268 matches found
security flaw
Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup...
CVE-2006-3351
Buffer overflow in Windows Explorer explorer.exe on Windows XP and 2003 allows user-assisted attackers to cause a denial of service repeated crash and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers...
CVE-2006-1468
Unspecified vulnerability in Apple File Protocol AFP server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders within search results, which might allow remote attackers to obtain sensitive information...
Information disclosure
Unspecified vulnerability in Apple File Protocol AFP server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders within search results, which might allow remote attackers to obtain sensitive information...
CVE-2003-0049
Apple File Protocol AFP in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password...
CVE-2003-0049
Apple File Protocol AFP in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password...
Minor IE System Info Disclosure
I just stumbled across this the other day when i was playing... a remote server can poll a surfers computer and determin some applications they have installed by trying a load an image with the file:// protocol. if the file is found on disk the javascript onload event fires..if not the onerror...