Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of mov...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID 5d72701a-f601-11d9-bcd1-02061b08fc24 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: kdelibs

The remote host is missing an update to the system as announced in the referenced advisory. VID 641859e8-eca1-11d8-b913-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Unfixed Frame Redirect vulnerability at www.legalaxy.fr

Security researcher TreX, has submitted on 09/02/2008 a Frame Redirect vulnerability affecting www.legalaxy.fr, which at the time of submission ranked 779045 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is currently unfixed. I...

Unfixed Frame Redirect vulnerability at www.3movs.com

Security researcher Uber0n, has submitted on 28/08/2008 a Frame Redirect vulnerability affecting www.3movs.com, which at the time of submission ranked 3470 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently unfixed. If...

Unfixed Frame Redirect vulnerability at www.mamboserver.com

Security researcher st@rext, has submitted on 26/08/2008 a Frame Redirect vulnerability affecting www.mamboserver.com, which at the time of submission ranked 29409 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently...

Unfixed Frame Redirect vulnerability at www.turkiyat.gazi.edu.tr

Security researcher st@rext, has submitted on 26/08/2008 a Frame Redirect vulnerability affecting www.turkiyat.gazi.edu.tr, which at the time of submission ranked 16098 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently...

Unfixed Frame Redirect vulnerability at www.joomlashack.com

Security researcher st@rext, has submitted on 26/08/2008 a Frame Redirect vulnerability affecting www.joomlashack.com, which at the time of submission ranked 14198 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently...

FreeBSD : opera -- multiple vulnerabilities (73ec1008-72f0-11dd-874b-0030843d3802)

The Opera Team reports : Scripts are able to change the addresses of framed pages that come from the same site. Due to a flaw in the way that Opera checks what frames can be changed, a site can change the address of frames on other sites inside any window that it has opened. This allows sites to...

Opera Web浏览器9.52版本修复多个安全漏洞

BUGTRAQ ID: 30768 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.52之前版本中存在多个安全漏洞，可能允许恶意用户执行欺骗和跨站脚本、泄露敏感信息或完全入侵用户系统。 1 当Opera作为协议处理器执行时存在错误，可能导致崩溃或执行任意代码。这个漏洞仅影响Windows平台上的Opera。 2 网页可以更改弹出窗口中打开的其他站点帧的地址，这可能导致向可信任站点帧中加载恶意内容。 3 处理自定义快捷方式和菜单命令时存在错误，允许以危险的参数执行应用程序。成功利用这个漏洞要求能够诱骗用户修改快捷方式或菜单文件。 4...

Unfixed Frame Redirect vulnerability at www.peruhackz.net

Security researcher sl4xUz, has submitted on 08/07/2008 a Frame Redirect vulnerability affecting www.peruhackz.net, which at the time of submission ranked 665914 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is currently unfixe...

CVE-2008-3493: Improper Input Validation

vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service application crash via a crafted frame buffer update packet...

CVE-2008-3456

phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack...

realvnc-dos.txt

!/usr/bin/php ?php RealVNC Windows Client DoS AppName: vncviewer.exe AppVer: 4.1.2.0 ModName: vncviewer.exe ModVer: 4.1.2.0 Offset: 000229e0 function vncear $port = "5900"; $ser = socketcreateAFINET, SOCKSTREAM, SOLTCP; socketsetoption$ser,SOLSOCKET,SOREUSEADDR,1; socketbind$ser,"0.0.0.0", $port;...

RealPlayer: SWF Frame Handling Buffer Overflow

Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...

Fedora 9 : phpMyAdmin-2.11.8.1-1.fc9 (2008-6868)

This update solves PMASA-2008-6 phpMyAdmin security announcement from 2008-07-28: Cross-site Framing; XSS in setup.php; see http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2008-6 - interface Table list pagination in navi - profiling Profiling causes query to be executed again really...

CVE-2007-5400: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Shockwave Flash SWF frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote attackers to execute arbitrary code via a crafted SWF file...

Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow

====================================================================== Secunia Research 25/07/2008 - RealNetworks RealPlayer SWF Frame Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Unfixed Frame Redirect vulnerability at www.istanbulgeceleri.org

Security researcher SeYMeN, has submitted on 07/06/2008 a Frame Redirect vulnerability affecting www.istanbulgeceleri.org, which at the time of submission ranked 347876 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/06/2008. It is currently...

Microsoft IE帧位置绕过跨域安全限制漏洞

BUGTRAQ ID: 29986 Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer没有正确地限制对文档帧的访问。攻击者可以用任意内容替换网页的帧的内容，Internet Explorer看起来仍在强制跨域安全模型限制恶意帧可对父文档所执行的操作。例如，其他域中的帧不可以访问父文档的cookies、HTML内容或其他帧特定的DOM组件，但组件是不受特定域约束的，如onmousedown事件。通过监控这个特殊的事件，IFRAME就可以从父文档捕获键盘输入，或执行其他恶意攻击。 Microsoft Internet Explorer...