8317 matches found
Horde Nag < 1.1.3 Parent Frame Page Title XSS
Binary data 2852.prm...
Horde Forwards < 2.2.2 Parent Frame Page Title XSS
Binary data 2855.prm...
Horde Accounts < 2.1.2 Parent Frame Page Title XSS
Binary data 2854.prm...
CVE-2005-0961
Cross-site scripting XSS vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title...
CVE-2003-1059
Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access...
DEBIAN-CVE-2004-0991
Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files...
mpg123 -- buffer overflow vulnerability
Yuri D'Elia has found a buffer overflow vulnerability in mpg123's parsing of frame headers in input streams. This vulnerability can potentially lead to execution of arbitrary code with the permissions of the user running mpg123, if the user runs mpg123 on a specially crafted MP2 or MP3 file...
CVE-2004-2383
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain...
Microsoft Internet Explorer buffer overflow
Buffer overflow in FRAME and IFRAME tags parameters...
[Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
Since nobody else posted an exploit I figured I might aswell slap the BoF together with my default exploit JavaScript for the scriptkiddies to rejoice and the sysadmins to worry about. TECHNICAL The JavaScript creates a large amount of heap-blocks filled with 0x0D byte nopslides followed by the...
RHEL 2.1 / 3 : kdelibs, kdebase (RHSA-2004:412)
Updated kdelib and kdebase packages that resolve multiple security issues are now available. The kdelibs packages include libraries for the K Desktop Environment. The kdebase packages include core applications for the K Desktop Environment. Andrew Tuitt reported that versions of KDE up to and...
security flaw
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...
Moderate: Red Hat Security Advisory: kdelibs, kdebase security update
Updated kdelib and kdebase packages that resolve multiple security issues are now available. The kdelibs packages include libraries for the K Desktop Environment. The kdebase packages include core applications for the K Desktop Environment. Andrew Tuitt reported that versions of KDE up to and...
FreeBSD Ports : Multiple Browsers Frame Injection
The remote host is running one of the following package : kdelibs 3.2.33 kdebase 3.2.31 7.50 = linux-opera 7.52 7.50 = opera 7.52 firefox 0.9 linux-mozilla 1.7 linux-mozilla-devel 1.7 mozilla-gtk1 1.7 mozilla 1.7,2 netscape7 7.2 These packages contain a bug which may allow an attacker to perform ...
Fedora Core 1 : kdebase-3.1.4-7 (2004-292)
Andrew Tuitt reported that versions of KDE up to and including 3.2.3 create temporary directories with predictable names. A local attacker could prevent KDE applications from functioning correctly, or overwrite files owned by other users by creating malicious symlinks. The Common Vulnerabilities...
Fedora Core 2 : kdelibs-3.2.2-8.FC2 (2004-291)
Andrew Tuitt reported that versions of KDE up to and including 3.2.3 create temporary directories with predictable names. A local attacker could prevent KDE applications from functioning correctly, or overwrite files owned by other users by creating malicious symlinks. The Common Vulnerabilities...
Fedora Core 2 : kdebase-3.2.2-6.FC2 (2004-293)
Andrew Tuitt reported that versions of KDE up to and including 3.2.3 create temporary directories with predictable names. A local attacker could prevent KDE applications from functioning correctly, or overwrite files owned by other users by creating malicious symlinks. The Common Vulnerabilities...
Fedora Core 1 : kdelibs-3.1.4-7 (2004-290)
Andrew Tuitt reported that versions of KDE up to and including 3.2.3 create temporary directories with predictable names. A local attacker could prevent KDE applications from functioning correctly, or overwrite files owned by other users by creating malicious symlinks. The Common Vulnerabilities...
mpg123 buffer overflow
Stack overflow on mp3 frame processing in syncstream function...
[slackware-security] kde
New kdelibs and kdebase packages are available for Slackware 9.1, 10.0, and -current to fix security issues. More details about this issues may be found in the Common Vulnerabilities and Exposures CVE database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0689...