CVE-2007-5947

The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting XSS...

CVE-2007-5947

The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting XSS...

CVE-2007-5947

The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting XSS...

Mozilla Firefox Jar URI跨站脚本漏洞

Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox处理Jar协议存在跨站脚本问题，远程攻击者可以利用漏洞获得敏感信息。 在一些允许图象，压缩档或其他文件上传的站点中，攻击者可以通过构建使用Jar协议的恶意链接，诱使用户处理，可导致获得目标用户敏感信息。 Mozilla Firefox 2.0 8 Mozilla Firefox 2.0 .7 Mozilla Firefox 2.0 .6 Mozilla Firefox 2.0 .5 Mozilla Firefox 2.0 .4 Mozilla Firefox 2.0 .3 Mozilla...

Mozilla-based browsers jar: URI cross-site scripting vulnerability

Overview Mozilla-based web browsers including Firefox contain a vulnerability that may allow an attacker to execute code, or conduct cross-site scripting attacks. Description The jar: protocol is designed to extract content from ZIP compressed files. Mozilla-based browsers include support for jar...

cpp, gcc, libf2c, libgcc, libgcj, libgnat, libobjc, libstdc++ security update

CentOS Errata and Security Advisory CESA-2007:0473 Updated gcc packages that fix a security issue and another bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C,...

Moderate: Red Hat Security Advisory: gcc security and bug fix update

Updated gcc packages that fix a security issue and another bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support...

Directory traversal issue in fastjar

Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences...

Moderate: Red Hat Security Advisory: gcc security and bug fix update

Updated gcc packages that fix a security issue and various bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95 GNU compilers and related support...

Directory traversal issue in fastjar

Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences...

CVE-2007-2058

Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in the file path in an 1 GZ, 2 TAR, 3 RAR, 4 JAR, or 5 ZIP archive...

Directory traversal

Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in the file path in an 1 GZ, 2 TAR, 3 RAR, 4 JAR, or 5 ZIP archive...

CVE-2007-2012

Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to create files in arbitrary directories via a .. dot dot in a 1 .rar, 2 .jar or 3 .zip archive...

Directory traversal

Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to create files in arbitrary directories via a .. dot dot in a 1 .rar, 2 .jar or 3 .zip archive...

Directory traversal

Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. dot dot in a 1 .gz, 2 .jar, 3 .rar, 4 .tar.gz, 5 .zip, or 6 .tar file...

Debian DSA-1170-1 : gcc-3.4 - missing sanity check

Jurgen Weigert discovered that upon unpacking JAR archives fastjar from the GNU Compiler Collection does not check the path for included files and allows to create or overwrite files in upper directories. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

[SECURITY] [DSA 1170-1] New fastjar packages fix directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 1170-1 [email protected] http://www.debian.org/security/ Martin Schulze September 6th, 2006 http://www.debian.org/security/faq -...

DSA-1170 gcc-3.4 - missing sanity check

Bulletin has no description...

CVE-2006-3619

Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences...

CVE-2006-3619

CVE-2006-3619 describes a directory-traversal flaw in FastJar’s extract_jar function (jartool.c). The vulnerability exists in FastJar 0.93 and earlier (as used in GCC 4.1.1 and earlier, and 3.4.6 and earlier) and allows a user-controlled .jar to overwrite arbitrary files via filenames containing ...