6509 matches found
CVE-2004-0842: Undefined Security Weakness
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service application crash from "memory corruption" via certain malformed Cascading Style Sheet CSS elements that trigger heap-based buffer overflows, as demonstrated using the "...
IBM Lotus Domino ?ReadDesign Request Design Element Disclosure
The remote web server allows an attacker to view an XML list of design elements by sending a specially crafted HTTP request to the remote Lotus Domino server: http://target/names.nsf/view?ReadDesign Copyright C 2000 - 2004 Net-Square Solutions Pvt Ltd. By: Hemil Shah Desc: This script will check...
mozilla -- automated file upload
A malicious web page can cause an automated file upload from the victim's machine when viewed with Mozilla with Javascript enabled. This is due to a bug permitting default values for type="file" elements in certain situations...
CHM files execution in Internet Explorer
CHM file HTML-help may contain unsafe ActiveX elements and could lead to code execution. CHM execution may be triggered by calling CHM file as a HTML or via ActiveX elements...
Microsoft Internet Explorer code execution
If page contains large number of elements like FRAME SRC="C:winntregedit.exe"/FRAME application will be executed without user's intervation...
CVE-2003-0206: Undefined Security Weakness
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service crash via 1 link or 2 title elements that contain multiple lines...
Crossite scripting in Microsoft Internet Explorer
It's possible to get full access to OBJECT's elements...
