674 matches found
Opera memory corruption
Heap corruption on HTML parsing...
HTML parsing flaw can cause Opera to execute arbitrary code
Certain HTML constructs can cause the resulting DOM to change unexpectedly, which triggers a crash. To inject code, additional techniques will have to be employed...
HTML parsing flaw can cause Opera to execute arbitrary code – Opera Security Advisories
HTML parsing flaw can cause Opera to execute arbitrary code – Opera Security Advisories OPCOM Team | December 15, 2008 Severity Extremely Severe Problem Description Certain HTML constructs can cause the resulting DOM to change unexpectedly, which triggers a crash. To inject code, additional...
From the ie 0day to word 0day-vulnerability warning-the black bar safety net
ie7 这个 问题 出 在 mshtml.dll and if you have the impression, then, before the word is out by a javascript implementation of the problem, when everyone's ideas are executed js, but with js thought in word in the hidden adjusted with a html may be a little difficulty as if it is not an iframe or...
Trillian multiple security vulnerabilities
Multiple AIM plugin vulnerabilities, HTML parsing vulnerabilities for multiple protocols...
FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim
The remote host is missing an update to the system as announced in the referenced advisory. VID 142353df-b5cc-11d9-a788-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Outlook Web Access for Exchange Server HTML Parsing Cross-Site Scripting Vulnerability
Description Microsoft Outlook Web Access OWA for Exchange Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...
Gnome / Evolution HTML parsing memory corruption
Memory corruption on HTML parsing, including HTML messages in Evolution...
[SECURITY] [DSA 1336-1] New mozilla-firefox packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1336-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 22nd, 2007 http://www.debian.org/security/faq -...
Microsoft Internet Explorer multiple security vulnerabilities
Multiple memory corruption on COM objects and HTML parsing, files rewrite...
CVE-2007-0478
CVE-2007-0478 affects Apple Mac OS X 10.3.9/10.4.10 as used by Safari. WebCore parses HTML comments in TITLE elements incorrectly, allowing remote attackers to bypass some XSS protections and embed certain HTML tags within a comment to trigger cross-site scripting. The vulnerability is documented...
Safari Improperly Parses HTML Documents & BlogSpot XSS vulnerability
Overview: Safari on occasions may improperly parse the source of an HTML document, which can lead to the execution of html tags within comments. This can become dangerous when input filters allow html tags within comments, as they will get parsed and executed under certain circumstances. Details:...
Implemented browser control-bug warning-the black bar safety net
A review Usually, intruders through Telnet login is out of the back door of the intruder system, using text commands to interact to achieve the purpose; remote with a Trojan a peek at the screen. This is generally the C/S mode Client/Server, client/server. C/S mode requires that the intruder must...
Kmail-1.9.1.txt
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SilentHack.co.uk Vulnerability Research =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Background: Kmail is a HTML compatible email client that comes installed by default with the KDE desktop. This DOS requires...
KMail DoS
Crash on HTML parsing...
[Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SilentHack.co.uk Vulnerability Research =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Background: Kmail is a HTML compatible email client that comes installed by default with the KDE desktop. This DOS requires...
Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability
Exploit for multiple platform in category dos / poc =============================================================== Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into you...
Kmail 1.9.1 - IMG SRC Remote Denial of Service
nnp at silenthack.co.uk http://silenthack.co.uk Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into your local /var/spool/mail/whoami or send a mail containing the HTML pa...
Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability
No description provided by source. nnp at silenthack.co.uk http://silenthack.co.uk Kmail = 1.9.1 latest suffers from a crash when trying to parse an incorrectly formatted img tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick...