7461 matches found
Debian DSA-2263-2 : movabletype-opensource - several vulnerabilities
It was discovered that Movable Type, a weblog publishing system, contains several security vulnerabilities : A remote attacker could execute arbitrary code in a logged-in users' web browser. A remote attacker could read or modify the contents in the system under certain circumstances. %NASLMINLEV...
Opera Web Browser 11.11拒绝服务漏洞
Bugtraq ID: 48262 Opera Web Browser是一款开源的WEB服务器。 Opera Web Browser不正确处理特制HTML元素，远程攻击者构建恶意WEB页，诱使用户解析，可导致应用程序崩溃。 Opera Web Browser 11.11 厂商解决方案 目前没有详细解决方案提供： http://www.opera.com/ html body iframe src=about:blank id=bo0om style="width:0px;height:0px;border:0px none;"/iframe script...
Microsoft Internet Explorer 8 MIME嗅探信息泄露漏洞
Bugtraq ID: 48200 CVE ID：CVE-2011-1246 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 下载某些内容时存在错误可被利用执行部分不可期的操作，获取其他域或Internet Explorer中的某些MIME信息。 Microsoft Internet Explorer 8 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://www.microsoft.com/technet/security/Bulletin/MS11-050.mspx...
RHEL 5 / 6 : flash-plugin (RHSA-2011:0869)
An updated Adobe Flash Player package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...
Microsoft Internet Explorer Time元素未初始化内存远程代码执行漏洞
Bugtraq ID: 48206 CVE ID：CVE-2011-1255 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer在处理某些time元素时存在释放后使用错误，攻击者可以构建恶意WEB页，诱使用户解析，以应用程序上下文执行任意代码。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP3 Microsoft...
Microsoft Internet Explorer拖放未初始化内存远程代码执行漏洞
Bugtraq ID: 48204 CVE ID：CVE-2011-1254 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer在处理某些内容上的拖放事件时存在释放后使用错误，攻击者可以构建恶意WEB页，诱使用户解析，破坏内存，成功利用漏洞可以以应用程序上下文执行任意代码。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6....
JVN#72586781: ASP.NET vulnerable to cross-site scripting
ASP.NET contains an issue in the escape processes for string output. Web applications that use ASP.NET may contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the...
Web Browser - Denial of Service Vulnerability
Document Title: =============== Web Browser - Denial of Service Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/26.wmv View: http://www.youtube.com/watch?v=tdHvBYT4w5U Release Date: ============= 2011-06-15 Vulnerability Laboratory ID VL-ID:...
Adobe Reader and Acrobat font memory corruption vulnerability
Overview Adobe Reader and Acrobat fail to properly handle font data, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description A critical vulnerability exists in the font parsing code in Adobe Reader and Acrobat. The vulnerability results i...
MS11-044: Vulnerability in .NET Framework Could Allow Remote Code Execution (2538814)
The JIT compiler included with the version of the .NET Framework installed on the remote host incorrectly validates certain values within an object. An attacker may be able to leverage this vulnerability to run arbitrary code as the logged in user or the user account of ASP.NET on the affected...
Web Browser - Denial of Service Vulnerability
Document Title: =============== Web Browser - Denial of Service Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/26.wmv View: http://www.youtube.com/watch?v=tdHvBYT4w5U Release Date: ============= 2011-06-15 Vulnerability Laboratory ID VL-ID:...
Design/Logic Flaw
GNOME Display Manager gdm before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type...
Opera Web Browser 11.11 - Denial of Service
Opera Web Browser 11.11 - Denial of Service source: https://www.securityfocus.com/bid/48262/info The Opera Web Browser is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Opera Web Browser 11.11 ...
Microsoft Internet Explorer Link Properties Uninitialized Memory Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected...
Microsoft Internet Explorer DOM Editing Uninitialized Memory Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected...
Microsoft Windows MHTML Mime-Formatted Request Information Disclosure Vulnerability
Description Microsoft Windows is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Attackers can exploit this issue by enticing an unsuspecting user to visit a specially crafted webpage...
Opera Web Browser 11.11 - Denial of Service
source: https://www.securityfocus.com/bid/48262/info The Opera Web Browser is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Opera Web Browser 11.11 is vulnerable; other versions may also be...
Microsoft Internet Explorer Drag and Drop Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue to access content from another domain or security zone. This may allow the attacker to obtain sensitive information that may aid in further attacks...
Microsoft Internet Explorer Time Element Uninitialized Memory Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected...
Microsoft Silverlight & .NET Framework Invalid Array Offset Remote Code Execution Vulnerability
Description Microsoft Silverlight and Microsoft .NET Framework are prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service conditio...