8317 matches found
CVE-2006-1167
CVE-2006-1167 affects SGI ProPack 3 SP6 kernel. The vulnerability allows local users to view the frame buffer contents of the last session after reboot, enabling partial disclosure of sensitive information. The NVD entry lists a local attack vector with high complexity and no authentication, but ...
Apple WebKit build 18794 - WebCore Remote Denial of Service
source: https://www.securityfocus.com/bid/22059/info Apple WebKit is prone to a denial-of-service vulnerability. Attackers may exploit this issue by enticing victims into opening a malicious HTML document with an application using the affected framework. Successful exploits will result in...
Unfixed Frame Redirect vulnerability at www.alemana.cl
Security researcher WHK, has submitted on 01/10/2007 a Frame Redirect vulnerability affecting www.alemana.cl, which at the time of submission ranked 23664 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is currently unfixed. If y...
Unfixed Frame Redirect vulnerability at amnafzar.com
Security researcher ktjmteam, has submitted on 01/07/2007 a Frame Redirect vulnerability affecting amnafzar.com, which at the time of submission ranked 442509 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2007. It is currently unfixed. ...
intel-race.txt
Title: Intel 2200BG 802.11 Beacon frame Kernel Memory Corruption Description: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to...
Intel 2200BG W29N51.SYS驱动信标帧远程执行代码漏洞
Intel 2200BG是笔记本所使用的mini PCI无线网卡。 Intel 2200BG的网卡驱动W29N51.SYS在处理多个信标帧时存在竞争条件问题，如果攻击者向无线网卡发送了多个特制的信标帧的话，就会覆盖某些内核内存结构，导致执行任意代码。 Intel 2200BG W29N51.SYS 9.0.3.9 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.intel.com/support/graphics include unistd.h include sys/types.h include...
Intel 2200BG 802.11 Beacon frame Kernel Memory Corruption Exploit
No description provided by source. / Summary: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to arbitrary code execution. This...
Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption
/ Summary: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to arbitrary code execution. This vulnerability is triggered when...
Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption
Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption / Summary: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to arbitrar...
XSS by setting img.src to javascript: URI — Mozilla
mozbugra4 reported that the src attribute of an IMG element loaded in a frame could be changed to a javascript: URI that was able to bypass the protections against cross-site script XSS injection. The injected script could steal credentials and financial data, or perform destructive actions on...
Microsoft Internet Explorer Frame Src拒绝服务漏洞
Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理Frame src存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交类似如下的页面，诱使用户打开，可导致应用程序崩溃： html frameset rows="1000%" frame src="?" /html Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Microsoft Windows 2000 Advanced Server SP2...
CVE-2006-6310
Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service crash via an invalid src attribute value "?" in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtain...
CVE-2006-6310
Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service crash via an invalid src attribute value "?" in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtain...
Microsoft Internet Explorer已删除帧对象拒绝服务漏洞
Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理已删除帧对象存在问题，远程攻击者可以利用漏洞可对应用程序进行拒绝服务攻击。 构建包含恶意已删除帧对象的WEB页，诱使用户访问，可导致用户的IE浏览器崩溃，造成拒绝服务攻击。可能存在任意代码执行可能。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft...
CVE-2006-6125
Heap-based buffer overflow in the wireless driver WG311ND5.SYS 2.3.1.10 for NetGear WG311v1 wireless adapter allows remote attackers to execute arbitrary code via an 802.11 management frame with a long SSID...
CVE-2006-6125
Heap-based buffer overflow in the wireless driver WG311ND5.SYS 2.3.1.10 for NetGear WG311v1 wireless adapter allows remote attackers to execute arbitrary code via an 802.11 management frame with a long SSID...
CVE-2006-6059
Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via 1 beacon or 2 probe 802.11 frame responses with an long supported rates information element. NOTE: this issue was reported as a "memory corruption" error, b...
NETGEAR WG311v1 Wireless Driver 2.3.1.10 - SSID Heap Buffer Overflow
NETGEAR WG311v1 Wireless Driver 2.3.1.10 - SSID Heap Buffer Overflow source: https://www.securityfocus.com/bid/21251/info NetGear WG311v1 Wireless devices are prone to a heap-based buffer-overflow vulnerability because the driver fails to properly bounds-check user-supplied data before copying it...
Debian DSA-1210-1 : mozilla-firefox - several vulnerabilities
Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2006-2788 Fernando Ribeiro discovered that a vulnerability in the getRawDER function...
