Nasty Data-Stealing Bug Haunts Internet Explorer 8

There’s an unpatched vulnerability in Internet Explorer 8 that enables simple data-stealing attacks by Web-based attackers and could lead to an attacker hijacking a user’s authenticated session on a third-party site. The flaw, which a researcher said may have been known since 2008, lies in the wa...

CVE-2010-1258

CVE-2010-1258 arises from Internet Explorer 6–8 failing to determine the origin of script code, enabling a remote attacker to run script in a different domain/zone and potentially access user data. The primary entry is through crafted web content that exploits cross-domain context (Event Handler ...

Microsoft Internet Explorer Multiple Vulnerabilities (2183461)

This host is missing a critical security update according to Microsoft Bulletin MS10-053. OpenVAS Vulnerability Test $Id: secpodms10-053.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2183461 Authors: Sooraj KS Updated By: Madhuri D on 2010-09-12 - ...

Microsoft Internet Explorer Multiple Vulnerabilities (2183461)

This host is missing a critical security update according to Microsoft Bulletin MS10-053. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Internet Explorer Event Handler Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access local files or content from a browser window in another domain or security...

Microsoft Internet Explorer local file reading and detection vulnerability-vulnerability warning-the black bar safety net

Microsoft IE in the handling of local file access when there are some problems, combined with the Microsoft windows characteristics may be able to read the local of certain special files that may have other use. As the browser is inevitable to deal with cross-domain resource access issues, then t...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)

This update brings Mozilla Thunderbird to the 3.0.6 security release. It fixes following security bugs: MFSA 2010-34 / CVE-2010-1211: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showe...

Mozilla Firefox importScripts()方式跨域信息泄露漏洞

BUGTRAQ ID: 41871 CVE ID: CVE-2010-1213 Firefox是一款流行的开源WEB浏览器。 即使内容不是有效的JavaScript，Web Worker方式importScripts也会从其他域读取和解析资源。这破坏了同源策略，可能允许攻击者从其他站点窃取敏感信息。 Mozilla Firefox 3.6.x Mozilla Firefox 3.5.x Mozilla Thunderbird 3.1.x Mozilla Thunderbird 3.0.x Mozilla SeaMonkey 2.0.6 厂商补丁： Mozilla -------...

Mozilla Foundation Security Advisory 2010-46

Mozilla Foundation Security Advisory 2010-46 Title: Cross-domain data theft using CSS Impact: Moderate Announced: July 20, 2010 Reporter: Chris Evans Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.7 Firefox 3.5.11 Thunderbird 3.1.1 Thunderbird 3.0.6 SeaMonkey 2.0.6 Description...

Firefox 3.6 < 3.6.7 Multiple Vulnerabilities

The installed version of Firefox 3.6.x is earlier than 3.6.7. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - An error in DOM attribute...

Firefox < 3.5.11 Multiple Vulnerabilities

The installed version of Firefox is earlier than 3.5.11. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - An error in DOM attribute cloning...

FreeBSD : mozilla -- multiple vulnerabilities (8c2ea875-9499-11df-8e32-000f20797ede)

The Mozilla Project reports : MFSA 2010-34 Miscellaneous memory safety hazards rv:1.9.2.7/ 1.9.1.11 MFSA 2010-35 DOM attribute cloning remote code execution vulnerability MFSA 2010-36 Use-after-free error in NodeIterator MFSA 2010-37 Plugin parameter EnsureCachedAttrParamArrays remote code...

Mozilla Thunderbird 3.0.x < 3.0.6 Multiple Vulnerabilities

Binary data 5608.prm...

Mozilla Thunderbird 3.1.x < 3.1.1 Multiple Vulnerabilities

Binary data 5609.prm...

SeaMonkey 2.0.x < 2.0.6 Multiple Vulnerabilities

Binary data 5610.prm...

Firefox 3.5.x < 3.5.11 Multiple Vulnerabilities

Binary data 800782.prm...

SeaMonkey 2.0.x < 2.0.6 Multiple Vulnerabilities

Binary data 800871.prm...

Mozilla Firefox 3.5.x < 3.5.11 Multiple Vulnerabilities

Binary data 5606.prm...

Mozilla Firefox 3.6.x < 3.6.7 Multiple Vulnerabilities

Binary data 5607.prm...

Mozilla Thunderbird 3.1.x < 3.1.1 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 3.1.1. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - It may be possible to run...