Design/Logic Flaw

SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information...

CVE-2006-1167

SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information...

CVE-2006-1167

CVE-2006-1167 affects SGI ProPack 3 SP6 kernel. The vulnerability allows local users to view the frame buffer contents of the last session after reboot, enabling partial disclosure of sensitive information. The NVD entry lists a local attack vector with high complexity and no authentication, but ...

CVE-2006-1167

SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information...

CVE-2006-1167: Undefined Security Weakness

SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information...

Apple WebKit build 18794 - WebCore Remote Denial of Service

source: https://www.securityfocus.com/bid/22059/info Apple WebKit is prone to a denial-of-service vulnerability. Attackers may exploit this issue by enticing victims into opening a malicious HTML document with an application using the affected framework. Successful exploits will result in...

Unfixed Frame Redirect vulnerability at www.alemana.cl

Security researcher WHK, has submitted on 01/10/2007 a Frame Redirect vulnerability affecting www.alemana.cl, which at the time of submission ranked 23664 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is currently unfixed. If y...

Unfixed Frame Redirect vulnerability at amnafzar.com

Security researcher ktjmteam, has submitted on 01/07/2007 a Frame Redirect vulnerability affecting amnafzar.com, which at the time of submission ranked 442509 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2007. It is currently unfixed. ...

intel-race.txt

Title: Intel 2200BG 802.11 Beacon frame Kernel Memory Corruption Description: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to...

Intel 2200BG W29N51.SYS驱动信标帧远程执行代码漏洞

Intel 2200BG是笔记本所使用的mini PCI无线网卡。 Intel 2200BG的网卡驱动W29N51.SYS在处理多个信标帧时存在竞争条件问题，如果攻击者向无线网卡发送了多个特制的信标帧的话，就会覆盖某些内核内存结构，导致执行任意代码。 Intel 2200BG W29N51.SYS 9.0.3.9 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.intel.com/support/graphics include unistd.h include sys/types.h include...

Intel 2200BG 802.11 Beacon frame Kernel Memory Corruption Exploit

No description provided by source. / Summary: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to arbitrary code execution. This...

Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption

Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption / Summary: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to arbitrar...

XSS by setting img.src to javascript: URI — Mozilla

mozbugra4 reported that the src attribute of an IMG element loaded in a frame could be changed to a javascript: URI that was able to bypass the protections against cross-site script XSS injection. The injected script could steal credentials and financial data, or perform destructive actions on...

Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption

/ Summary: The intel wireless mini-pci driver provided with Intel 2200BG cards is vulnerable to a remote race condition memory corruption flaw. Malformed beacons frame can be used to corrupt internal kernel structures,leading to arbitrary code execution. This vulnerability is triggered when...

Microsoft Internet Explorer Frame Src拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理Frame src存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交类似如下的页面，诱使用户打开，可导致应用程序崩溃： html frameset rows="1000%" frame src="?" /html Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Microsoft Windows 2000 Advanced Server SP2...

CVE-2006-6310

Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service crash via an invalid src attribute value "?" in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtain...

CVE-2006-6310

Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service crash via an invalid src attribute value "?" in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtain...

Microsoft Internet Explorer已删除帧对象拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理已删除帧对象存在问题，远程攻击者可以利用漏洞可对应用程序进行拒绝服务攻击。 构建包含恶意已删除帧对象的WEB页，诱使用户访问，可导致用户的IE浏览器崩溃，造成拒绝服务攻击。可能存在任意代码执行可能。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft...

CVE-2006-6310: Undefined Security Weakness

Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service crash via an invalid src attribute value "?" in an HTML frame tag that is in a frameset tag with a large rows attribute. NOTE: The provenance of this information is unknown; the details are obtain...

CVE-2006-6125

Heap-based buffer overflow in the wireless driver WG311ND5.SYS 2.3.1.10 for NetGear WG311v1 wireless adapter allows remote attackers to execute arbitrary code via an 802.11 management frame with a long SSID...