CVE-2008-4788

Microsoft Internet Explorer 6 is affected by CVE-2008-4788 due to a flaw in how the address bar renders URLs with high-bit characters. The vulnerability occurs when IE omits high-bit URL-encoded characters in the address bar, enabling remote attackers to spoof the address bar by using a domain na...

FreeBSD Ports: linux-opera, opera-devel, opera

The remote host is missing an update to the system as announced in the referenced advisory. VID d6b092bd-61e1-11da-b64c-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Nokia 6131 NFC URI/URL Spoofing and DoS Advisory

Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Nokia www.nokia.com Device: Nokia 6131 NFC Firmware: V 05.12, 19-09-07, RM-216 Device Type: mobile phone OS: Symbian Series40 Subsystem: Near Field Communication ----------------------------- Executive Summary: URI/URL Spoofing when...

CVE-2008-1999

Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of the URL aka the user field, as demonstrated by %E3%80%80 sequences...

CVE-2008-1999

Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of the URL aka the user field, as demonstrated by %E3%80%80 sequences...

Mozilla Firefox < 2.0.0.13 Multiple Vulnerabilities

Binary data 4447.prm...

SuSE 10 Security Update : KDE (ZYPP Patch Number 4433)

Users could log in as root without having to enter the password if auto login was enabled and if kdm was configured to require the root passwort to shutdown the system. CVE-2007-4569 JavaScript code could modify the URL in the address bar to make the currently displayed website appear to come fro...

Fedora 7 : kdebase-3.5.7-13.fc7 (2007-1700)

This update primarily addresses security issues around URL spoofing. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 7 : kdelibs-3.5.7-20.fc7 (2007-1699)

This update primarily addresses problems with URL spoofing and consolekit/session permissions. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

CVE-2007-3892

CVE-2007-3892 corresponds to an address bar spoofing vulnerability in Internet Explorer (IE 5.01–7). The issue allows spoofing of the Trust UI (address bar) after navigating from attacker-controlled content, with the content remaining that of the attacker’s page. Microsoft issued MS07-057 (Cumula...

CVE-2007-3892

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826...

[slackware-security] kdebase, kdelibs

New kdebase packages are available for Slackware 12.0 to fix security issues. A long URL padded with spaces could be used to display a false URL in Konqueror's addressbar, and KDM when used with no-password login could be tricked into logging a different user in without a password. This is not th...

GLSA-200708-09 : Mozilla products: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-09 Mozilla products: Multiple vulnerabilities Mozilla developers fixed several bugs, including an issue with modifying XPCNativeWrappers CVE-2007-3738, a problem with event handlers executing elements outside of the documen...

Code injection

KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...

CVE-2007-4224

KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...

Design/Logic Flaw

Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion...

CVE-2007-4224

KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...

CVE-2007-4224

CVE-2007-4224 affects KDE Konqueror 3.5.7, describing a remote-address-bar spoof in which an attacker can spoof the URL by calling setInterval with a short interval and changing window.location. The vulnerability targets Konqueror’s handling of the address bar and is documented alongside related ...

CVE-2007-4224

KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...

JVN#16018033 Safari URL spoofing vulnerability

Apple's Safari is a web browser installed as default with Mac OS X. There is a problem in Safari where URLs displayed in the address bar could be spoofed to deceive Safari users. This could be conducted by using Unicode characters that look alike to ASCII characters as URL strings. Impact As it i...