Firefox local file stealing with SessionStore

components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary files on a client machine via a crafted INPUT element...

CVE-2008-5316

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...

CVE-2008-5239

xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle a negative and b zero values during unspecified read function calls in inputfile.c, inputnet.c, inputsmb.c, and inputhttp.c, which allows remote attackers to cause a denial of service crash or possibly execute...

CVE-2007-5937

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file...

CVE-2007-5937

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file...

CVE-2007-5937

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file...

CVE-2007-5937

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file...

SOL7593 - Command injection into F5 ActiveX control

A vulnerability exists in an F5 ActiveX control. The ActiveX control is downloaded to a Windows client system when you log in to a FirePass controller, which is configured for specific pre-logon sequence functionality. The ActiveX control could run executables that reside on the system if an...

[SECURITY] [DSA 1166-1] New cheesetraceker packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 1166-1 [email protected] http://www.debian.org/security/ Steve Kemp September 3rd, 2006 http://www.debian.org/security/faq -...

NetPBM pamtofits buffer overflow

Off-by-one buffer overflow on input file parsing...

Multi-Format Shellcode Encoding Tool - Beta v2.0 (w32)

No description provided by source. / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a variety of formats. .SP dSS" ,sS" Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY" [email protected] .SP dSSP' sSSSSSSP http://spaces.msn.com/members/berendjanwever iS: Thi...

Multi-Format Shellcode Encoding Tool - Beta 2.0 w32

Multi-Format Shellcode Encoding Tool - Beta v2.0 w32. Shellcode exploit for generator platform / ,sSSSis ,sSSSs, Beta v2.0 w32. iS" dP dY" ,SP Encodes binary data to/from a variety of formats. .SP dSS" ,sS" Copyright C 2003-2005 by Berend-Jan Wever dS' Sb ,sY" .SP dSSP' sSSSSSSP...

linux/x86 read(0,buf,2541); chmod(buf,4755); 23 bytes

Exploit for linux/x86 platform in category shellcode ===================================================== linux/x86 read0,buf,2541; chmodbuf,4755; 23 bytes ===================================================== / readnchmod-core.c by Charles Stevenson Example of strace output if you pass in...

QNX inputtrap unauthorized files access

-e flag allows to specify input file, file ownership and privileges are not checked...

CVE-2004-1086

Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file...

CVE-2004-1086

Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file...

CVE-2002-1223

Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps PostScript input file...

CVE-2000-0607

Buffer overflow in fld program in Kanji on Console KON package on Linux may allow local users to gain root privileges via an input file containing long CHARSETREGISTRY or CHARSETENCODING settings...

CVE-2000-0607

Buffer overflow in fld program in Kanji on Console KON package on Linux may allow local users to gain root privileges via an input file containing long CHARSETREGISTRY or CHARSETENCODING settings...