3101 matches found
Mozilla Firefox for Linux / Unix DoS
Crash on large size GIF used ad body background...
PT-2009-4181 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0 iPhone OS versions 1.0 through 2.2.1 iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service by destroying a...
Mozilla Firefox 'keygen' HTML Tag DOS Vulnerability (Windows)
The host is installed with Mozilla Firefox browser and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxkeygendosvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox 'keygen' HTML Tag DOS Vulnerability Windows Authors: Antu Sanadi Copyright: Copyrig...
AXIGEN Webmail < 7.1.0 HTML Body Script Insertion
The version of AXIGEN Webmail running on the remote host is earlier than 7.1.0. Such versions fail to fully sanitize text in the body of email messages. If an attacker can trick a user into opening a specially crafted message using the affected webmail application, this can be leveraged to inject...
PPT 0day-vulnerability warning-the black bar safety net
Author: wordexp ppt "0day"configuration mode:new keys a PPT,find a 9f 0f 0 4 0 0 0 0 0 0,put back the byte to 0 3 0 0 0 0 0 0 TextHeaderAtom 3 9 9 9,9f0f,atom: this record indicates that after the text atom of meaning that can be used to distinguish text is separated into different blocks Value...
DEBIAN-CVE-2009-1191
modproxyajp.c in the modproxyajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request...
DEBIAN-CVE-2009-0840
Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header...
Mozilla Firefox 3.0.6 - BODY onload Remote Crash
Mozilla Firefox 3.0.6 - BODY onload Remote Crash milw0rm.com 2009-02-23...
Mozilla Firefox 3.0.6 (BODY onload) Remote Crash Exploit
Exploit for multiple platform in category dos / poc ======================================================== Mozilla Firefox 3.0.6 BODY onload Remote Crash Exploit ======================================================== 0day.today 2018-01-04...
Microsoft IE screen[""]远程拒绝服务漏洞
BUGTRAQ ID: 33149 CVECAN ID: CVE-2009-0072 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 如果用户通过Internet Explorer打开网页的BODY单元中设置了onload=screen""属性值的话，就会导致浏览器崩溃。 Microsoft Internet Explorer 8 beta 2 Microsoft Internet Explorer 8 beta 1 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 厂商补...
PT-2009-2774 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6.0 through 8.0 beta2 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by using an onload attribute with a specific value,...
CGI RESCUE WebFORM missing mail content vulnerability
Overview WebFORM from CGI RESCUE is software that enables the emailing of contents of an HTML form. A vulnerability exists in WebFORM. By entering a particular string in the message body, a message missing sender information could be sent. Impact Some part of the sender information in the message...
Buffer overflow
Multiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy formerly Verity KeyView, as used by IBM Lotus Notes 7.0.2 and 7.0.3, allow remote attackers to execute arbitrary code via an HTML document with 1 "large chunks of data," or a long URL in the 2 BACKGROUND attribute of a BO...
CVE-2008-1358
Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY...
Heap overflow
Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview...
Mozilla Thunderbird MIME外部主体堆溢出漏洞
CVECAN ID: CVE-2008-0304 Thunderbird是Mozilla发布的邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Thunderbird在处理畸形格式的邮件数据时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Thunderbird没有正确地解析邮件中的external-body MIME类型，在计算所要分配堆缓冲区的字节数时没有为所要拷贝的数据保留足够的空间。如果用户受骗打开了恶意邮件消息的话，就可能最多覆盖3字节的缓冲区，导致执行任意指令。 Mozilla Thunderbird 2.0.0.9 临时解决方法：...
Mozilla Thunderbird < 2.0.0.12 Multiple Vulnerabilities
The installed version of Thunderbird is affected by various security issues : - Several stability bugs exist leading to crashes which, in some cases, show traces of memory corruption. - Several issues exist that allow scripts from page content to escape from their sandboxed context and/or run wit...
Heap buffer overflow in external MIME bodies — Mozilla
Security research firm iDefense reported that researcher regenrecht discovered a heap-based buffer overflow vulnerability in Mozilla mail code which could potentially allow an attacker to run arbitrary code. The vulnerability is caused by allocating a buffer that can be three bytes too small in...
thunderbird/seamonkey: MIME External-Body Heap Overflow Vulnerability
Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview...
thunderbird/seamonkey: MIME External-Body Heap Overflow Vulnerability
Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview...