CVE-2006-3281

CVE-2006-3281 : A remote code execution flaw in Windows Explorer/Internet Explorer 6 related to handling of Drag & Drop with CLSID extensions (Folder GUID Code Execution). Root cause: improper handling of directories/CLSID extensions can lead to arbitrary code execution when a user visits a craft...

CVE-2005-3240

Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and...

CVE-2005-3240

CVE-2005-3240 is described as a race condition in Microsoft Internet Explorer where a user-assisted drag-and-drop action could overwrite files or possibly execute code. The connected CVE-3840 records indicate this SQL injection entry is a duplicate/typo and that the correct identifier is CVE-2005...

Microsoft Internet Explorer Drag-and-Drop code execution

By spoofing target window in race period it's possible to install malware in special folder. Vulnerability may be exploited for trojaning user's machine, but requires interaction...

Microsoft Internet Explorer Drag-and-Drop Redeux

Microsoft Internet Explorer Drag-and-Drop Redeux I. SYNOPSIS Affected Systems: Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0 - Windows 98 - Windows 98 Second Edition - Windows Millennium Edition - Windows 2000 - Windows XP - Windows Server 2003...

[NT] Microsoft Internet Explorer Drag-and-Drop Redeux

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-3240

Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and...

Microsoft Windows win32k.sys DoS

WMCLOSE event for active drop-down menu causes system to crash...

CVE-2005-3041

CVE-2005-3041 concerns Opera for Windows versions before 8.50. The issue is a drag‑and‑drop vulnerability described as an unspecified flaw that enables unintentional file uploads. The NVD entry lists a base score of 5.0 (Medium) with network attack vector, low complexity, and partial integrity im...

CVE-2005-2406

Opera 8.01 allows remote attackers to conduct cross-site scripting XSS attacks or modify which files are uploaded by tricking a user into dragging an image that is a "javascript:" URI...

xmysqladmin insecure temporary file creation

xmysqladmin insecure temporary file creation Vendor: Gilbert Therrien [email protected] or [email protected] Advisory: http://www.zataz.net/adviso/xmysqladmin-05292005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low xmysqladmin contain a security flaw wich could allow a...

CVE-2005-0401

FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolli...

CVE-2005-0053

Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."...

CVE-2001-1454

Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request...

GLSA-200503-31 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200503-31 Mozilla Firefox: Multiple vulnerabilities The following vulnerabilities were found and fixed in Mozilla Firefox: Mark Dowd from ISS X-Force reported an exploitable heap overrun in the GIF processing of obsolete Netscape...

security flaw

FireFox 1.0.1 and Mozilla before 1.7.6 do not sufficiently address all attack vectors for loading chrome files and hijacking drag and drop events, which allows remote attackers to execute arbitrary XUL code by tricking a user into dragging a scrollbar, a variant of CVE-2005-0527, aka "Firescrolli...

CVE-2005-0715

AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box...

CVE-2005-0715

CVE-2005-0715 affects Apple Mac OS X AFP Server prior to 10.3.8; insecure permissions on "Drop Boxes" allow local users to read their contents. No exploit details are provided in the connected documents. Remediation guidance in the sources references a security update (Mac OS X Security Update 20...

CVE-2005-0715

AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box...

Image drag and drop executable spoofing — Mozilla

Images dragged and dropped from a webpage to the desktop preserved their original name and extension. If this were an executable extension then the file would be executed rather than opened in a media application...