CVE-2002-0027

Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in...

CVE-2001-0874

Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verification" vulnerability...

CVE-1999-0801

BMC Patrol allows remote attackers to gain access to an agent by spoofing frames...

CVE-2001-0874

CVE-2001-0874/2002-0027 describe a vulnerability in Internet Explorer 5.5/6.0 where remote attackers could read files by HTML passing information from a frame in the client’s domain to a frame in the site’s domain (a variant of Frame Domain Verification). Affected products are IE 5.5–6.0; root ca...

CVE-2001-0874: Undefined Security Weakness

Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verification" vulnerability...

CVE-2002-0027

Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in...

13 December 2001 Cumulative Patch for IE

---------------------------------------------------------------------- Title: 13 December 2001 Cumulative Patch for IE Date: 13 December 2001 Software: Internet Explorer Impact: Run Code of an Attacker's Choice Max Risk: Critical Bulletin: MS01-058 Microsoft encourages customers to review the...

CVE-2001-0874

Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verification" vulnerability...

CVE-2001-0429: Undefined Security Weakness

Cisco Catalyst 5000 series switches 6.12 and earlier will forward an 802.1x frame on a Spanning Tree Protocol STP blocked port, which causes a network storm and a denial of service...

CVE-1999-1129

Cisco Catalyst 2900 Virtual LAN VLAN switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag...

CVE-1999-1129

CVE-1999-1129 affects Cisco Catalyst 2900 VLAN switches. Affected component: VLAN trunking/tag handling. Root cause: attackers can forge the 802.1q VLAN identifier in the trunking tag, enabling remote injection of frames into another VLAN. Impact (as per the entry): partial confidentiality, integ...

CVE-1999-1389: Undefined Security Weakness

US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt...

Outlook Express 6 - Attachment Security Bypass

Outlook Express 6 - Attachment Security Bypass source: https://www.securityfocus.com/bid/3271/info Microsoft Outlook Express 6 contains a new security feature which prevents users from opening potentially harmful file attachments. A vulnerability exists which allows a file embedded within an HTML...

Outlook Express 6 - Attachment Security Bypass

source: https://www.securityfocus.com/bid/3271/info Microsoft Outlook Express 6 contains a new security feature which prevents users from opening potentially harmful file attachments. A vulnerability exists which allows a file embedded within an HTML frame in an email message to bypass the...

CVE-2001-0246

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain...

CVE-2001-0332

Internet Explorer 5.5 and earlier are vulnerable to a Frame Domain Verification flaw where an attacker can read local files by abusing frame domain checks via MSScriptControl.ScriptControl and GetObject. Affected product: IE up to version 5.5 and earlier. Root cause: improper domain verification ...

CVE-2001-0246

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain...

CVE-2001-0332

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain using MSScriptControl.ScriptControl and...

CVE-2001-0246

CVE-2001-0246 affects Internet Explorer 5.5 and earlier. The vulnerability arises from improper verification of the domain of a frame within a browser window, enabling remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different...

CVE-2001-0246: Undefined Security Weakness

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain...