CVE-2010-0049

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via HTML elements with right-to-left RTL text directionality...

Design/Logic Flaw

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via HTML elements with right-to-left RTL text directionality...

CVE-2010-0049

Technical details for CVE-2010-0049 are not publicly provided in the supplied Connected documents. The entries reference the vulnerability and related WebKit fixes broadly, but do not specify affected versions, root cause, exploit details, or mitigations. Monitor for updates.

Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : firefox-3.0, firefox-3.5, xulrunner-1.9, xulrunner-1.9.1 vulnerabilities (USN-853-1)

Alin Rad Pop discovered a heap-based buffer overflow in Firefox when it converted strings to floating point numbers. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoki...

FreeBSD : mozilla -- multiple vulnerabilities (c87aa2d2-c3c4-11de-ab08-000f20797ede)

Mozilla Foundation reports : MFSA 2009-64 Crashes with evidence of memory corruption rv:1.9.1.4/ 1.9.0.15 MFSA 2009-63 Upgrade media libraries to fix memory safety bugs MFSA 2009-62 Download filename spoofing with RTL override MFSA 2009-61 Cross-origin data theft through document.getSelection MFS...

SeaMonkey < 2.0 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0. Such versions are potentially affected by the following security issues : - Provided the browser is configured to use Proxy Auto-configuration it may be possible for an attacker to crash the browser or execute arbitrary code. MFSA 2009-55 -...

Mozilla Foundation Security Advisory 2009-62

Mozilla Foundation Security Advisory 2009-62 Title: Download filename spoofing with RTL override Impact: Low Announced: October 27, 2009 Reporter: Jesse Ruderman, Sid Stamm Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.4 Firefox 3.0.15 SeaMonkey 2.0 Description Mozilla security researchers...

Download filename spoofing with RTL override — Mozilla

Mozilla security researchers Jesse Ruderman and Sid Stamm reported that when downloading a file containing a right-to-left override character RTL in the filename, the name displayed in the dialog title bar conflicts with the name of the file shown in the dialog body. An attacker could use this...

PT-2008-4689 · Oracle +1 · Openoffice.Org +1

Name of the Vulnerable Software and Affected Versions: OpenOffice.org OOo version 2.4.1 Description: The issue is related to an integer overflow in the rtl allocateMemory function, which can be triggered by a crafted document. This can cause a denial of service, resulting in an application crash,...

Integer overflow

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow...

CVE-2008-2152

Integer overflow in the rtlallocateMemory function in sal/rtl/source/allocglobal.c in OpenOffice.org OOo 2.0 through 2.4 allows remote attackers to execute arbitrary code via a crafted file that triggers a heap-based buffer overflow...

PT-2008-3663 · Apache +1 · Openoffice.Org +1

Name of the Vulnerable Software and Affected Versions: OpenOffice.org versions 2.0 through 2.4 Description: The issue is related to an integer overflow in the rtl allocateMemory function, which can lead to a heap-based buffer overflow. This can be triggered by a crafted file, potentially allowing...

Unfixed XSS vulnerability at www.rtl.hr

Security researcher kaksii, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.rtl.hr, which at the time of submission ranked 5042 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is currently...