2291 matches found
Oracle Outside In Library OOXML Overflow
Added: 02/03/2012 CVE: CVE-2012-0110 BID: 51452 OSVDB: 78411 Background Oracle Outside In is a a suite of software development kits that allows developers with a comprehensive solution to access, transform, and control the contents of over 500 unstructured file formats. Problem Outside In version...
Oracle Outside In Library OOXML Overflow
Added: 02/03/2012 CVE: CVE-2012-0110 BID: 51452 OSVDB: 78411 Background Oracle Outside In is a a suite of software development kits that allows developers with a comprehensive solution to access, transform, and control the contents of over 500 unstructured file formats. Problem Outside In version...
Immunity Canvas: MS12_004
Name| ms12004 ---|--- CVE| CVE-2012-0003 Exploit Pack| CANVAS Description| MS12004 Notes| CVE Name: CVE-2012-0003 VENDOR: Microsoft NOTES: This exploit will work on Internet Explorer 8. Repeatability: Single References: http://technet.microsoft.com/en-us/security/bulletin/ms12-004 CVE Url:...
Immunity Canvas: MS12_005
Name| ms12005 ---|--- CVE| CVE-2012-0013 Exploit Pack| CANVAS Description| MS12-005: MS Office 2007-2010 Shell Object Packager file extension bypass Notes| Repeatability: Infinite Notes: The issue we exploit here was fixed silently alongside the ClickOnce issues in the MS12-005 patch but allows f...
Immunity Canvas: STRUTSCODEINJECTION
Name| strutsCodeInjection ---|--- CVE| CVE-2012-0394 Exploit Pack| CANVAS Description| Struts Code Injector Notes| CVE Name: CVE-2012-0394 VENDOR: Apache Notes: CVE-2012-0394 - Struts = 2.2.1.1 ExceptionDelegator When an exception occurs while applying parameter values to properties, the value is...
Immunity Canvas: FIREFOX_NSSVGVALUE
Name| firefoxnsSVGValue ---|--- CVE| CVE-2011-3658 Exploit Pack| CANVAS Description| firefoxnsSVGValue Notes| CVE Name: CVE-2011-3658 VENDOR: Mozilla Repeatability: One Shot Note: CVE Url: https://vulners.com/cve/CVE-2011-3658 Date public: 09/25/2008...
Immunity Canvas: MS11_098
Name| ms11098 ---|--- CVE| CVE-2011-2018 Exploit Pack| CANVAS Description| MS11-098 Notes| CVE Name: CVE-2011-2018 VENDOR: Microsoft Notes: http://technet.microsoft.com/en-us/security/bulletin/ms11-098 Reliably exploits Windows XP to 7 32-bit only. When executed, this will get a callback that run...
CVE-2011-4695
Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wpiesandboxescape module for Immunity CANVAS. NOTE: as of 20111207, th...
Mozilla Foundation Security Advisory 2011-50
Mozilla Foundation Security Advisory 2011-50 Title: Cross-origin data theft using canvas and Windows D2D Impact: High Announced: November 8, 2011 Reporter: Products: Firefox, Thunderbird Fixed in: Firefox 8.0 Thunderbird 8.0 Description Mozilla developer Bas Schouten reported that the introductio...
CVE-2011-3649
Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D aka D2D API is used on Windows in conjunction with the Azure graphics back-end, allow remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas. NOTE:...
Design/Logic Flaw
Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D aka D2D API is used on Windows in conjunction with the Azure graphics back-end, allow remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas. NOTE:...
Cross-origin data theft using canvas and Windows D2D — Mozilla
Mozilla developer Bas Schouten reported that the introduction of the "Azure" graphics back-end on Windows in Firefox 7 re-introduced the cross-origin data theft issue reported by nasalislarvatus3000 as described in MFSA 2011-29...
Immunity Canvas: JAVA_RHINO
Name| javarhino ---|--- CVE| CVE-2011-3544 Exploit Pack| CANVAS Description| javarhino Notes| CVE Name: CVE-2011-3544 VENDOR: Sun OSVDB: http://osvdb.org/show/osvdb/76500 Repeatability: Infinite client side - no crash References: http://schierlm.users.sourceforge.net/CVE-2011-3544.html CVE Url:...
Immunity Canvas: MS11_080
Name| ms11080 ---|--- CVE| CVE-2011-2005 Exploit Pack| CANVAS Description| MS11-080 Notes| CVE Name: CVE-2011-2005 VENDOR: Microsoft Notes: http://technet.microsoft.com/en-us/security/bulletin/ms11-080 Reliably exploits Windows XP SP3 and 2003 SP2 32/64-bit. When executed, this will get a callbac...
Immunity Canvas: PLONE
Name| plone ---|--- CVE| CVE-2011-3587 Exploit Pack| CANVAS Description| Plone Zope Remote Command Execution Notes| CVE Name: CVE-2011-3587 Notes: Vulnerable versions include: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zope 2.13.x. Repeatability: Infinite CVE Url:...
CVE-2011-2986
Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D aka D2D API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data...
CVE-2011-2986
Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D aka D2D API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data...
Design/Logic Flaw
Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products, when the Direct2D aka D2D API is used on Windows, allows remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data...
CVE-2011-2986
CVE-2011-2986 affects Mozilla Firefox 4.x–5, Thunderbird before 6, and SeaMonkey 2.x before 2.3 on Windows when using Direct2D. The issue allows cross‑origin data theft by inserting image data from a different domain into a canvas, potentially bypassing the Same Origin Policy. Root cause, as stat...
