Microsoft Internet Explorer拖放未初始化内存远程代码执行漏洞

Bugtraq ID: 48204 CVE ID：CVE-2011-1254 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer在处理某些内容上的拖放事件时存在释放后使用错误，攻击者可以构建恶意WEB页，诱使用户解析，破坏内存，成功利用漏洞可以以应用程序上下文执行任意代码。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6....

Microsoft Internet Explorer Cookie Hijacking Vulnerability

The host is installed with Internet Explorer and is prone to cookie hijacking vulnerability. This NVT has been replaced by NVT secpodms11-057.nasl OID:1.3.6.1.4.1.25623.1.0.902613. OpenVAS Vulnerability Test $Id: gbmsie9cookiehijackingvuln.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft...

Microsoft Internet Explorer Cookie Hijacking Vulnerability

The host is installed with Internet Explorer and is prone to cookie hijacking vulnerability. OpenVAS Vulnerability Test $Id: gbmsiecookiehijackingvuln.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Cookie Hijacking Vulnerability Authors: Sooraj KS Copyright: Copyright c 201...

Microsoft Internet Explorer Cookie Hijacking Vulnerability

Internet Explorer is prone to a cookie hijacking vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902613. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2011-2383

Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrat...

Cross site scripting

Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrat...

Information disclosure

Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrat...

CVE-2011-2383

Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrat...

CVE-2011-2383

CVE-2011-2383 affects Microsoft Internet Explorer 9 and earlier. The issue is an incomplete fix that allows cross-zone drag-and-drop via an IFRAME with an http: SRC that redirects to a file: URL, enabling a user-assisted read of cookies (cookiejacking). The vulnerability is documented with the ex...

CVE-2011-2382

CVE-2011-2382 affects Microsoft Internet Explorer 8 and earlier, and IE9 beta, by failing to properly restrict cross-zone drag-and-drop actions. An attacker could entice a user to load a page containing an IFRAME with a file: URL to read cookies, effectively cookie hijacking. Vulnerable component...

AVS Ringtone Maker '.au'文件缓冲区溢出漏洞

Bugtraq ID: 47851 AVS Ringtone Maker允许用户定制铃声。 AVS Ringtone Maker不正确处理'.au'文件，攻击者构建恶意文件，诱使用户解析可触发缓冲区溢出，成功利用漏洞可以以应用程序安全上下文执行任意代码。 Online Media Technologies Ltd AVS Ringtone Maker 1.6.1 厂商解决方案 目前没有详细解决方案提供： http://www.avs4you.com/AVS-Ringtone-Maker.aspx !/usr/bin/perl system"cls"; sub logo print q'...

CVE-2011-1447

Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

Null pointer dereference

Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

CVE-2011-1447

Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

CVE-2011-1447

Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."...

Apple Safari Webkit Multiple Vulnerabilities (Mar 2011)

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

CVE-2011-0166

The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778...

Design/Logic Flaw

The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778...

UBUNTU-CVE-2011-0166

The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778...

CVE-2011-0166

The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778...