Mozilla Firefox 8.0 Null Pointer Dereference

Firefox GetStatus&status; // Code execution is here. // --------------------------------------------------------------------------------- DUMP: 014E7A28 8B7D 08 MOV EDI,DWORD PTR SS:EBP+8 014E7A2B 8B07 MOV EAX,DWORD PTR DS:EDI ; access violation when reading 0x00000000 014E7A2D 8D4D FC LEA...

Mozilla Products Multiple Unspecified Vulnerabilities (MAC OS X)

The host is installed with Mozilla firefox/thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultunspecifiedvulnmacosx.nasl 7029 2017-08-31 11:51:40Z teissa $ Mozilla Products Multiple Unspecified Vulnerabilities MAC OS X Authors: Madhuri D...

Firefox 8.0 Null Pointer Dereference PoC

Exploit for multiple platform in category dos / poc Firefox GetStatus&status; // Code execution is here. // --------------------------------------------------------------------------------- DUMP: 014E7A28 8B7D 08 MOV EDI,DWORD PTR SS:EBP+8 014E7A2B 8B07 MOV EAX,DWORD PTR DS:EDI ; access violation...

Firefox < 8.0 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 8.0 and thus, is potentially affected by the following security issues : - Certain invalid sequences are not handled properly in 'Shift-JIS' encoding, which can allow cross-site scripting attacks. CVE-2011-3648 - Profiling JavaScript files with man...

CVE-2011-3522

Unspecified vulnerability in SysFW 8.0 on certain SPARC T3, Netra SPARC T3, Sun Fire, and Sun Blade based servers allows local users to affect confidentiality, related to Integrated Lights Out Manager CLI...

CVE-2011-3506

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication...

CVE-2011-3517

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability via unknown vectors related to Authentication...

Design/Logic Flaw

Unspecified vulnerability in SysFW 8.0 on certain SPARC T3, Netra SPARC T3, Sun Fire, and Sun Blade based servers allows local users to affect confidentiality, related to Integrated Lights Out Manager CLI...

CVE-2011-3517

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability via unknown vectors related to Authentication...

CVE-2011-3522

CVE-2011-3522 concerns an unspecified vulnerability in SysFW 8.0 on Oracle SPARC-based servers (SPARC T3, Netra SPARC T3, Sun Fire, Sun Blade) that allows local users to affect confidentiality, related to the Integrated Lights Out Manager (ILOM) CLI. The available connected sources confirm the af...

CVE-2011-3522

Unspecified vulnerability in SysFW 8.0 on certain SPARC T3, Netra SPARC T3, Sun Fire, and Sun Blade based servers allows local users to affect confidentiality, related to Integrated Lights Out Manager CLI...

PlotSoft PDFill PDF Editor Untrusted Search Path Vulnerability

PlotSoft PDFill PDF Editor is prone to untrusted search path vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2218

Unspecified vulnerability in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service daemon crash via unknown vectors, a different vulnerability than CVE-2011-2219...

Integer overflow

Integer signedness error in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a negative BYWEEKNO property in a weekly RRULE variable in a VCALENDAR attachment in an e-mail message...

Stack overflow

Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP request for a .css file...

Code injection

Unspecified vulnerability in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service daemon crash via unknown vectors, a different vulnerability than CVE-2011-2218...

Code injection

Array index error in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a VCALENDAR attachment in an e-mail message...

Code injection

Unspecified vulnerability in GroupWise Internet Agent GWIA in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service daemon crash via unknown vectors, a different vulnerability than CVE-2011-2219...

CVE-2011-2662

CVE-2011-2662 is a memory corruption/remote code‑execution vulnerability in Novell GroupWise Internet Agent (GWIA) 8.0 prior to HP3. The issue arises when parsing a VCALENDAR RRULE with a negative BYWEEKNO value, triggering a write beyond a heap buffer. This is described across multiple sources (...

CVE-2011-2218

CVE-2011-2218 concerns Novell GroupWise 8.0 clients using the GWIA component. The vulnerability allows remote attackers to cause a denial of service (daemon crash) on affected systems running GroupWise 8.0 before HP3 via unknown vectors. The description does not specify concrete exploit details o...