94 matches found
Mozilla Firefox JIT Escape Function Memory Corruption
Added: 07/13/2009 CVE: CVE-2009-2477 BID: 35660 OSVDB: 55846 Background Mozilla is a suite of Internet client products available for multiple platforms. Problem A memory corruption vulnerability in Mozilla Firefox in the way it handles JIT escape function calls allows arbitrary code injection and...
CVE-2009-2477
creationtimestamp| type| source ---|---|--- 2009-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9137 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9214 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16299 2016-12-18...
Mozilla Firefox JIT Escape Function Memory Corruption
Added: 07/13/2009 CVE: CVE-2009-2477 BID: 35660 OSVDB: 55846 Background Mozilla is a suite of Internet client products available for multiple platforms. Problem A memory corruption vulnerability in Mozilla Firefox in the way it handles JIT escape function calls allows arbitrary code injection and...
Mozilla Firefox JIT Escape Function Memory Corruption
Added: 07/13/2009 CVE: CVE-2009-2477 BID: 35660 OSVDB: 55846 Background Mozilla is a suite of Internet client products available for multiple platforms. Problem A memory corruption vulnerability in Mozilla Firefox in the way it handles JIT escape function calls allows arbitrary code injection and...
CVE-2008-2477
CVE-2008-2477 describes a SQL injection vulnerability in the MX-System/MxBB Portal 2.7.3, specifically in index.php where the vulnerable input is the page parameter. The underlying issue is improper handling of user-supplied input in constructing SQL queries, enabling remote attackers to execute ...
CVE-2008-2477
creationtimestamp| type| source ---|---|--- 2008-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5659...
CVE-2007-2477
The CVE-2007-2477 issue affects phpMyChat 0.14.5, specifically the phpMyChat.php3 file where a URL provided in the {ChatPath} parameter can lead to remote code execution (PHP RFI). The root cause is the use of ChatPath in constructing or including remote content; however, this has been disputed b...
CVE-2006-2477
Cross-site scripting XSS vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject arbitrary web script or HTML via unspecified inputs...
CVE-2006-2477
Cross-site scripting XSS vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject arbitrary web script or HTML via unspecified inputs...
CVE-2006-2477
CVE-2006-2477 is an XSS vulnerability affecting the administrative interface of Bitrix Site Manager 4.1.x. It allows remote attackers to inject arbitrary web script or HTML via unspecified inputs. The CVSS v2 base score is 4.9 (Medium) with network attack vector, requiring authentication (single)...
CVE-2004-2477
DiamondCS Process Guard Free 2.000 is affected. The issue arises from an attacker with local access overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the original SDT from ntoskrnl.exe, disabling the process guard protection. The vulnerability is local in scope...
CVE-2005-2477
The CVE-2005-2477 entry concerns Naxtor Shopping Cart 1.0. The vulnerability is triggered by a cat_id value containing a single quote, causing an error message that reveals sensitive information and suggests a possible SQL injection. The available documents describe the affected software and the ...
CVE-2004-2477
DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table SDT in \device\physicalmemory with the original SDT found in ntoskrnl.exe...
