Immunity Canvas: SLOGIN_RFI

Name| sloginrfi ---|--- CVE| CVE-2008-5763 Exploit Pack| CANVAS Description| SLogin Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Slogin CVE Url: https://vulners.com/cve/CVE-2008-5763 CVE Name: CVE-2008-5763...

Immunity Canvas: WORKSIMPLE_RFI

Name| worksimplerfi ---|--- CVE| CVE-2008-5764 Exploit Pack| CANVAS Description| WorkSimple Remote File Include Notes| CVSS: 9.3 Repeatability: Infinite VENDOR: WorkSimple CVE Url: https://vulners.com/cve/CVE-2008-5764 CVE Name: CVE-2008-5764...

Immunity Canvas: ROUNDCUBE

Name| roundcube ---|--- CVE| CVE-2008-5619 Exploit Pack| CANVAS Description| RoundCube Code Execution Notes| CVE Name: CVE-2008-5619 VENDOR: Roundcube.net Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2008-5619 References: 'None' CVSS: 10.0...

Malformed bitmaps can reveal old data from random places in memory

Specially malformed bitmap images can cause Opera to render the image using a palette made up from uninitialized memory. Using canvas, the pattern can be read and analyzed by JavaScript, so an attacker can get random samples of the user's memory, which may contain data...

Resized canvas patterns can cause Opera to execute arbitrary code – Opera Security Advisories

Resized canvas patterns can cause Opera to execute arbitrary code – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Moderately Severe Problem Description HTML CANVAS elements can use scaled images as patterns. With suitable scaling manipulation of the image, a script can cause...

Malformed bitmaps can reveal old data from random places in memory – Opera Security Advisories

Malformed bitmaps can reveal old data from random places in memory – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Moderately Severe Problem Description Specially malformed bitmap images can cause Opera to render the image using a palette made up from uninitialized memory. Usi...

canvas functions can reveal data from random places in memory

There is a flaw in the way that certain canvas functions are handled, that can cause the canvas to be painted with very small amounts of data constructed from random memory. The resulting canvas image can be read and analyzed by JavaScript, so an attacker can get random samples of the user's...

Resized canvas patterns can cause Opera to execute arbitrary code

HTML CANVAS elements can use scaled images as patterns. With suitable scaling manipulation of the image, a script can cause Opera to crash. This crash can sometimes cause memory corruption. To inject code, additional techniques will have to be employed...

canvas functions can reveal data from random places in memory – Opera Security Advisories

canvas functions can reveal data from random places in memory – Opera Security Advisories OPCOM Team | December 16, 2008 Severity Moderately severe Problem description There is a flaw in the way that certain canvas functions are handled, that can cause the canvas to be painted with very small...

Immunity Canvas: MS08_078

Name| ms08078 ---|--- CVE| CVE-2008-4844 Exploit Pack| CANVAS Description| MS Internet Explorer XML Parsing Vulnerability Notes| CVE Name: CVE-2008-4844 VENDOR: Microsoft MSADV: MS08-078 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS08-078.mspx Note: After the...

Immunity Canvas: MSSQL_REPLWRITETOVARBIN

Name| mssqlreplwritetovarbin ---|--- CVE| CVE-2008-5416 Exploit Pack| CANVAS Description| replwritetovarbin stored procedure overflow. Notes| CVE Name: CVE-2008-5416 VENDOR: Microsoft Notes: Exploit only works against non-DEP enabled targets. Repeatability: One-shot MSADV: MS09-004 References:...

Immunity Canvas: JAVA_DESERIALIZE

Name| javadeserialize ---|--- CVE| CVE-2008-5353 Exploit Pack| CANVAS Description| javadeserialize Notes| CVE Name: CVE-2008-5353 VENDOR: Sun OSVDB: 50500 Repeatability: Infinite client side - no crash References: http://sunsolve.sun.com/search/document.do?assetkey=1-66-244991-1 CVE Url:...

Debian DSA-1671-1 : iceweasel - several vulnerabilities

Several remote vulnerabilities have been discovered in the Iceweasel webbrowser, an unbranded version of the Firefox browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0017 Justin Schuh discovered that a buffer overflow in the http-index-forma...

DSA-1669-1 xulrunner - several vulnerabilities

Bulletin has no description...

Mozilla Image stealing via canvas and HTTP redirect

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are no...

Mozilla Thunderbird < 2.0.0.18 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 2.0.0.18. Such versions are potentially affected by the following security issues : - The canvas element can be used in conjunction with an HTTP redirect to bypass same-origin restrictions and gain access to the content in arbitrary images from...

Mozilla Foundation Security Advisory 2008-48

Mozilla Foundation Security Advisory 2008-48 Title: Image stealing via canvas and HTTP redirect Impact: High Announced: November 12, 2008 Reporter: Georgi Guninski, Michal Zalewski, Chris Evans Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.18 Thunderbird 2.0.0.18 SeaMonkey...

CVE-2008-5012

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are no...

Design/Logic Flaw

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are no...

Immunity Canvas: JOOMLARSS_RFI

Name| joomlarssrfi ---|--- CVE| CVE-2008-5053 Exploit Pack| CANVAS Description| Joomla Simple RSS Reader Remote File Include Notes| CVSS: 10.0 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2008-5053 CVE Name: CVE-2008-5053...