Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

CVE-2008-2948: Undefined Security Weakness

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

Microsoft Internet Explorer 78 Beta 1 - Frame Location Cross Domain Security Bypass

Microsoft Internet Explorer 78 Beta 1 - Frame Location Cross Domain Security Bypass source: https://www.securityfocus.com/bid/29986/info Microsoft Internet Explorer is prone to a cross-domain scripting security-bypass vulnerability because the application fails to properly enforce the same-origin...

Microsoft Internet Explorer fails to properly restrict access to frames

Overview Microsoft Internet Explorer fails to properly restrict access to a document's frames, which may allow an attacker to modify the contents of frames in a different domain. Description Frames in HTML documents are subdivisions of the current window. The most common use of frames in web page...

CVE-2008-1952

The backend for XenSource Xen Para Virtualized Frame Buffer PVFB in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service crash by mapping an arbitrary amount of guest memory...

CVE-2008-1952

The backend for XenSource Xen Para Virtualized Frame Buffer PVFB in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service crash by mapping an arbitrary amount of guest memory...

CVE-2008-1952

CVE-2008-1952 affects the Xen PVFB backend: the para-virtualized framebuffer backend in Xen ioemu does not properly restrict the frame buffer size, allowing a local attacker to crash the guest by mapping an arbitrary amount of guest memory (denial of service). The MiracleLinux advisories describe...

CVE-2008-1952: Improper Restriction of Operations within the Bounds of a Memory Buffer

The backend for XenSource Xen Para Virtualized Frame Buffer PVFB in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service crash by mapping an arbitrary amount of guest memory...

Cisco IPS平台Inline模式拒绝服务漏洞

BUGTRAQ ID: 29791 CVECAN ID: CVE-2008-2060 Cisco入侵保护系统是网络安全设备中的一部分，可提供基于网络的威胁防范服务。 某些Cisco IPS平台在处理巨型以太网报文时存在拒绝服务漏洞。如果以inline模式所部署的有漏洞Cisco IPS平台的千兆网口接收到了特定的巨型以太网帧的话，就会出现内核忙碌，导致平台完全失效和网络拒绝服务的情况。仅以混杂模式部署的平台或没有千兆网口的平台不受漏洞影响。 成功利用本文所述的漏洞可能导致网络拒绝服务，必须断电才能恢复运行。Cisco IPS...

Cisco Security Advisory: Cisco Intrusion Prevention System Jumbo Frame Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Intrusion Prevention System Jumbo Frame Denial of Service Advisory ID: cisco-sa-20080618-ips Revision 1.0 For Public Release 2008 June 18 1600 UTC GMT +--------------------------------------------------------------------...

Cisco Intrusion Prevention System Jumbo Frame Denial of Service

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Unfixed Frame Redirect vulnerability at www.mondeannonces.fr

Security researcher ironzorg, has submitted on 18/06/2008 a Frame Redirect vulnerability affecting www.mondeannonces.fr, which at the time of submission ranked 1571653 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/06/2008. It is currently...

CVE-2008-2716

Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the same parent page by modifying the location, which can facilitate phishing attacks...

Pages held in frames are able to change the location of pages in unrelated frames on the parent page – Opera Security Advisories

Pages held in frames are able to change the location of pages in unrelated frames on the parent page – Opera Security Advisories OPCOM Team | June 11, 2008 Severity: Less Severe Problem Description: Pages from different sources held on the same parent page should not be able to modify the locatio...

w3m Cross-Site Scripting Vulnerability

Overview w3m contains a cross-site scripting vulnerability due to insufficient sanitization of HTML tags in the frame. Impact An remote attacker could execute arbitrary scripts and gain access to files or cookies. Solution Please refer to the 'Vendor Information' section for official remediation...

CVE-2008-1943: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer PVFB 3.0 through 3.1.2 allows local users to cause a denial of service crash and possibly execute arbitrary code via a crafted description of a shared framebuffer...

Unfixed Frame Redirect vulnerability at www.pneuboat.com

Security researcher SaMTHG, has submitted on 05/12/2008 a Frame Redirect vulnerability affecting www.pneuboat.com, which at the time of submission ranked 419441 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently unfixed...

Unfixed Frame Redirect vulnerability at www.hrea.org

Security researcher SaMTHG, has submitted on 05/12/2008 a Frame Redirect vulnerability affecting www.hrea.org, which at the time of submission ranked 436402 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2010. It is currently unfixed. If...

Unfixed Frame Redirect vulnerability at www.orlandohomeowner.com

Security researcher SaMTHG, has submitted on 05/12/2008 a Frame Redirect vulnerability affecting www.orlandohomeowner.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...