2703 matches found
Microsoft Internet Explorer does not adequately validate window ornament parameters in dialog frames
Overview A vulnerability in the way Microsoft Internet Explorer IE handles window ornament parameters in dialog frames allows script from a dialog frame in one domain to execute in a different domain, including the Local Machine Zone. The script could read certain local files and data i.e. cookie...
CVE-2003-0116
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which allows remote attackers to read files on the local system via a web page containing script that creates a dialog and then accesses the target files, aka "Modal...
Microsoft Internet Explorer does not adequately validate source of dialog frame
Overview Microsoft Internet Explorer IE allows script from a dialog frame in one domain to execute in a different domain, including the Local Machine Zone. The script could read certain local files and data i.e. cookies from other web sites. In the presence of other vulnerabilities VU626395,...
eDonkey Clients 0.440.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities
eDonkey Clients 0.440.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities source: https://www.securityfocus.com/bid/7164/info A vulnerability has been reported for eDonkey clients for Windows that will result in a denial of service condition. The vulnerability occurs when numerous chat...
eDonkey Clients 0.44/0.45 - Multiple Chat Dialog Resource Consumption Vulnerabilities
source: https://www.securityfocus.com/bid/7164/info A vulnerability has been reported for eDonkey clients for Windows that will result in a denial of service condition. The vulnerability occurs when numerous chat dialog boxes are opened by the eDonkey or Overnet clients. Every open chat dialog bo...
Opera 6.07.0 - Filename Download Buffer Overrun
Opera 6.07.0 - Filename Download Buffer Overrun source: https://www.securityfocus.com/bid/7056/info A buffer overrun vulnerability has been discovered in the Opera web browser. The issue affects Opera versions 6 and 7 on the Microsoft Windows platform. Due to insufficient bounds checking when...
Opera 6.0/7.0 - 'Filename Download' Buffer Overrun
source: https://www.securityfocus.com/bid/7056/info A buffer overrun vulnerability has been discovered in the Opera web browser. The issue affects Opera versions 6 and 7 on the Microsoft Windows platform. Due to insufficient bounds checking when copying file names to a temporary buffer it may be...
Poisonous Style for Dialog window turns the zone off.
Poisonous Style for Dialog window turns the zone off. "that's all" is the end of file if you are in a hurry tested MSIEv6CN version Patch: Q312461,Q328790MS02-066 IEXPLORE.EXE file version: 6.0.2600.0000 MSHTML.DLL file version: 6.00.2600.0000 demo at...
Internet Explorer modal dialog style crossite scripting
By using IMG width="0" height="0" style="width: expressionalert;" script may be executed in local zone...
Microsoft Internet Explorer contains cross-site scripting vulnerabilities in local HTML resources
Overview Microsoft Internet Explorer IE includes several local HTML resources that contain cross-site scripting vulnerabilities. These resources use the dialogArguments property of dialog frames insecurely, allowing an attacker to execute arbitrary script in the Local Machine Zone. Description...
Microsoft Internet Explorer 5 - Dialog Same Origin Policy Bypass Variant (MS02-047)
Microsoft Internet Explorer 5 - Dialog Same Origin Policy Bypass Variant MS02-047 source: https://www.securityfocus.com/bid/5561/info Microsoft Internet Explorer includes support for dialog windows through script calls to the two functions showModalDialog and showModelessDialog. These functions...
Microsoft Internet Explorer 5 - Dialog Same Origin Policy Bypass Variant (MS02-047)
source: https://www.securityfocus.com/bid/5561/info Microsoft Internet Explorer includes support for dialog windows through script calls to the two functions showModalDialog and showModelessDialog. These functions accept a URL location for the dialog content, and an option argument parameter to...
Microsoft Internet Explorer download dialog may not display complete filenames
Overview There is a vulnerability in the download dialog box in Internet Explorer versions 5.5 and 6.0. The vulnerability allows an attacker to mislead users, causing them to inadvertently execute arbitrary code on the user's system. Description When downloading files included in web pages, users...
Security Advisories
TurboLinux Security Announcement Package: dialog Vulnerable Packages: All Turbolinux versions previous to 0.9a-2 Date: 05/03/2001 5:00 PDT Affected TurboLinux platforms: TL Server 6.5, TL Workstation 6.1 Turbolinux versions 6.0.5 and earlier TurboLinux Advisory ID: TLSA2001006 Credits: Reported b...
Дырка в dialog (symbolic link)
Проблема символьных линков...
CVE-2001-0069
CVE-2001-0069 affects the Debian GNU/Linux package dialog prior to version 0.9a-20000118-3bis. The vulnerability is a symlink attack that allows a local user to overwrite arbitrary files. The issue arises from a race condition involving symlinks, enabling manipulation of file targets by a non-pri...
[SECURITY] [DSA-008-1] dialog symlink attack
Package : dialog Problem type : insecure temporary files Debian-specific: no Matt Kraai reported that he found a problem in the way dialog creates lock-files: it did not create them safely which made it susceptible to a symlink attack. This has been fixed in version 0.9a-20000118-3bis. wget url...
nt4-ole-clipboard-password.txt
Date: Fri, 29 Jan 1999 10:21:51 -0600 From: "Reed, David" To: [email protected] Subject: ole objects in a "secured" environment? fellow 'noids, background: since all of the major security flaws in windows nt 4.0 have been discovered who am i kidding? ;-, i'd like to point out a min...
Java Signed Applet Social Engineering Code Execution
This exploit dynamically creates a .jar file via the Msf::Exploit::Java mixin, then signs the it. The resulting signed applet is presented to the victim via a web page with an applet tag. The victim's JVM will pop a dialog asking if they trust the signed applet. On older versions the dialog will...
