Design/Logic Flaw

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are no...

Immunity Canvas: JOOMLARSS_RFI

Name| joomlarssrfi ---|--- CVE| CVE-2008-5053 Exploit Pack| CANVAS Description| Joomla Simple RSS Reader Remote File Include Notes| CVSS: 10.0 Repeatability: Infinite VENDOR: Joomla CVE Url: https://vulners.com/cve/CVE-2008-5053 CVE Name: CVE-2008-5053...

CVE-2008-5012

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are no...

Mozilla Image stealing via canvas and HTTP redirect

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are no...

Image stealing via canvas and HTTP redirect — Mozilla

Mozilla developer Georgi Guninski reported that the canvas element could be used in conjunction with an HTTP redirect to bypass same-origin restrictions and gain access to the content in arbitrary images from other domains. This vulnerability could be used by an attacker to steal private...

Immunity Canvas: ACROBAT_JS3

Name| acrobatjs3 ---|--- CVE| CVE-2008-2992 Exploit Pack| CANVAS Description| Adobe Acrobat Reader Stack Overflow 8.1.2 Notes| CVE Name: CVE-2008-2992 VENDOR: Adobe Notes: Requires a lot of memory 700MB to be allocated by the JS engine in order to have our data at 0x30303030. VersionsAffected:...

Immunity Canvas: MS08_067

Name| ms08067 ---|--- CVE| CVE-2008-4250 Exploit Pack| CANVAS Description| Windows Server Service Underflow MS08-067 Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx CVE Name: CVE-2008-4250 VENDOR: Microsoft Notes: If you need some localized version of Windows X...

Immunity Canvas: MANTIS113

Name| mantis113 ---|--- CVE| CVE-2008-4688 Exploit Pack| CANVAS Description| Mantis BugTracker = 1.1.3 Remote Code Execution Notes| CVE Name: CVE-2008-4688 VENDOR: Mantis Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2008-4688 References: 'None' CVSS: 5.0...

Immunity Canvas: MS08_062

Name| ms08062 ---|--- CVE| CVE-2008-1446 Exploit Pack| CANVAS Description| Windows Internet Printing Service Overflow Notes| CVE Name: CVE-2008-1446 VENDOR: Microsoft Notes: This exploit will try and listen for connection on port 445/TCP. Thus it needs to be run as root under Linux, or as...

Immunity Canvas: MS08_059

Name| ms08059 ---|--- CVE| CVE-2008-3466 Exploit Pack| CANVAS Description| Microsoft Host Integration Server RPC Interface Vulnerability Notes| References: http://www.microsoft.com/technet/security/Bulletin/ms08-059.mspx CVE Name: CVE-2008-3466 VENDOR: Microsoft Notes: MSADV: MS08-059 Date public...

Immunity Canvas: CUTENEWS_EXEC

Name| cutenewsexec ---|--- CVE| CVE-2008-4557 Exploit Pack| CANVAS Description| cutenews/stawberry Remote Code Execution Notes| CVE Name: CVE-2008-4557 VENDOR: cutenews.ru Repeatability: Infinite References: http://securityreason.pl/exploitalert/3138 CVE Url:...

Immunity Canvas: BRIGHTSTOR_CMDEXEC

Name| brightstorcmdexec ---|--- CVE| CVE-2008-4397 Exploit Pack| CANVAS Description| brightstorcmdexec Notes| CVE Name: CVE-2008-4397 VENDOR: Computer Associates Notes: This exploit will start a TFTP server which is why it requires root and have the remote side download and execute a MOSDEF...

Immunity Canvas: FIREFOX_UTF8

Name| firefoxutf8 ---|--- CVE| CVE-2008-0016 Exploit Pack| CANVAS Description| firefoxutf8 Notes| CVE Name: CVE-2008-0016 VENDOR: Mozilla Repeatability: One Shot Note: CVE Url: https://vulners.com/cve/CVE-2008-0016 Date public: 09/25/2008 CVSS: 10.0...

Immunity Canvas: ALTN_SG

Name| altnsg ---|--- CVE| CVE-2008-4193 Exploit Pack| CANVAS Description| Alt-N Security Gateway 1.0.1 - Admin HTTP Server Overflow Notes| CVE Name: CVE-2008-4193 VENDOR: Alt-N Notes: Worst bad characters ever Repeatability: One shot References: http://osvdb.org/show/osvdb/45854 CVE Url:...

Opera for Windows Unspecified Code Execution Vulnerabilities July-08

The remote host is running Opera Web Browser, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulnjuly08900001.nasl 4522 2016-11-15 14:52:19Z teissa $ Description: Opera for Windows Unspecified Code Execution Vulnerabilities July-08 Authors: Chandan S...

Immunity Canvas: MS08_049

Name| ms08049 ---|--- CVE| CVE-2008-1457 Exploit Pack| CANVAS Description| EventSystem Service Overflow Notes| CVE Name: CVE-2008-1457 VENDOR: Microsoft Notes: Due to the fact that the svchost.exe instance where the EventSystem service is running is DEP protected, and that all loaded DLLs have GS...

CVE-2008-3078

Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image...

CVE-2008-3078

Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image...

Design/Logic Flaw

Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image...

Immunity Canvas: FIREFOX_DEFINESETTER

Name| firefoxdefinesetter ---|--- CVE| CVE-2008-2798 Exploit Pack| CANVAS Description| Firefox = 2.0.0.14 Javascript defineSetter Memory Corruption Notes| CVE Name: CVE-2008-2798 VENDOR: Mozilla Repeatability: Infinite client side - crash the browser CVS URL:...