CVE-2009-3672

CVE-2009-3672 is a memory-corruption vulnerability in Microsoft Internet Explorer 6/7 related to getElementsByTagName for the STYLE element, with corruption of objects in mshtml.dll when outerHTML is changed. It allows remote code execution and is associated with the MS09-072 bulletin; patches/up...

CVE-2009-4088

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to 1 getjs.php and 2 getcsslocal.php; and include and execute arbitrary local files via the 3 group parameter to...

CVE-2009-4088

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to 1 getjs.php and 2 getcsslocal.php; and include and execute arbitrary local files via the 3 group parameter to...

Microsoft Internet Explorer CSS style element vulnerability

Overview Microsoft Internet Explorer IE does not safely reference CSS style elements. Using a specially crafted HTML page, an attacker can cause IE to crash and potentially execute arbitrary code. Description IE contains a vulnerability in the way it references CSS style elements. Processing a...

New Zero-Day Flaw Discovered in IE7

There is a newly discovered vulnerability in both Internet Explorer 6 and Internet Explorer 7 that could enable an attacker to take complete control of a vulnerable machine. The vulnerability is the result of a dangling pointer in IE and there is a working exploit for the flaw circulating online...

AlleyCode 2.21 SEH overflow POC&#8207

No description provided by source. What is AlleyCode? AlleyCode is a free html editor. Alleycode was chosen as one of the best freebies on the Net. The entire list of the ' 101 Fabulous Freebies' was featured in the May 2006 issue of PCWorld Magazine. Thanks PCWorld... Alleycode is a fast, sleek...

Microsoft Internet Explorer 67 - CSS Handling Denial of Service

Microsoft Internet Explorer 67 - CSS Handling Denial of Service function load var e; e=document.getElementsByTagName"STYLE"0; e.outerHTML="1"; body overflow: scroll; margin: 0; var shellcode =...

Internet Explorer 6/7 CSS Handling Denial of Service

No description provided by source. !-- securitylab.ir K4mr4nst at yahoo dot com email concealed -- !DOCTYPE HTML PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" HTML xmlns="http://www.w3.org/1999/xhtml" HEAD script function load var e;...

Internet Explorer 6/7 CSS Handling Denial of Service

Exploit for unknown platform in category dos / poc ==================================================== Internet Explorer 6/7 CSS Handling Denial of Service ==================================================== Title: Internet Explorer 6/7 CSS Handling Denial of Service CVE-ID: OSVDB-ID: Author:...

Microsoft Internet Explorer 6/7 - CSS Handling Denial of Service

function load var e; e=document.getElementsByTagName"STYLE"0; e.outerHTML="1"; body overflow: scroll; margin: 0; var shellcode =...

Safari 4.0.3 Win32 Denial Of Service

!/usr/bin/perl ithinkthereforeiexist.pl AKA Safari 4.0.3 Win32 CSS Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 11.09.2009 Another remotely triggerable STACKOVERFLOW in Safari on Windows... 204.72c: Stack overflow - code c00000fd first...

Safari 4.0.3 (Win32) CSS Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl ithinkthereforeiexist.pl AKA Safari 4.0.3 Win32 CSS Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 11.09.2009 Another remotely triggerable STACKOVERFLOW in Safari on Windows... 204.72c:...

Safari 4.0.3 (Win32) CSS Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= Safari 4.0.3 Win32 CSS Remote Denial of Service Exploit ========================================================= Title: Safari 4.0.3 Win32 CSS Remote Denial of Service Exploit CVE-ID:...

Apple Safari 4.0.3 (Windows x86) - CSS Remote Denial of Service (1)

Apple Safari 4.0.3 Windows x86 - CSS Remote Denial of Service 1 !/usr/bin/perl ithinkthereforeiexist.pl AKA Safari 4.0.3 Win32 CSS Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 11.09.2009 Another remotely triggerable STACKOVERFLOW in...

Apple Safari 4.0.3 (Windows x86) - 'CSS' Remote Denial of Service (1)

!/usr/bin/perl ithinkthereforeiexist.pl AKA Safari 4.0.3 Win32 CSS Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 11.09.2009 Another remotely triggerable STACKOVERFLOW in Safari on Windows... 204.72c: Stack overflow - code c00000fd first...

WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' CSS

Exploit for unknown platform in category web applications ================================================================================ WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability...

Apple Safari buffer overflow

Buffer overflow on oversized CSS background attribute...

Safari 4.0.3 (Win32) CSS Remote Denial of Service Exploit

!/usr/bin/perl ithinkthereforeiexist.pl AKA Safari 4.0.3 Win32 CSS Remote Denial of Service Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 11.09.2009 Another remotely triggerable STACKOVERFLOW in Safari on Windows... 204.72c: Stack overflow - code c00000fd first...

Firefox crashes with evidence of memory corruption

layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified...

Microsoft IE writing-mode内存破坏漏洞（MS09-054）

BUGTRAQ ID: 36616 CVECAN ID: CVE-2009-2531 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer在解析CSS样式信息时存在漏洞。如果对特定的HTML标签组合使用了writing-mode样式，就可能触发内存破坏。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，就可能允许远程执行代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6...