662 matches found
Mozilla Firefox 1.0.x1.5 - HTML Parsing Denial of Service
Mozilla Firefox 1.0.x1.5 - HTML Parsing Denial of Service source: https://www.securityfocus.com/bid/16741/info Mozilla Firefox is prone to a denial-of-service condition when parsing certain malformed HTML content. Successful exploitation will cause the browser to fail or hang. This issue may be...
Mozilla Firefox 1.0.x/1.5 - HTML Parsing Denial of Service
source: https://www.securityfocus.com/bid/16741/info Mozilla Firefox is prone to a denial-of-service condition when parsing certain malformed HTML content. Successful exploitation will cause the browser to fail or hang. This issue may be related to BID 11440 Mozilla Invalid Pointer Dereference...
TippingPoint IPS intrusion prevention system DoS
Large CPU consumption on HTML documents parsing...
Microsoft Internet Explorer 5.0.1 - HTML Parsing Denial of Service
Microsoft Internet Explorer 5.0.1 - HTML Parsing Denial of Service source: https://www.securityfocus.com/bid/16070/info Microsoft Internet Explorer is affected by multiple denial of service vulnerabilities. An attacker may exploit these issues by enticing a user to visit a malicious site resultin...
Microsoft Internet Explorer 5.0.1 - HTML Parsing Denial of Service
source: https://www.securityfocus.com/bid/16070/info Microsoft Internet Explorer is affected by multiple denial of service vulnerabilities. An attacker may exploit these issues by enticing a user to visit a malicious site resulting in a denial of service condition in the application. Crash 1: Cra...
Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service (1)
Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service 1 source: https://www.securityfocus.com/bid/15268/info Microsoft Internet Explorer is affected by a denial of service vulnerability. This issue arises because the application fails to properly parse certain malformed HTML...
CVE-2005-0208
The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473...
CVE-2005-0208
The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473...
CVE-2005-0473
The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208...
CVE-2005-0473
The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208...
RHEL 3 / 4 : gaim (RHSA-2005:215)
An updated gaim package that fixes various security issues as well as a number of bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Two HTML parsing bugs...
CVE-2005-0208
The vulnerability CVE-2005-0208 affects the Gaim client HTML parser prior to version 1.1.4, where malformed HTML can trigger an invalid memory access and cause an application crash (DoS). This is the primary issue described (distinct from CVE-2005-0473). Remediation is upgrading Gaim to 1.1.4 or ...
gaim instant messanger DoS
Application crashes on receiving file with with parenthesis in the name and during HTML parsing...
CVE-2005-0473
CVE-2005-0473 affects the GAIM (Gaim) client prior to version 1.1.3. The issue arises in the HTML parsing code: processing malformed HTML can trigger an invalid memory access, leading to an application crash (DoS). Multiple connected advisories note the same flaw and reference 1.1.3 as the fixed ...
FreeBSD : lftp HTML parsing vulnerability (89)
The following package needs to be updated: lftp %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgd7af61c82cc011d893550020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-200...
[slackware-security] lftp security update
lftp is a file transfer program that connects to other hosts using FTP, HTTP, and other protocols. A security problem with lftp has been corrected with the release of lftp-2.6.10. New packages are available for Slackware 8.1, 9.0, 9.1, and -current. Any sites using lftp should upgrade to the new...
lftp HTML parsing vulnerability
A buffer overflow exists in lftp which may be triggered when requesting a directory listing from a malicious server over HTTP...
Multiple XSS vulnerabilites in PHPNuke
Multiple XSS Vulnerabilities in PHPNuke 6.0 ------------------------------------------- Summary: We have found 7 diferent cross-site-scripting vulnerabilities in PHPNuke 6.0 which allow for anyone to steal the authentication cookies from users and Administrators. Some of them include several ways...
