qemu/xen/kvm: ioemu: Fix PVFB backend to limit frame buffer size

The backend for XenSource Xen Para Virtualized Frame Buffer PVFB in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service crash by mapping an arbitrary amount of guest memory...

CVE-2008-4198

Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security information dialog reporting a secure connection, which might allow remote attackers to trick a user into performing unsafe actions on the http page...

Unfixed Frame Redirect vulnerability at www.directstreet.eu

Security researcher xylitol, has submitted on 27/09/2008 a Frame Redirect vulnerability affecting www.directstreet.eu, which at the time of submission ranked 34104 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is currently...

Unfixed Frame Redirect vulnerability at www.xxxmsncam.com

Security researcher SaMTHG, has submitted on 26/09/2008 a Frame Redirect vulnerability affecting www.xxxmsncam.com, which at the time of submission ranked 6220 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is currently unfixed...

Gentoo Security Advisory GLSA 200407-15 (opera)

The remote host is missing updates announced in advisory GLSA 200407-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200407-15 (opera)

The remote host is missing updates announced in advisory GLSA 200407-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200408-13 (kde, kdebase, kdelibs)

The remote host is missing updates announced in advisory GLSA 200408-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Nokia e90 phone Wi-Fi DoS

Device crash on malformed Wi-Fi frame...

Unfixed Frame Redirect vulnerability at www.oncoline.nl

Security researcher PaPPy, has submitted on 09/12/2008 a Frame Redirect vulnerability affecting www.oncoline.nl, which at the time of submission ranked 1729898 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently unfixed...

Unfixed Frame Redirect vulnerability at www.xuliocs.com

Security researcher PaPPy, has submitted on 09/12/2008 a Frame Redirect vulnerability affecting www.xuliocs.com, which at the time of submission ranked 1789943 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently unfixed...

ZDI-08-062: Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability

ZDI-08-062: Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-062 September 9, 2008 -- CVE ID: CVE-2008-3627 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- Vulnerability Details: This vulnerability allows...

Apple QuickTime MDAT Frame Parsing Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the parsing of mov...

FreeBSD Ports: kdelibs

The remote host is missing an update to the system as announced in the referenced advisory. VID 641859e8-eca1-11d8-b913-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID 5d72701a-f601-11d9-bcd1-02061b08fc24 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Unfixed Frame Redirect vulnerability at www.legalaxy.fr

Security researcher TreX, has submitted on 09/02/2008 a Frame Redirect vulnerability affecting www.legalaxy.fr, which at the time of submission ranked 779045 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is currently unfixed. I...

Unfixed Frame Redirect vulnerability at www.3movs.com

Security researcher Uber0n, has submitted on 28/08/2008 a Frame Redirect vulnerability affecting www.3movs.com, which at the time of submission ranked 3470 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently unfixed. If...

Unfixed Frame Redirect vulnerability at www.mamboserver.com

Security researcher st@rext, has submitted on 26/08/2008 a Frame Redirect vulnerability affecting www.mamboserver.com, which at the time of submission ranked 29409 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently...

Unfixed Frame Redirect vulnerability at www.joomlashack.com

Security researcher st@rext, has submitted on 26/08/2008 a Frame Redirect vulnerability affecting www.joomlashack.com, which at the time of submission ranked 14198 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently...

Unfixed Frame Redirect vulnerability at www.turkiyat.gazi.edu.tr

Security researcher st@rext, has submitted on 26/08/2008 a Frame Redirect vulnerability affecting www.turkiyat.gazi.edu.tr, which at the time of submission ranked 16098 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently...

FreeBSD : opera -- multiple vulnerabilities (73ec1008-72f0-11dd-874b-0030843d3802)

The Opera Team reports : Scripts are able to change the addresses of framed pages that come from the same site. Due to a flaw in the way that Opera checks what frames can be changed, a site can change the address of frames on other sites inside any window that it has opened. This allows sites to...