CVE-2003-0350

CVE-2003-0350 affects Windows 2000’s Accessibility Utility Manager (ListView). The vulnerability arises from improper handling of Windows messages in the ListView control, enabling a local attacker to cause arbitrary code execution via a malicious Shatter-style message that references a user-cont...

CVE-2003-0350: Undefined Security Weakness

The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 ListView does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback...

CVE-2003-0401: Undefined Security Weakness

Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template...

CVE-2002-0650: Undefined Security Weakness

The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service bandwidth consumption via a "ping" style packet to the Resolution Service UDP port 1434 with a spoofed IP address of another SQL Server system, which causes the two servers to exchange...

Netscape 6.07.0 - Style Sheet Denial of Service

Netscape 6.07.0 - Style Sheet Denial of Service source: https://www.securityfocus.com/bid/6937/info It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when rendering certain style sheet code. If a malicious page is viewed the browser reportedly...

Netscape 6.0/7.0 - Style Sheet Denial of Service

source: https://www.securityfocus.com/bid/6937/info It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when rendering certain style sheet code. If a malicious page is viewed the browser reportedly becomes unstable. One possible condition mentioned...

AN HTTPd v.1.41e: DoS, CSS, real patch attack

Damage Hacking Group security advisory www.dhgroup.org Product: AN HTTPd server Authors: www.st.rim.or.jp Vulnerability: DoS, CSS, 'real patch' attack Overview-------------------------------------------------------------- This is Japanez http-server for win32-platforms. U can download it from...

CVE-2002-1705

Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service crash via a Cascading Style Sheet CSS with the pcssText element declared and a bold font weight...

Poisonous Style for Dialog window turns the zone off.

Poisonous Style for Dialog window turns the zone off. "that's all" is the end of file if you are in a hurry tested MSIEv6CN version Patch: Q312461,Q328790MS02-066 IEXPLORE.EXE file version: 6.0.2600.0000 MSHTML.DLL file version: 6.00.2600.0000 demo at...

phpReactor - Cross-Site Scripting via STYLE

phpReactor has recently been updated to eliminate several known cross-site scripting vulnerabilities. Among these changes was to reduce the tags allowed in posts, profiles, etc. down to B, I, and FONT. However, using the "STYLE" attribute, one can still defeat this: b...

Microsoft Outlook Express 6 - .XML File Attachment Script Execution

Microsoft Outlook Express 6 - .XML File Attachment Script Execution source: https://www.securityfocus.com/bid/5350/info An error has been reported in Microsoft Outlook Express which may allow malicious XML file attachments to execute arbitrary code in the context of the local system. Code executi...

Apache mod_ssl off-by-one vulnerability

Product: modssl - http://www.modssl.org/ Date: 06/24/2002 Summary: Off-by-one in modssl 2.4.9 and earlier By: Frank Denis - [email protected] --------------------------------------------------------------------- DESCRIPTION --------------------------------------------------------------------- This...

Microsoft Internet Explorer 56 - CSSText Bold Font Denial of Service

Microsoft Internet Explorer 56 - CSSText Bold Font Denial of Service source: https://www.securityfocus.com/bid/5027/info A problem with Microsoft Internet Explorer may make it possible to deny service to users of the browser. The problem is in the handling of certain types of stylesheet input. It...

CVE-2002-0466: Undefined Security Weakness

Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to 1 Statsbrowse.asp, 2 servubrowse.asp, 3 browsedisk.asp, 4 browsewebalizerexe.asp, or 5 sqlbrowse.asp...

Security bugs in PhpNuke

Hello, I found 2 security bugs in phpnuke The first is a path disclosure vulnerability : Change this http://nukesite.xxx/modules.php?op=modload&name=WebLinks&file=index&lop=viewlink&cid=3 in that ... http://nukesite.xxx/modules.php?op=modload&name=WebLinks&file=index&lop=viewlink The second one i...

Microsoft Internet Explorer 5 - Cascading Style Sheet File Disclosure (MS02-023)

Microsoft Internet Explorer 5 - Cascading Style Sheet File Disclosure MS02-023 source: https://www.securityfocus.com/bid/4411/info The Cascading Style-Sheets CSS interpreter for Microsoft Internet Explorer is prone to an issue which may allow an attacker to read the contents of files on a web...

Microsoft Internet Explorer 5 - Cascading Style Sheet File Disclosure (MS02-023)

source: https://www.securityfocus.com/bid/4411/info The Cascading Style-Sheets CSS interpreter for Microsoft Internet Explorer is prone to an issue which may allow an attacker to read the contents of files on a web user's system. It is possible to use the cssText property of the styleSheet to rea...

CVE-1999-0750

Technical details for CVE-1999-0750 are not publicly provided in the supplied documents. Monitor for updates from official feeds.

CVE-1999-0750: Undefined Security Weakness

Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account...

Microsoft Internet Explorer 5 / Netscape Communicator 4.0/4.5/4.6 - JavaScript STYLE

Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Netscape Communicator 4.0/4.5/4.6 Javascript STYLE Vulnerability source: https://www.securityfocus.com/bid/630/info The HTML STYLE command can be used to embed Javascript into Hotmail email messages. The STYLE tag...