Apache MyFaces Tomahawk JSF Framework 1.1.5 - 'Autoscroll' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24480/info Apache Tomahawk MyFaces JSF Framework is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to launch cross-site scripting attacks on...

CVE-2002-1441

Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via 1 the Steelarrow Service Steelarrow.exe using a long UserIdent Cookie header, 2 DLLHOST.EXE Steelarrow.dll via a request for a long .aro file, or 3 DLLHOST.EXE via a Chunked...

CVE-2002-1441

Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via 1 the Steelarrow Service Steelarrow.exe using a long UserIdent Cookie header, 2 DLLHOST.EXE Steelarrow.dll via a request for a long .aro file, or 3 DLLHOST.EXE via a Chunked...

CVE-2002-1441

Tomahawk SteelArrow (before 4.5) is affected by multiple buffer overflows that allow remote code execution. The vulnerabilities arise from: (1) Steelarrow Service (Steelarrow.exe) accepting a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) handling an oversized .aro file request, a...