2338 matches found
PT-2007-4382 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 SP1 through 7 for Windows XP SP2 and SP3 Microsoft Internet Explorer versions 6 and 7 for Server 2003 SP2 Microsoft Internet Explorer version 7 for Vista Gold, SP1, and SP2 Microsoft Internet Explorer...
Microsoft Internet Explorer cross-domain frame race condition
Overview Microsoft Internet Explorer contains a race condition that results in a cross-domain violation. Description Internet Explorer uses a cross-domain security model to maintain separation between browser frames from different sources. This model is designed to prevent code in one domain from...
Microsoft Internet Explorer and Mozilla Firefox multiple security vulnerabilities
Internet Explorer race conditions allow cross domain access. Mozilla Firefox IFRAME cross domain access. Mozilla file download dialogs delay protection bypass. MSIE address bar spoofing...
CVE-2007-2843
Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js script that accesses the location information of cross-domain web pages, probably involving setTimeout and timed events...
CVE-2007-2843
Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js script that accesses the location information of cross-domain web pages, probably involving setTimeout and timed events...
CVE-2007-2843
Apple Safari 2.0.4 is affected by a cross-domain vulnerability that allows JavaScript to access restricted information from other domains. The issue, demonstrated via a script that can access cross-domain location information and likely involves timed events (setTimeout), represents a cross-domai...
CVE-2007-2843: Undefined Security Weakness
Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js script that accesses the location information of cross-domain web pages, probably involving setTimeout and timed events...
Apple Safari 2.0.4 - Cross-Domain Browser Location Information Disclosure
source: https://www.securityfocus.com/bid/24121/info Apple Safari is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain JavaScript restrictions. Exploiting this issue may allow attackers to access locations that a user visits, even if it's in a...
Apple Safari 2.0.4 - Cross-Domain Browser Location Information Disclosure
Apple Safari 2.0.4 - Cross-Domain Browser Location Information Disclosure source: https://www.securityfocus.com/bid/24121/info Apple Safari is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain JavaScript restrictions. Exploiting this issue may allo...
PT-2007-1156
Name of the Vulnerable Software and Affected Versions: jquery versions prior to 3.0.0 Description: The issue is related to the lack of protection for the structure of web pages, allowing a remote attacker to perform cross-site scripting using cross-domain ajax requests. When a cross-domain Ajax...
IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net
This vulnerability is primarily an information leak, see http://secunia. com/advisories/1 9 7 3 8/specific description. In order to ensure client safety, the xmlhttp is not cross-domain access to information. But the IE security problems, in the service end through the mhtml redirection...
Preemptive Protection against Mozilla Firefox Cross Domain Scripting Vulnerability
A cross-domain vulnerability has been reported in Firefox and in SeaMonkey - Mozilla based browsers. Mozilla SeaMonkey is a free, open source, and cross-platform Internet suite. Mozilla Firefox is a cross-platform popular web browser. A remote attacker could exploit this vulnerability to compromi...
Mozilla Firefox cross domain access
By using location.hostname='evil.comx00foo.example.com' in javascript it's possible to make request for foo.example.com domain to be sent to evil.com. It makes it possible cross-domain access. Vulnerability can be used for hidden malware installation...
Mozilla Foundation Security Advisory 2007-02
Mozilla Foundation Security Advisory 2007-02 Title: Improvements to help protect against Cross-Site Scripting attacks Impact: Low Announced: February 23, 2007 Reporter: various Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.2 Firefox 1.5.0.10 SeaMonkey 1.0.8 Firefox 2.0.0.2 and 1.5.0.10...
Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple Browsers Cross Domain Charset Inheritance Vulnerability Release Date: 2007/02/23 Last Modified: 2007/02/23 Author: Stefan Esser [email protected] Application:...
Mozilla Firefox <= 2.0.0.1 (location.hostname) Cross-Domain Vulnerability
No description provided by source. !-- Mozilla Firefox 'location.hostname' Cross-Domain Vulnerability Software : Mozilla Firefox version 2.0.0.1 and prior CVE reference : CVE-2007-0981 Impact : Security Bypass Risk : Moderate...
[Full-disclosure] Firefox bookmark cross-domain surfing vulnerability
There is an interesting vulnerability in how Firefox handles bookmarks. The flaw allows the attacker to steal credentials from commonly used browser start sites for Firefox, Google is the seldom changed default; that means exposure of GMail authentication cookies, etc. The problem: it is relative...
Mozilla Firefox 2.0.0.1 - location.hostname Cross-Domain
Mozilla Firefox 2.0.0.1 - location.hostname Cross-Domain Options - Privacy - Show Cookies for login.live.com Gorn, gorn.supportgmailcom 2007-02-19 16:00 -- var mydomain = '127.0.0.1'; var varcook = 'MSPPre=firefoxvulnerabilitytest'; var domcook = 'login.live.com'; if location.hostna...
Mozilla Firefox <= 2.0.0.1 (location.hostname) Cross-Domain Vulnerabil
Exploit for unknown platform in category remote exploits ========================================================================= Mozilla Firefox Options - Privacy - Show Cookies for login.live.com...
Mozilla Firefox <= 2.0.0.1 (location.hostname) Cross-Domain Vulnerability
No description provided by source. !-- Mozilla Firefox 'location.hostname' Cross-Domain Vulnerability Software : Mozilla Firefox version 2.0.0.1 and prior CVE reference : CVE-2007-0981 Impact : Security Bypass Risk : Moderate Discovered by : Michal Zalewski http://lcamtuf.coredump.cx/ Advisory Da...