CVE-2009-3630

The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a "frame hijacking" issue...

CVE-2009-3630

TYPO3 Backend frame hijacking (CVE-2009-3630) affects the Backend subcomponent in TYPO3 up to specific early releases: 4.0.13 and earlier; 4.1.x before 4.1.13; 4.2.x before 4.2.10; and 4.3.x before 4.3beta2. Remote authenticated users could place arbitrary websites into TYPO3 backend framesets vi...

CVE-2009-3630

The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a "frame hijacking" issue...

Unfixed Frame Redirect vulnerability at www.cultek.com

Security researcher Xylitol, has submitted on 11/02/2009 a Frame Redirect vulnerability affecting www.cultek.com, which at the time of submission ranked 2896076 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently unfixed...

Unfixed Frame Redirect vulnerability at www.cema-northafrica.org

Security researcher Xylitol, has submitted on 11/02/2009 a Frame Redirect vulnerability affecting www.cema-northafrica.org, which at the time of submission ranked 15330297 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

DEBIAN-CVE-2009-3378

The oggplaydatahandletheoraframe function in media/liboggplay/src/liboggplay/oggplaydata.c in liboggplay, as used in Mozilla Firefox 3.5.x before 3.5.4, attempts to reuse an earlier frame data structure upon encountering a decoding error for the first frame, which allows remote attackers to cause...

Aruba wireless access points DoS

Crash on malformed 802.11 association request frame...

Firefox crashes with evidence of memory corruption

layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly handle first-letter frames, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified...

CVE-2009-2911

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to 1 cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, 2 cause a denial of service...

CVE-2009-2911

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to 1 cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, 2 cause a denial of service...

CVE-2009-2911

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to 1 cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, 2 cause a denial of service...

typo3 -- multiple vulnerabilities in TYPO3 Core

TYPO3 develop team reports: Affected versions: TYPO3 versions 4.0.13 and below, 4.1.12 and below, 4.2.9 and below, 4.3.0beta1 and below. SQL injection, Cross-site scripting XSS, Information disclosure, Frame hijacking, Remote shell command execution and Insecure Install Tool authentication/sessio...

Unfixed Frame Redirect vulnerability at www.cosmo3d.com

Security researcher Syst3m Cr4sh, has submitted on 10/06/2009 a Frame Redirect vulnerability affecting www.cosmo3d.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currently unfixed...

Mozilla Firefox XUL Frame Tree Memory Corruption (CVE-2008-5016)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on...

Microsoft Says Google Chrome Frame is IE Security Risk

Google’s decision to introduce a plug-in that runs Google Chrome inside Microsoft’s Internet Explorer isn’t sitting well with the folks at Redmond. The Google Chrome Frame, which is presented as a seamless way to bring Google Chrome’s open web technologies and speedy JavaScript engine to Internet...

Microsoft Windows无线LAN AutoConfig帧解析堆溢出漏洞（MS09-049）

BUGTRAQ ID: 36223 CVECAN ID: CVE-2009-1132 Microsoft Windows是微软发布的非常流行的操作系统。 无线局域网AutoConfig服务（wlansvc）解析无线网络上收到的特定帧的方式中存在堆溢出漏洞。如果启用了无线网络接口的客户端或服务器收到特制的无线帧，此漏洞可能允许远程执行代码。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者可以安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...

Microsoft Windows Wireless LAN AutoConfig service buffer overflow

Buffer overflow on access point frame parsing...

Heap overflow

Heap-based buffer overflow in the Wireless LAN AutoConfig Service aka Wlansvc in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerabilit...

CVE-2009-1132

CVE-2009-1132 is a heap-based buffer overflow in the Wireless LAN AutoConfig Service (Wlansvc) of Windows Vista (Gold/SP1/SP2) and Windows Server 2008 (Gold/SP2). The vulnerability occurs when parsing certain wireless frames, potentially allowing remote code execution if a wireless interface is e...

CVE-2009-1132

Heap-based buffer overflow in the Wireless LAN AutoConfig Service aka Wlansvc in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerabilit...