Microsoft Internet Explorer / Outlook Express multiple security vulnerabilities

Memory corruption on Javascript errors processing and Javascript normalize function. Temporary Internet Files crossite access. Buffer overflow on Windows Address Book WAB parsing...

CVE-2006-2386: Undefined Security Weakness

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...

Microsoft Outlook Express Windows Address Book Contact Record Remote Code Execution Vulnerability

Description Microsoft Outlook Express is prone to a remote code-execution vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. A remote attacker can exploit this issue to execute arbitrary code with the privileges of...

Cumulative Security Update for Outlook Express (923694)

Binary data 3860.prm...

Microsoft Security Bulletin MS06-076 Cumulative Security Update for Outlook Express (923694)

Microsoft Security Bulletin MS06-076 Cumulative Security Update for Outlook Express 923694 Published: December 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Outlook Express Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Important...

Solaris 8 (sparc) : 118540-42

Sun Java System Communications Express 6.2. Date this patch was last updated by Sun : Jan/16/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 118540-42

Sun Java System Communications Express 6.2. Date this patch was last updated by Sun : Jan/16/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (x86) : 118541-42

Sun Java System Communications Express 6.2. Date this patch was last updated by Sun : Jan/16/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Microsoft Security Advisory (927892) Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution

Microsoft Security Advisory 927892 Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution Published: November 3, 2006 Microsoft is investigating public reports of a vulnerability in the XMLHTTP 4.0 ActiveX Control, part of Microsoft XML Core Services 4.0 on Windows. We are...

CVE-2006-5653

Cross-site scripting XSS vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of t...

CVE-2006-5653

Sun Java System Messenger Express 6 is affected by a cross-site scripting (XSS) vulnerability in the errorHTML function of the index script, exploitable via the error parameter. The issue enables remote injection of script/HTML and is cataloged as CVE-2006-5653 with a MEDIUM impact (PARTIAL integ...

CVE-2006-5652: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets CSS function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related ...

CVE-2006-5653: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of t...

SystemMessenger_xss.txt

------=Part15425083137.1162268411579 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Sun java System Messenger Express remote XSS vulnerabilities By: Handrix 29 November 2006 MorX security research team www.morx.org...

Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun"

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" Discovered Date: 25/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.sun.com/ Details: iPlanet Messaging Server Messenger Expres...

Sun Java System 6.x - Messenger Express Cross-Site Scripting

source: https://www.securityfocus.com/bid/20832/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser ...

iPlanet Messaging Server - Messenger Express Expression() HTML Injection

source: https://www.securityfocus.com/bid/20838/info iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary JavaScript in the victim's browser...

Sun Java System 6.x - Messenger Express Cross-Site Scripting

Sun Java System 6.x - Messenger Express Cross-Site Scripting source: https://www.securityfocus.com/bid/20832/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage thi...

CVE-2006-5599

Cross-site scripting XSS vulnerability in Oracle Application Express formerly HTML DB before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWVFLOWITEMHELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle...

CVE-2006-5599

Cross-site scripting XSS vulnerability in Oracle Application Express formerly HTML DB before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWVFLOWITEMHELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle...