CVE-2005-0473

The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208...

CVE-2005-0473

The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208...

RHEL 3 / 4 : gaim (RHSA-2005:215)

An updated gaim package that fixes various security issues as well as a number of bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Two HTML parsing bugs...

CVE-2005-0208

The vulnerability CVE-2005-0208 affects the Gaim client HTML parser prior to version 1.1.4, where malformed HTML can trigger an invalid memory access and cause an application crash (DoS). This is the primary issue described (distinct from CVE-2005-0473). Remediation is upgrading Gaim to 1.1.4 or ...

gaim instant messanger DoS

Application crashes on receiving file with with parenthesis in the name and during HTML parsing...

CVE-2005-0473

CVE-2005-0473 affects the GAIM (Gaim) client prior to version 1.1.3. The issue arises in the HTML parsing code: processing malformed HTML can trigger an invalid memory access, leading to an application crash (DoS). Multiple connected advisories note the same flaw and reference 1.1.3 as the fixed ...

FreeBSD : lftp HTML parsing vulnerability (89)

The following package needs to be updated: lftp %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgd7af61c82cc011d893550020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...

[slackware-security] lftp security update

lftp is a file transfer program that connects to other hosts using FTP, HTTP, and other protocols. A security problem with lftp has been corrected with the release of lftp-2.6.10. New packages are available for Slackware 8.1, 9.0, 9.1, and -current. Any sites using lftp should upgrade to the new...

lftp HTML parsing vulnerability

A buffer overflow exists in lftp which may be triggered when requesting a directory listing from a malicious server over HTTP...

Multiple XSS vulnerabilites in PHPNuke

Multiple XSS Vulnerabilities in PHPNuke 6.0 ------------------------------------------- Summary: We have found 7 diferent cross-site-scripting vulnerabilities in PHPNuke 6.0 which allow for anyone to steal the authentication cookies from users and Administrators. Some of them include several ways...

CVE-1999-1522

Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML...

CVE-2001-0028

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " quotation characters...

CVE-2001-0028

Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " quotation characters...

netscape.js.table.dos.txt

http://www.securiteam.com/exploits/NetscapeCommunicatorJav.html Article Title 26/6/99 Netscape Communicator JavaScript crash Article Summary Due to an HTML parsing problem, a simple html page containing JavaScript can crash the Netscape communicator browser. Article Details The following HTML cod...