ISS Security Brief: Checkpoint Firewall-1 HTTP Parsing Format String Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief February 4, 2004 Checkpoint Firewall-1 HTTP Parsing Format String Vulnerabilities Synopsis: ISS X-Force has discovered a flaw in the HTTP Application Intelligence component of Firewall-1. Application Intelligence is a...

Buffer overflow in Internet Explorer's HTTP parsing code

OVERVIEW ======== The code used in Microsoft Internet Explorer to parse web servers' HTTP replies contains a buffer overflow vulnerability. Specifically the faulty code is located in URLMON.DLL. A malicious user may exploit this vulnerability to execute arbitrary code on an IE user's system...