CVE-2015-3987

McAfee ePO Deep Command (Client Management and Gateway) 2.1/2.2 are affected by CVE-2015-3987 due to unquoted Windows search paths leading to local privilege elevation. The issue is rooted in unquoted path handling, enabling local users to gain privileges via unspecified vectors. A patched releas...

Mozilla Firefox 16 Reader Mode 跨站脚本执行漏洞 (CVE-2012-3987)

BUGTRAQ ID: 55856 CVE ID: CVE-2012-3987 Firefox是一款非常流行的开源WEB浏览器。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。 Mozilla Firefox 16存在安全漏洞，当一个页面转变到Reader Mode时，结果页面会具有chrome权限，其内容也未被完全过滤。这可导致跨脚本执行攻击，以获取Android设备上的Firefox权限。 0 Mozilla Firefox 16 厂商补丁： Mozilla -------...

CVE-2012-3987

Mozilla Firefox before 16.0 on Android assigns chrome privileges to Reader Mode pages, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site...

CVE-2012-3987

CVE-2012-3987 (Firefox for Android) : The issue arises when a page is transitioned into Reader Mode; the resulting page is given chrome privileges and may not be fully sanitized. Exploitation requires user activation of Reader Mode on a malicious page, enabling a cross-site scripting–like attack ...

CVE-2011-3987

The CVE-2011-3987 issue affects DAEMON Tools family (Lite prior to 4.41.3; Pro Standard/Advanced prior to 4.41.0315). A local DoS can be triggered by an invalid DeviceIoControl call to \.\dtsoftbusctl, crashing the system. Root cause: improper handling of IOCTL requests in dtsoftbus01.sys; expose...

CVE-2011-3987

dtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41.0315, and Pro Advanced before 4.41.0315 allows local users to cause a denial of service system crash via an invalid DeviceIoControl request to \.\dtsoftbusctl...

openSUSE Security Update : seamonkey (seamonkey-1738)

The Mozilla SeaMonkey browser suite was updated to version 2.0.1, fixing lots of bugs and various security issues. The following issues were fixed : - MFSA 2009-65/CVE-2009-3979/CVE-2009-3981 Crashes with evidence of memory corruption 1.9.0.16 - MFSA 2009-68/CVE-2009-3983 bmo487872 NTLM reflectio...

Mandriva Security Advisory MDVSA-2009:339 (firefox)

The remote host is missing an update to firefox announced via advisory MDVSA-2009:339. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Seamonkey Multiple Vulnerabilities (Dec 2009) - Linux

Seamonkey browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3987

CVE-2009-3987 affects Mozilla Firefox (before 3.0.16 and 3.5.x before 3.5.6) and SeaMonkey (before 2.0.1); the GeckoActiveXObject function returns different exception messages based on whether a ProgID is listed in the registry, enabling remote attackers to infer installed software via multiple c...

Mozilla Foundation Security Advisory 2009-71

Mozilla Foundation Security Advisory 2009-71 Title: GeckoActiveXObject exception messages can be used to enumerate installed COM objects Impact: Low Announced: December 15, 2009 Reporter: Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.6 Firefox 3.0.16 SeaMonkey 2.0.1...

CVE-2008-3987

Unspecified vulnerability in the Oracle Discoverer Desktop component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors...

CVE-2007-3987

SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter...

CVE-2007-3987

The CVE-2007-3987 entry concerns ImageRacer 1.0 where the SQL injection occurs in SearchResults.asp when WordSearchCrit is enabled. The vulnerability is triggered through the SearchWord parameter, allowing remote attackers to execute arbitrary SQL commands. This is a network-remote issue with low...

CVE-2006-3987

The CVE-2006-3987 entries describe multiple PHP remote file inclusion vulnerabilities in Knusperleicht FileManager 1.2 and earlier. The issue arises in index.php where an attacker can supply a URL in the dwl_download_path or dwl_include_path parameters, enabling remote code execution. Connected d...

CVE-2005-3987

CVE-2005-3987 affects Tradesoft CMS and involves multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified attack vectors. The connected documents confirm the product and vulnerability class but do not provide version ranges, affected mod...