134 matches found
PT-2010-5544 · Google +3 · Chrome Os +4
Name of the Vulnerable Software and Affected Versions: WebKit versions prior to 8.0.552.224 Google Chrome versions prior to 8.0.552.224 Chrome OS versions prior to 8.0.552.343 webkitgtk versions prior to 1.2.6 Description: The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp does...
Internet Explorer 8 CSS parsing vulnerability-vulnerability warning-the black bar safety net
Internet Explorer 8 is Microsoft launched a web browser, Internet Explorer 8 in parsing css when the presence of vulnerabilities may lead to remote code execution. This vulnerability was originally tick: the http://www.wooyun.org/bugs/wooyun-2010-0885 以 拒绝 服务 漏洞 报 给 exploit-db to:...
Microsoft Internet Explorer invalid flag reference vulnerability
Overview Microsoft Internet Explorer invalid flag reference vulnerability Description According to the Microsoft Security Research & Defense Blog, Microsoft Internet Explorer incorrectly under-allocates memory to store a certain combination of Cascading Style Sheets CSS tags when parsing HTML,...
FreeBSD : mediawiki -- two security vulnerabilities (fc55e396-6deb-11df-8b8e-000c29ba66d2)
Two security vulnerabilities were discovered : Noncompliant CSS parsing behaviour in Internet Explorer allows attackers to construct CSS strings which are treated as safe by previous versions of MediaWiki, but are decoded to unsafe strings by Internet Explorer. A CSRF vulnerability was discovered...
mediawiki -- two security vulnerabilities
Two security vulnerabilities were discovered: Noncompliant CSS parsing behaviour in Internet Explorer allows attackers to construct CSS strings which are treated as safe by previous versions of MediaWiki, but are decoded to unsafe strings by Internet Explorer. A CSRF vulnerability was discovered ...
Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required in that a user must visit a malicious web page. The specific flaw exists in the parsing of CSS style information. When a writing-mode style...
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Array index overflow on CSS parsing, crash on GIF processing under Mac OS X, code execution on command-line launch with URI...
Microsoft Word multiple security vulnerabilities
Memory coruption on RTF parsing, memory corruption on CSS parsing...
NSFOCUS SA2007-01 : Microsoft IE5 CSS Parsing Memory Corruption Vulnerability
NSFOCUS Security Advisory SA2007-01 Microsoft IE5 CSS Parsing Memory Corruption Vulnerability Release Date: 2007-08-15 CVE ID: CVE-2007-0943 http://www.nsfocus.com/english/homepage/research/0701.htm Affected systems & software =================== Internet Explorer 5.01 Unaffected systems & softwa...
MS Internet Explorer ""mshtml.dll"" CSS Parsing Buffer Overflow
No description provided by source. / Taken from http://www.securiteam.com/exploits/5NP042KF5A.html The exploit will create a .CSS file that should be included in an HTML file. When a user loads the HTML file, Internet Explorer will try to parse the CSS and will trigger the buffer overflow. /...
MS Internet Explorer "mshtml.dll" CSS Parsing Buffer Overflow
Exploit for unknown platform in category remote exploits ============================================================= MS Internet Explorer "mshtml.dll" CSS Parsing Buffer Overflow ============================================================= / The exploit will create a .CSS file that should be...
Reading portions of local files in IE, depending on structure (GM#004-IE)
GreyMagic Security Advisory GM004-IE ===================================== By GreyMagic Software, Israel. 02 Apr 2002. Available in HTML format at http://security.greymagic.com/adv/gm004-ie/. Topic: Reading portions of local files, depending on structure. Discovery date: 18 Feb 2002. Affected...
CVE-2023-42434
CVE-2023-42434 is an iOS kernel vulnerability that, when operated, granted read and write access to the entire physical memory of the device. It was used in conjunction with CVE-2023-39606 as part of a multi-stage operation targeting the iOS kernel. The CVE entry itself has been rejected by its C...
