A very long title in a web page can cause a crash on startup

If a Windows user with Input Method Editor IME installedbookmarks a page with an extremely long element,Opera will crash upon next startup. Opera will not recoverfrom this on its own, so the user will not be able to startOpera.This affects Japanese users and others using IME for textinput. It als...

CVE-2005-4134: Undefined Security Weakness

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service CPU consumption and delayed application startup via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE:...

DEBIAN-CVE-2005-3787

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.6.4-pl4 allow remote attackers to inject arbitrary web script or HTML via 1 the cookie-based login panel, 2 the title parameter and 3 the table creation dialog...

CVE-2005-3787

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.6.4-pl4 allow remote attackers to inject arbitrary web script or HTML via 1 the cookie-based login panel, 2 the title parameter and 3 the table creation dialog...

CVE-2005-3699: Undefined Security Weakness

Opera Web Browser 8.50 and 8.0 through 8.0.2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site...

Invision Power Board 2.1 : Multiple XSS Vulnerabilities

Fast translation of benji's advisory Author : benjilenoob WebSite : http://benji.redkod.org/ and http://www.redkod.org/ Audit in pdf : http://benji.redkod.org/audits/ipb.2.1.pdf Product : Invision power board Version : 2.1 Tisk : Low. XSS I- XSS non critical: -------------------- 1. Input passed ...

security flaw

Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...

CVE-2005-3103: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Movable Type before 3.2 allows remote attackers to inject arbitrary web script or HTML via the 1 title, 2 category, 3 body, 4 extended body, and 5 excerpt form fields in new blog entries...

Javascript prompt origin spoofing — Mozilla

Alerts and prompts created by scripts in web pages are presented with the generic title JavaScript Application which sometimes makes it difficult to know which site created them. A malicious page could attempt to cause a prompt to appear in front of a trusted site in an attempt to extract...

CVE-2005-2063

Multiple cross-site scripting XSS vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to sendpassword.asp or 2 Keyword field in search.asp...

CVE-2005-2063

Multiple cross-site scripting XSS vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to sendpassword.asp or 2 Keyword field in search.asp...

Local Root exploit (Fedora Core 4)

Local Root Exploit under Fedora Core 4 stable Advisory Florian Strankowski [email protected] www.bildunxxluecke.de/usr/florian/advisory/advisory-05-048.txt Vulnerable System : This vulnerability affects Fedora Core 4.0 stable with the kernelversion 2.6.11-1.1369FC4 1 Thu Jun 2 22:53:35...

CVE-2005-1838: Undefined Security Weakness

Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Email, 2 Title, or 3 Description fields...

CVE-2005-1620: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows remote attackers to inject arbitrary web script or HTML via the 1 title or 2 content of a message...

CVE-2005-1557: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in WebApp Guestbook PRO 3.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 content of a message...

CVE-2005-0961

Cross-site scripting XSS vulnerability in Horde 3.0.4 before 3.0.4-RC2 allows remote attackers to inject arbitrary web script or HTML via the parent frame title...

CVE-2005-1309

Cross-site scripting XSS vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the 1 entry title field or 2 comment body text...

CVE-2005-1320

Cross-site scripting XSS vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1322

Cross-site scripting XSS vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title...

CVE-2005-1012

Cross-site scripting XSS vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via 1 the contenttype parameter to content.asp, 2 the title, or 3 the description...