8315 matches found
SoftiaCom WMailserver 1.0 SMTP Remote Buffer Overflow Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
Ubuntu 5.04 : mozilla-firefox vulnerabilities (USN-149-1)
Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious website to spoof the contents of other websites. CAN-2005-1937 In several places the browser user interface did not...
Ubuntu 4.10 / 5.04 : mozilla vulnerabilities (USN-155-1)
Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious website to spoof the contents of other websites. CAN-2005-1937 It was discovered that a malicious website could injec...
security flaw
Multiple heap-based buffer overflows in the 1 DCTStream::readProgressiveSOF and 2 DCTStream::readBaselineSOF functions in the DCT stream parsing code Stream.cc in xpdf 3.01 and earlier, as used in products such as a Poppler, b teTeX, c KDE kpdf, d pdftohtml, e KOffice KWord, f CUPS, and g...
Macromedia Flash Player fails to properly validate the frame type identifier read from a "SWF" file
Overview A buffer overflow vulnerability in some versions of the Macromedia Flash Player may allow a remote attacker to execute code on a vulnerable system. Description The Macromedia Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed...
security flaw
Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service memory consumption via unspecified vectors in the 1 ISAKMP, 2 FC-FCS, 3 RSVP, and 4 ISIS LSP dissector...
Ethernet frame padding information leakage
Incorrect memory managment causes ethernet fame padding bytes may contain sensitive information...
DTSA-7-1 mozilla - frame injection spoofing
Bulletin has no description...
CVE-2005-2627
Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via 1 kernel headers in a pcap file or 2 data frame dissection, which leads to heap-based buffer overflows...
CVE-2005-2627
Removed by vendor...
CVE-2005-2627
Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via 1 kernel headers in a pcap file or 2 data frame dissection, which leads to heap-based buffer overflows...
Debian DSA-777-1 : mozilla - frame injection spoofing
A vulnerability has been discovered in Mozilla and Mozilla Firefox that allows remote attackers to inject arbitrary JavaScript from one page into the frameset of another site. Thunderbird is not affected by this and Galeon will be automatically fixed as it uses Mozilla components. %NASLMINLEVEL...
Debian DSA-775-1 : mozilla-firefox - frame injection spoofing
A vulnerability has been discovered in Mozilla and Mozilla Firefox that allows remote attackers to inject arbitrary JavaScript from one page into the frameset of another site. Thunderbird is not affected by this and Galeon will be automatically fixed as it uses Mozilla components. %NASLMINLEVEL...
[SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 777-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 777-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2005 http://www.debian.org/security/faq -...
DSA-777-1 mozilla - frame injection spoofing
Bulletin has no description...
CVE-2004-2383
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain...
CVE-2004-2383
Microsoft Internet Explorer 5.0–6.0 is identified as vulnerable to a Cross-Frame Scripting Restriction bypass (CVE-2004-2383). The issue arises when an HTML document with JavaScript outside a frameset that includes the target domain can cause the frameset to retain focus, enabling an attacker to ...
[SECURITY] [DSA 775-1] New Mozilla packages fix frame injection spoofing vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 775-1 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 775-1] New Mozilla packages fix frame injection spoofing vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 775-1 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2005 http://www.debian.org/security/faq -...