CVE-2001-0501

Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner...

CVE-2000-0517

Netscape Navigator (4.73 and earlier) may omit warnings or mis-handle cert state if a user previously accepted a non-matching certificate, enabling a DNS-compromise scenario to spoof a legitimate site. Root cause: certificate name mismatch is not revalidated within the same session after a warnin...

CVE-2000-0342

CVE-2000-0342 (Eudora 4.x) describes a vulnerability where remote attackers can bypass the user warning for executable attachments (.exe, .com, .bat) by using a .lnk file that references the attachment, a.k.a. “Stealth Attachment.” The linked PT-2000-1308 entry confirms the affected software as E...

Еще одна уязвимость в сертификатах Netscape

Если сертификат не соответствует имени серверу, то пользователю дается предупреждение. Если пользователь продолжает соединение, то предупреждения для данного сертификата больше не даются и он может быть использован для любого сервера...

CVE-1999-0809

Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed"...

msie.5.0.javascript.dos.txt

Date: Mon, 31 May 1999 16:18:02 GMT From: THR - To: [email protected] Subject: Exploit in Internet Explorer 5.0 Hi everyone! I have found a bug which will freeze Internet Explorer 5.0 I know that there are many bugs that will crasch browsers but what makes this one special is the following: In...