Lucene search
+L

103 matches found

Debian CVE
Debian CVE
•added 2016/08/06 11:00 p.m.•39 views

CVE-2016-6503

The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remote attackers to cause a denial of service application crash via a crafted packet...

5.9CVSS5.5AI score0.06444EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2016/08/06 12:00 a.m.•2 views

PT-2016-6958

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.0.0 through 2.0.4 Description The issue is related to the CORBA IDL dissectors in Wireshark, which do not properly interact with Visual C++ compiler options on 64-bit Windows platforms. This allows remote attackers to caus...

5.9CVSS0.06444EPSS
SaveExploits2References22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/08/06 12:00 a.m.•8 views

CVE-2016-6503: Improper Input Validation

The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options, which allows remote attackers to cause a denial of service application crash via a crafted packet...

5.9CVSS6.6AI score0.06444EPSS
SaveExploits2References2
VulnCheck KEV
VulnCheck KEV
•added 2016/08/04 12:00 a.m.•11 views

VulnCheck KEV: CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.8CVSS7.2AI score0.82339EPSS
SaveIn wildExploits5References3
zdt
zdt
•added 2016/08/03 12:00 a.m.•38 views

Wireshark 2.0.0 < 2.0.4 - CORBA IDL Dissectors Denial of Service

Exploit for multiple platform in category dos / poc GIOP capture Build Information: Version 2.0.3 v2.0.3-0-geed34f0 from master-2.0 Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions. There is ...

4.3CVSS6.3AI score0.06444EPSS
SaveExploits2
exploitpack
exploitpack
•added 2016/08/03 12:00 a.m.•31 views

Wireshark 2.0.0 2.0.4 - CORBA IDL Dissectors Denial of Service

Wireshark 2.0.0 2.0.4 - CORBA IDL Dissectors Denial of Service GIOP capture Build Information: Version 2.0.3 v2.0.3-0-geed34f0 from master-2.0 Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2016/08/03 12:00 a.m.•38 views

Wireshark 2.0.0 < 2.0.4 - CORBA IDL Dissectors Denial of Service

GIOP capture Build Information: Version 2.0.3 v2.0.3-0-geed34f0 from master-2.0 Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS...

5.9CVSS6.4AI score0.06444EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•13 views

The vulnerability of the Firefox ESR browser, which allows a malicious individual to execute arbitrary code

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, by using a fragment of IDL to trigger a...

9.3CVSS7.5AI score0.82339EPSS
SaveExploits5References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•12 views

The vulnerability of the Thunderbird email client, which allows a malicious actor to execute arbitrary code

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, using a fragment of IDL to trigger a...

9.3CVSS7.5AI score0.82339EPSS
SaveExploits5References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•12 views

The vulnerability of the Mozilla SeaMonkey software package, which allows a malicious individual to execute arbitrary code.

Mozilla SeaMonkey software contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, by using a fragment of IDL to trigger the...

9.3CVSS7.5AI score0.82339EPSS
SaveExploits5References5
Fedora
Fedora
•added 2016/02/23 7:50 p.m.•33 views

[SECURITY] Fedora 22 Update: gdl-0.9.5-10.fc22

A free IDL Interactive Data Language compatible incremental compiler i.e. runs IDL programs. IDL is a registered trademark of Research Systems Inc...

5.5CVSS2.4AI score0.01541EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2014/03/19 5:26 p.m.•25 views

Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)

Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors...

9.8CVSS6.9AI score0.83633EPSS
SaveExploits5References5
RedHat Linux
RedHat Linux
•added 2014/03/19 5:26 p.m.•23 views

Mozilla: Privilege escalation using WebIDL-implemented APIs (MFSA 2014-29)

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.8CVSS7.3AI score0.82339EPSS
SaveExploits5References5
NVD
NVD
•added 2014/03/19 10:55 a.m.•26 views

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.8CVSS9.5AI score0.82339EPSS
SaveExploits5References14
Prion
Prion
•added 2014/03/19 10:55 a.m.•37 views

Design/Logic Flaw

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

7.5CVSS7.7AI score0.82339EPSS
SaveExploits5References14Affected Software17
attackerkb
attackerkb
•added 2014/03/19 10:55 a.m.•10 views

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.8CVSS8AI score0.82339EPSS
SaveExploits5References16
Cvelist
Cvelist
•added 2014/03/19 10:00 a.m.•45 views

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.7AI score0.82339EPSS
SaveExploits5References14
CVE
CVE
•added 2014/03/19 10:00 a.m.•223 views

CVE-2014-1510

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 is vulnerable to remote code execution. An attacker can execute arbitrary JavaScript code with chrome privileges by utilizing an IDL fragment to trigger a wi...

9.8CVSS9.2AI score0.82339EPSS
SaveIn wildExploits5References14Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/19 12:00 a.m.•4 views

CVE-2014-1510: Improper Privilege Management

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call...

9.8CVSS6.3AI score0.82339EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2014/03/18 12:00 a.m.•3 views

PT-2014-1170

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 28.0 Firefox ESR 24.x versions prior to 24.4 Thunderbird versions prior to 24.4 SeaMonkey versions prior to 2.25 Description The Web IDL implementation in the affected software allows remote attackers to execu...

9.8CVSS0.82339EPSS
SaveExploits5
Rows per page
Query Builder