CVE-2006-6987: Undefined Security Weakness

Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target...

CVE-2006-6983: Undefined Security Weakness

Cross-domain vulnerability in MYweb4net Browser 3.8.8.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target...

Microsoft IE源元素跨域访问漏洞（MS06-042）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理重新定向时没有正确的识别来源域，如果用户受骗访问了恶意站点的话就可能导致读取跨域网页，或在非预期域或Internet Explorer区中执行脚本。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4 Microsoft已经为此发布了一个安全公告（MS06-042）以及相应补丁:...

Microsoft IE窗口位置跨域信息泄露漏洞（MS06-042）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft Internet Explorer在处理页面中的脚本访问能力时存在漏洞，远程攻击者可能利用此漏洞获取某些用户所访问过的地址信息。 Internet Explorer允许在网页间导航时保持一些脚本，然后使用这个脚本访问其他域或Internet Explorer区中的Web页面窗口位置。如果用户受骗访问了恶意的Web站点，攻击者就可以看到同一Internet Explorer会话中以后所访问的页面位置。 Microsoft Internet Explorer 6.0 SP1...

CVE-2006-3639

Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote attackers to read cross-domain web pages and possibly execute code via unspecified vectors involving a crafted web page, aka "Source Element Cross-Domain...

CVE-2006-3639

CVE-2006-3639 describes an information disclosure and remote code execution vulnerability in Microsoft Internet Explorer (IE) 5.01 and IE6 related to how a source element is handled during redirects across domains. Exploitation could allow an attacker to read data from a Web page in another IE do...

Multiple Microsoft Internet Explorer and Windows security vulnerabilities

Cross-domain page content access, MSHTA code execution...

CVE-2006-3639: Undefined Security Weakness

Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote attackers to read cross-domain web pages and possibly execute code via unspecified vectors involving a crafted web page, aka "Source Element Cross-Domain...

CVE-2006-3639

Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote attackers to read cross-domain web pages and possibly execute code via unspecified vectors involving a crafted web page, aka "Source Element Cross-Domain...

Microsoft Internet Explorer source element cross-domain vulnerability

Overview Microsoft Internet Explorer fails to properly handle redirects for source elements. This can allow a remote attacker to execute arbitrary code on a vulnerable system. Description The Cross-Domain Security Model IE uses a cross-domain security model to maintain separation between browser...

Microsoft Internet Explorer Source Element Cross-Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain policies. This issue may allow attackers to access arbitrary websites in the context of a targeted user's browser session. This may allow attackers to...

Microsoft Internet Explorer Window Location Cross-Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. This vulnerability may let a malicious website access properties of a site in an arbitrary external domain. Attackers could exploit this issue to gain access to sensitive information that is...

security flaw

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting XSS attacks using DOM methods of the top-level object...

security flaw

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting XSS attacks using DOM methods of the top-level object...

security flaw

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting XSS attacks using DOM methods of the top-level object...

Native DOM methods can be hijacked across domains — Mozilla

A malicious page can hijack native DOM methods on a document object in another domain, which will run the attacker's script when called by the victim page. This could be used to steal login cookies, password, or other sensitive data on the target page, or to perform actions on behalf of a logged-...

CVE-2006-3352

Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which...

CVE-2006-3352

Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which...

CVE-2006-3352

CVE-2006-3352 concerns a cross-domain information exposure in Mozilla Firefox via an object tag with a data parameter referencing an attacker’s site, enabling access to restricted content through the object’s outerHTML. The description notes that the original report was retracted and disputed; as...

PT-2006-4244 · Mozilla · Firefox

Name of the Vulnerable Software and Affected Versions: No vulnerable software versions are specified, as the reported issue was retracted and disputed. Description: A reported cross-domain issue in Mozilla Firefox was claimed to allow remote attackers to access restricted information from other...