Lotus Notes MIF attachment viewer buffer overflow

Added: 01/30/2008 CVE: CVE-2007-5909 BID: 26175 OSVDB: 40791 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the KeyView Viewer included in Lotus Notes allows command execution when a user views a specially crafted Frame Maker Interchange File MIF...

Important: kernel security and bug fix update

2.6.18-53.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 6263574 ...

Unfixed Frame Redirect vulnerability at www.phpnukefordonkeys.com

Security researcher RedTuning, has submitted on 24/01/2008 a Frame Redirect vulnerability affecting www.phpnukefordonkeys.com, which at the time of submission ranked 895386 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/02/2008. It is...

Unfixed Frame Redirect vulnerability at www.baseballmatino.com

Security researcher RedTuning, has submitted on 24/01/2008 a Frame Redirect vulnerability affecting www.baseballmatino.com, which at the time of submission ranked 5204843 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is current...

Unfixed Frame Redirect vulnerability at www.bpmstudio.ru

Security researcher Bam, has submitted on 23/01/2008 a Frame Redirect vulnerability affecting www.bpmstudio.ru, which at the time of submission ranked 3482153 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/01/2008. It is currently unfixed. ...

CVE-2008-0240

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."...

Design/Logic Flaw

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."...

CVE-2008-0240

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via the helpUrl parameter, aka "frame injection."...

CVE-2008-0240

Sun Java System Identity Manager (versions 6.0 SP1–SP3, 7.0, 7.1) is affected by a vulnerability in /idm/help/index.jsp where the helpUrl parameter can be abused to inject frames from arbitrary sites, enabling phishing-like framing attacks. This aligns with the public CVE-2008-0240 description of...

PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager

PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager Vulnerability found: 11th June 2007 Vendor informed: 18th June 2007 Severity: Medium Product description: "Identity Manager allows customers to...

Sun Identity Manager multiple security vulnerabilities

Crossite scripting, frame injection, crossite request forgery...

MS Windows Media Player 10 Plugin Overflow Exploit (MS06-006)

No description provided by source. HTML HEAD TITLEWMP Plugin EMBED Exploit/TITLE SCRIPT // Windows Media Player Plug-In EMBED Overflow Universal Exploit MS06-006 // By Matthew Murphy [email protected] // // DISCLAIMER: // // This exploit code is intended only as a demonstration tool for...

Microsoft IE已删除帧对象访问拒绝服务漏洞

BUGTRAQ ID: 19228 Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理对象引用时存在拒绝服务漏洞，远程攻击者可能利用此漏洞拒绝浏览器崩溃。 如果用户受骗访问了已删除帧中的对象属性的话，就会触发空指针引用，导致IE崩溃。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Linux Kernel 2.6.22 - IPv6 Hop-By-Hop Header Remote Denial of Service

/ source: https://www.securityfocus.com/bid/26943/info The Linux kernel is prone to a remote denial-of-service vulnerability because it fails to adequately validate specially crafted IPv6 'Hop-By-Hop' headers. Attackers can exploit this issue to cause a kernel panic, denying service to legitimate...

SuSE 10 Security Update : Security update for (ZYPP Patch Number 2088)

This security update brings Mozilla Firefox to version 1.5.0.7. More details can be found on: http://www.mozilla.org/projects/security/known-vulnerabiliti es.html It includes fixes to the following security problems : - Crashes with evidence of memory corruption MFSA 2006-63 / CVE-2006-4570:...

Unfixed Frame Redirect vulnerability at www.hit-al.com

Security researcher st@rext, has submitted on 12/10/2007 a Frame Redirect vulnerability affecting www.hit-al.com, which at the time of submission ranked 60536 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is currently unfixed. ...

Unfixed Frame Redirect vulnerability at www.projectx2002.org

Security researcher APS, has submitted on 12/06/2007 a Frame Redirect vulnerability affecting www.projectx2002.org, which at the time of submission ranked 1298413 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently...

Unfixed Frame Redirect vulnerability at www.projectx2002.org

Security researcher APS, has submitted on 12/06/2007 a Frame Redirect vulnerability affecting www.projectx2002.org, which at the time of submission ranked 1298413 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently...

kernel ieee80211 off-by-two integer underflow

Integer underflow in the ieee80211rx function in net/ieee80211/ieee80211rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service crash via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211STYPEQOSDATA flag is set, aka an "off-by-two...

Unfixed Frame Redirect vulnerability at www.regalcinemas.com

Security researcher MrSlinky, has submitted on 26/11/2007 a Frame Redirect vulnerability affecting www.regalcinemas.com, which at the time of submission ranked 52561 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...