Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues — Mozilla

Security researcher Masato Kinugawa found that during the decoding of ISO-2022-KR and ISO-2022-CN character sets, characters near 1024 bytes are treated incorrectly, either doubling or deleting bytes. On certain pages it might be possible for an attacker to pad the output of the page such that...

Fedora 14 : mhonarc-2.6.18-3.fc14 (2011-3390)

Update to latest stable release : - Fixes CVE-2010-1677 mhonarc: remote DoS via certain tags - Fixes CVE-2010-4524 MHonArc: Improper escaping of certain HTML sequences XSS - Fixes dealing with ISO-2022-JP charset. Note that Tenable Network Security has extracted the preceding description block...

Fedora 13 : mhonarc-2.6.18-3.fc13 (2011-3357)

Update to latest stable release : - Fixes CVE-2010-1677 mhonarc: remote DoS via certain tags - Fixes CVE-2010-4524 MHonArc: Improper escaping of certain HTML sequences XSS - Fixes dealing with ISO-2022-JP charset. Note that Tenable Network Security has extracted the preceding description block...

Fedora 15 : mhonarc-2.6.18-3.fc15 (2011-3344)

Update to latest stable release : - Fixes CVE-2010-1677 mhonarc: remote DoS via certain tags - Fixes CVE-2010-4524 MHonArc: Improper escaping of certain HTML sequences XSS - Fixes dealing with ISO-2022-JP charset. Note that Tenable Network Security has extracted the preceding description block...

Internet Explorer vulnerable to cross-site scripting

Overview Microsoft Internet Explorer contains a vulnerability in handling specific character encoding which may result in a cross-site scripting attack. Microsoft Internet Explorer contains a vulnerability in handling specific ISO-2022-JP encoded characters, which may result in cross-site...

JVN#33301529: Internet Explorer vulnerable to cross-site scripting

Microsoft Internet Explorer contains a vulnerability in handling specific ISO-2022-JP encoded characters, which may result in cross-site scripting. Impact An arbitrary script may be executed. Solution Update the Software Apply the latest update according to the information provided by Microsoft...

Mozilla Foundation Security Advisory 2008-13

Mozilla Foundation Security Advisory 2008-13 Title: Multiple XSS vulnerabilities from character encoding Impact: Moderate Announced: March 25, 2008 Reporter: Alexey Proskuryakov, Yosuke Hasegawa, Simon Montagu Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.12 Thunderbird 2.0.0....

FreeBSD : Courier mail services: remotely exploitable buffer overflows (98bd69c3-834b-11d8-a41f-0020ed76ef5a)

The Courier set of mail services use a common Unicode library. This library contains buffer overflows in the converters for two popular Japanese character encodings. These overflows may be remotely exploitable, triggered by a maliciously formatted email message that is later processed by one of t...