871 matches found
Qualcomm Eudora 5.0.2 - Use Microsoft Viewer Code Execution
Qualcomm Eudora 5.0.2 - Use Microsoft Viewer Code Execution source: https://www.securityfocus.com/bid/2490/info Eudora uses Internet Explorer to assist in the viewing of html messages if the 'Use Microsoft Viewer' option is enabled. Eudora also has a 'allow executables in HTML content' option,...
Wang/Kodak Image Scan ActiveX Control
Overview Description The Image Admin control is incorrectly marked safe for scripting. This control is sometimes identified as from "Kodak" and other times as from "Wang". The Image Admin control is one of several controls used to provide image editting services through a web site. Because the...
CVE-2000-0562
BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower...
Очередная уязвимость в Internet Explorer / Outlook
С помощью meta http-equiv="refresh" можно принудительно загрузить приаттаченный файл с установками локальной зоны безопасности, что позволяет выполнять приложения без подтверждения пользователем. Кроме того, можно выполнить любой локальный файл используя несуществующий элемент ActiveX: OBJECT...
Microsoft Windows SMB Registry : Registry HKLM_LOCAL_MACHINE Permissions
The registry key HKEYLOCALMACHINE is writeable by users who are not in the admin group. This allows these users to create a lot of keys on that machine, thus they can probably to get admin easily. Such a configuration probably means that the system has been compromised. C Tenable Network Security...
CVE-1999-0535
A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness...
CVE-1999-0582
A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc...
ie50.frame-spoofing.txt
ult IE 5.0 security settings allow frame spoofing Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of th...
msie.high.sec.y2k.patch.txt
Date: Wed, 09 Jun 1999 15:54:47 -0400 From: Paul Karger Subject: Downloading Y2K fixes to Internet Explorer leads to clock problem I was attempting to install service pack 2 of Internet Explorer 4.01 in order to meet corporate Y2K requirements and ran into the following interesting problem. To...
PT-1997-1163 · Microsoft · Windows Nt
Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT account policy with inappropriate security settings, specifically regarding lockout policies such as lockout duration and the number of bad logon attempts...