CVE-2010-1939

Use-after-free vulnerability in Apple Safari 4.0.5 on Windows allows remote attackers to execute arbitrary code by using window.open to create a popup window for a crafted HTML document, and then calling the parent window's close method, which triggers improper handling of a deleted window object...

CVE-2010-1939

Removed by vendor...

CVE-2010-1939

Apple Safari 4.0.5 for Windows is affected by CVE-2010-1939, a use-after-free vulnerability in window handling where a crafted HTML page opens a popup with window.open and then closes the parent window, triggering an invalid pointer. Exploitation could allow remote code execution. Documents consi...

Apple Safari 4.0.5 parent.close() (memory corruption) 0day Code Execution Exploit

No description provided by source. !-- Apple Safari 4.0.5 parent.close memory corruption 0day Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be...

Apple Safari 4.0.5 parent.close() Code Execution

Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

Apple Safari 4.0.5 - parent.close() Memory Corruption Code Execution

Apple Safari 4.0.5 - parent.close Memory Corruption Code Execution Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

Apple Safari 4.0.5 - 'parent.close()' Memory Corruption Code Execution

Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

Apple Safari 4.0.5 parent.close() (memory corruption) Code Execution

Exploit for windows platform in category remote exploits ==================================================================== Apple Safari 4.0.5 parent.close memory corruption Code Execution ==================================================================== Tested on: Apple Safari 4.0.5 / XP SP...

Safari 4.0.5 & Camino 2.0.2 history.go() DoS

Exploit for macOS platform in category dos / poc ============================================ Safari 4.0.5 & Camino 2.0.2 history.go DoS ============================================ DrIDE - Camino 2.0.2 & Safari 4.0.5 DoS PoC function test window.onerror=new Function"history.go-1";...

Firefox 3.6.3 Fork Bomb DoS

Exploit for windows platform in category dos / poc =========================== Firefox 3.6.3 Fork Bomb DoS =========================== loop1; var a = 'javascript:"DrIDE\s FireFox Fork Bomb!"'; function loop1 window.opena; setIntervalloop1,1; 0day.today 2018-01-10...

Group picker popup JSP has XSS hole if group names are XSS shaped

If a group name has a XSS shaped name, then the group picker will allow scripts to be executed...

Mozilla Foundation Security Advisory 2010-15

Mozilla Foundation Security Advisory 2010-15 Title: Asynchronous Auth Prompt attaches to wrong window Impact: Low Announced: March 23, 2010 Reporter: Justin Dolske Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Mozilla developer Justin Dolske reported that the new asynchronous...

Asynchronous Auth Prompt attaches to wrong window — Mozilla

Mozilla developer Justin Dolske reported that the new asynchronous Authorization Prompt HTTP username and password was not always attached to the correct window. Although we have not demonstrated this, it may be possible for a malicious page to convince a user to open a new tab or popup to a...

Internet Explorer Popup Title Bar Spoofing (CVE-2005-0500)

Microsoft Internet Explorer is a popular, all-purpose browser, bundled with the Microsoft Windows operating systems. Microsoft Internet Explorer IE 6 Service Pack 2 is a release with major security enhancements. One of the new security features is the way IE displays text in the title bar for...

CVE-2010-0655

Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site...

Design/Logic Flaw

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event...

CVE-2010-0650

WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event...

CVE-2010-0655

Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site...

CVE-2010-0650

Removed by vendor...

CVE-2010-0650

CVE-2010-0650 affects WebKit used by Google Chrome (pre-4.0.249.78) and Apple Safari. The flaw allows remote attackers to bypass restrictions on popup windows via crafted mouse click events. Public updates exist: openSUSE/SUSE and Mandriva advisories reference libwebkit/webkit updates addressing ...