MS Internet Explorer (HTML Tag) Memory Corruption (MS06-013)

Exploit for unknown platform in category dos / poc ============================================================ MS Internet Explorer HTML Tag Memory Corruption MS06-013 ============================================================ 0day.today 2018-03-05...

Microsoft Internet Explorer - HTML Tag Memory Corruption (MS06-013)

Microsoft Internet Explorer - HTML Tag Memory Corruption MS06-013 milw0rm.com 2006-05-27...

Microsoft Internet Explorer - HTML Tag Memory Corruption (MS06-013)

milw0rm.com 2006-05-27...

Code injection

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast url attribute of an enclosure tag, or $encurl variable, which is executed when running wget...

Cross site scripting

Cross-site scripting XSS vulnerability in 1 addWeblog.php and 2 leaveComments.php in Destiney Rated Images Script 0.5.0 does not properly filter all vulnerable HTML tags, which allows remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag...

CVE-2006-2495

CVE-2006-2495 describes a CSRF vulnerability in the Serendipity project’s Entry Manager prior to version 1.0-beta3 . The issue allows remote attackers to perform unauthorized actions on behalf of a logged-in user by enticing them to click a link or view an image tag. The underlying risk is cross-...

CVE-2006-2269

Cross-site scripting XSS vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag...

Cross site scripting

Cross-site scripting XSS vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag...

1asphost.txt

This is an URL Bug on 1ASPHost & DomainDLX Hosting Services Internet Sites : We Can Run Script, META Tag Or HTML Code. JScript Example 1ASP Host : http://www.1asphost.com/MainLogin.aspx?error=alert'HACKED%20!' Example DomainDLX http://www.domaindlx.com/MainLogin.aspx?error=alert'HACKED%20!'...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TyroCMS beta 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 a javascript URI in an img BBCode tag, or a JavaScript event in a 2 url BBCode tag or 3 color BBCode tag...

USN-276-1: Thunderbird vulnerabilities

Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables. Under some rare circumstances, a malicious mail with embedded JavaScript could exploit this to execute arbitrary code with the privileges of the user. CVE-2006-0292, CVE-2006-1742 The function...

Ubuntu 5.04 / 5.10 : mozilla-thunderbird vulnerabilities (USN-276-1)

Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables. Under some rare circumstances, a malicious mail with embedded JavaScript could exploit this to execute arbitrary code with the privileges of the user. CVE-2006-0292, CVE-2006-1742 The function...

Microsoft Internet Explorer memory corruption

Uninitialized pointer dereference on OBJECT tag processing. Can be used for hidden malware installation...

[Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability

Perhaps not surprisingly, there appears to be a vulnerability in how Microsoft Internet Explorer handles or fails to handle certain combinations of nested OBJECT tags. This was tested with MSIE 6.0.2900.2180.xpsp.040806-1825 and mshtml.dll 6.00.2900.2873 xpspsp2gdr.060322-1613. At first sight, th...

Design/Logic Flaw

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to 1 multiple SCROLLING attributes with no values, or 2 a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which...

Design/Logic Flaw

The WebTextRendererWebInternal CGdrawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service application crash via an HTML LI tag with a large VALUE attribute list item number, which triggers a null dereference in QPainter::drawText, probably due to...

Code injection

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACING attribute in a TABLE tag, which triggers an error in KWQListIteratorImpl::KWQListIteratorImpl...

CVE-2006-1987

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to 1 multiple SCROLLING attributes with no values, or 2 a SRC attribute with no value. NOTE: due to lack of diagnosis by the researcher, it is unclear which...

CVE-2006-1987

Apple Safari 2.0.3 is affected by a denial-of-service and possible code execution vulnerability tied to invalid FRAME tag handling, potentially triggered by (1) multiple SCROLLING attributes with no values or (2) a SRC attribute with no value. The original note indicates uncertainty about which v...

CVE-2006-1988

The WebTextRendererWebInternal CGdrawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service application crash via an HTML LI tag with a large VALUE attribute list item number, which triggers a null dereference in QPainter::drawText, probably due to...