "cross origin wrapper bypass."...

CVE-2009-2472

Affected software: Mozilla Firefox before 3.0.12 (as per CVE-2009-2472). Issue: during object construction, Firefox did not always use XPCCrossOriginWrapper, allowing bypass of the Same Origin Policy and enabling cross-site scripting (XSS) via a crafted document. Impact: potential XSS vulnerabili...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

Mozilla Foundation Security Advisory 2009-40

Mozilla Foundation Security Advisory 2009-40 Title: Multiple cross origin wrapper bypasses Impact: High Announced: July 21, 2009 Reporter: mozbugra4 Products: Firefox Fixed in: Firefox 3.5 Firefox 3.0.12 Description Mozilla security researcher mozbugra4 reported a series of vulnerabilities in whi...

openSUSE 10 Security Update : xpdf-tools (xpdf-tools-2472)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

CVE-2007-2472

CVE-2007-2472 is an XSS vulnerability in Sendcard 3.4.1 and earlier, affecting sendcard.php where the form parameter can be exploited to inject arbitrary script/HTML. The description notes the vulnerability details come from third-party sources with unknown provenance. Connected documents confirm...

CVE-2006-2472

BEA WebLogic Server versions affected: 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7. The CVE-2006-2472 entry describes an unspecified vulnerability that allows untrusted applications to obtain private server keys. The connected documents corroborate the affected product and ...

CVE-2004-2472

Agnitum Outpost Pro Firewall 2.1 is affected by CVE-2004-2472. Remote attackers can cause a denial of service by flooding the firewall with small, invalid packets, which Outpost Pro cannot process quickly enough, leading to partial availability impact. The description does not provide root-cause ...

CVE-2005-2472

Affected product: BusinessMail 4.60.00. Vulnerability: multiple buffer overflows in the SMTP command handling (HELO and MAIL FROM) that allow a remote, unauthenticated attacker to crash the SMTP service; the Nessus entry also notes possible arbitrary code execution within the server process. Impa...

CVE-2004-2472

Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service CPU consumption via a flood of small, invalid packets, which can not be processed quickly enough by Outpost Pro...