Galeon < 1.2.7 XMLSerializer Cross-domain Policy Access (deprecated)

Binary data 1757.prm...

Mozilla < 1.0.1 XMLSerializer Cross-domain Policy Access (deprecated)

Binary data 1756.prm...

Mozilla Firefox < 1.7.1 Cross-Domain Frame Loading Vulnerability (deprecated)

Binary data 1772.prm...

Mozilla Browser 'onclick' Property Cross Domain Violation (deprecated)

Binary data 1323.prm...

Cross-Domain Policy File (crossdomain.xml) Detection

Binary data 4505.prm...

CVE-2004-0719

Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection...

CVE-2004-0720

Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...

Opera < 7.53 Multiple Vulnerabilities

The version of Opera installed on the remote host is vulnerable to two security issues : - A cross domain frame loading vulnerability. - An unspecified vulnerability in the way it handles certificates. An attacker may exploit one of these flaws to impersonate a web server. C Tenable Network...

CVE-2004-0719

Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection...

Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting

Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting source: https://www.securityfocus.com/bid/10689/info A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain/cross-zone scripting. It is reported that the vulnerability presents itsel...

Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting

source: https://www.securityfocus.com/bid/10689/info A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain/cross-zone scripting. It is reported that the vulnerability presents itself due to a failure to properly validate trust relationships between method calls that ar...

US-CERT Technical Cyber Security Alert TA04-163A -- Cross-Domain Redirect Vulnerability in Internet Explorer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-163A Cross-Domain Redirect Vulnerability in Internet Explorer Original release date: June 11, 2004 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows systems Overview A cross-domain vulnerability in...

Microsoft Internet Explorer does not properly validate source of redirected frame

Overview Microsoft Internet Explorer IE does not adequately validate the security context of a frame that has been redirected by a web server. An attacker could exploit this vulnerability to evaluate script in different security domains. By causing script to be evaluated in the Local Machine Zone...

US-CERT Technical Cyber Security Alert TA04-099A -- Vulnerability in Internet Explorer ITS Protocol Handler

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability in Internet Explorer ITS Protocol Handler Original release date: April 8, 2004 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows systems running Internet Explorer Overview A cross-domain scripting vulnerability in...

CVE-2004-0191

Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page zombie document and enable cross-domain and cross-site scripting XSS attacks, as demonstrated using onmousemove events...

Microsoft Internet Explorer 56 - Cross-Domain Event Leakage

Microsoft Internet Explorer 56 - Cross-Domain Event Leakage source: https://www.securityfocus.com/bid/9761/info Microsoft Internet Explorer is reported to be prone to an issue that may leak sensitive information across foreign domains. This issue could permit framesets in different domains to lea...

Microsoft Internet Explorer 5/6 - Cross-Domain Event Leakage

source: https://www.securityfocus.com/bid/9761/info Microsoft Internet Explorer is reported to be prone to an issue that may leak sensitive information across foreign domains. This issue could permit framesets in different domains to leak various events, including keyboard events. This could...

Sandblad #13: Cross-domain exploit on zombie document with event handlers

PUBLIC SECURITY ADVISORY: Sandblad 13 -------------------------------------------------------------- Title: Cross-domain exploit on zombie document with event handlers Date: 2004-02-25 Software: Mozilla web browser Vendor: http://www.mozilla.org/ Status: Patched Reference:...

CVE-2003-0814

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand"Refresh" to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability...

TA04-033A: Multiple Vulnerabilities in Microsoft Internet Explorer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerabilities in Microsoft Internet Explorer Original issue date: February 02, 2004 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows systems running Internet Explorer 5.01 Internet Explorer 5.50 Internet Explorer 6...