Mozilla cross-site information disclosure via modal calls

Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window and performing cross-domain navigation, which...

PT-2010-4621

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.5.14 and 3.6.x prior to 3.6.11 Thunderbird versions prior to 3.0.9 and 3.1.x prior to 3.1.5 SeaMonkey versions prior to 2.0.9 Description The issue arises from improper handling of certain modal calls made b...

Microsoft Internet Explorer 8 Cross Domain

IE8 Css Cross-Domain Information Disclosure Vulnerability Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2010/10/14 References: http://www.80vul.com/ie8/IE8%20Css%20Cross-Domain%20Information%20Disclosure%20Vulnerability.txt Overview: MS-071 have fixed a Cross-Domain Information...

Microsoft IE跨域信息泄露漏洞（MS10-071）

BUGTRAQ ID: 43709 CVE ID: CVE-2010-3330 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 在某些过程中，Internet Explorer错误的允许脚本访问和读取其他域的内容。攻击者可以通过创建特制网页来利用这个漏洞，如果用户查看了该网页就会导致信息泄露。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 临时解决方法： 以纯文本读取邮件。 将Internet...

CVE-2010-3934

The browser in Research In Motion RIM BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a window.open call and an...

CVE-2010-3934

The CVE-2010-3934 issue affects BlackBerry Device Software running on the BlackBerry 9700: 5.0.0.593 Platform 5.1.0.147. The browser fails to properly restrict cross-domain JavaScript, allowing remote attackers to bypass the Same Origin Policy via window.open and an IFRAME. This indicates exposur...

CVE-2010-3934: Undefined Security Weakness

The browser in Research In Motion RIM BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a window.open call and an...

Information disclosure

Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different 1 domain or 2 zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Cross-Domain Information Disclosure Vulnerability."...

CVE-2010-3330

Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different 1 domain or 2 zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Cross-Domain Information Disclosure Vulnerability."...

CVE-2010-3330

Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different 1 domain or 2 zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Cross-Domain Information Disclosure Vulnerability."...

CVE-2010-3330

Markdown summary of CVE-2010-3330: The affected product is Microsoft Internet Explorer (IE) versions 6–8. The vulnerability is an information-disclosure flaw where IE improperly allows scripts to access content from a different domain or IE zone, enabling cross-domain information disclosure via a...

CVE-2010-3330: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different 1 domain or 2 zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Cross-Domain Information Disclosure Vulnerability."...

Opera < 10.63 Multiple Vulnerabilities

Binary data 5678.prm...

Microsoft Internet Explorer multiple security vulnerabilities

Multiple memory corruptions, cross domain information disclosure...

PT-2010-4741 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 8 Description: The issue allows remote attackers to obtain sensitive information via a crafted web site due to improper restriction of script access to content from a different domain or zone. An...

Microsoft Internet Explorer Cross Domain CVE-2010-3330 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access content from a browser window in another domain or security zone. This may...

Internet Explorer Cross-Domain Information Disclosure (MS10-071; CVE-2010-3330)

Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. An information disclosure vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in Internet Explorer that incorrectly allows scripts to access and read...

opera -- multiple vulnerabilities

The Opera Desktop Team reports: Fixed an issue that allowed cross-domain checks to be bypassed, allowing limited data theft using CSS, as reported by Isaac Dawson. Fixed an issue where manipulating the window could be used to spoof the page address. Fixed an issue with reloads and redirects that...

Cross-domain checks may be bypassed, allowing limited data theft using CSS

CSS can be loaded cross-domain. In some cases, files that do not contain CSS may be partially interpreted as CSS. It is possible to make Opera incorrectly treat remote CSS files as if they were CSS files from the document-origin server, allowing the interpreted parts of a remote file to be read b...

Cross-domain checks may be bypassed, allowing limited data theft using CSS – Opera Security Advisories

Cross-domain checks may be bypassed, allowing limited data theft using CSS – Opera Security Advisories OPCOM Team | October 6, 2010 Severity Moderate Description CSS can be loaded cross-domain. In some cases, files that do not contain CSS may be partially interpreted as CSS. It is possible to mak...