JVN#67120749 Multiple vulnerabilities in ActiveGeckoBrowser

ActiveGeckoBrowser from Fenrir Inc. is a plugin that adds the Gecko rendering engine to the Sleipnir web browser. ActiveGeckoBrowser contains multiple vulnerabilities caused by the Gecko engine. Impact A remote attacker may execute an arbitrary code or script, or conduct a denial of service DoS...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Microsoft IE CStyleSheet对象释放后使用漏洞（MS10-035）

BUGTRAQ ID: 40417 CVE ID: CVE-2010-1262 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer对CStyleSheet对象支持的实现方式中存在释放后使用漏洞。在创建样式表数组时，其中会包含有对其根容器的引用。如果所创建的样式表不属于标记中元素，则在销毁元素时也会释放根容器。之后应用再试图使用样式表时就会使用无效的指针，导致以当前用户权限执行任意代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0...

K-Meleon Remote Denial of Service Exploit

Exploit for windows platform in category dos / poc ========================================= K-Meleon Remote Denial of Service Exploit ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Microsoft IE未初始化内存远程代码执行漏洞（MS10-035）

BUGTRAQ ID: 40410 CVE ID: CVE-2010-1259 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer访问尚未正确初始化对象的方式中存在一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Internet Explorer 8.0 Microsoft Internet Explor...

Microsoft Internet Explorer Developer Toolbar (CVE-2010-1261) Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Meetin...

Microsoft Internet Explorer Uninitialized Memory (CVE-2010-1259) Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Meetin...

Microsoft Internet Explorer Developer Toolbar HTML Element Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Meetin...

Apple Webkit CSS Charset Text Transformation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Webkit's...

Internet Explorer and SharePoint 'toStaticHTML' Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Microsoft SharePoint are prone to a cross-domain information-disclosure vulnerability because they fail to properly enforce the same-origin policy. An attacker can exploit this issue to access local files or content from a browser window in another doma...

Mozilla Multiple Products CSSValue Array Memory Corruption (CVE-2008-2785)

Firefox is an open source web browser developed by Mozilla Foundation. The application is capable of interpreting and rendering many types of Internet content, including various versions of HTML, XML, CSS Cascade Style Sheet, JavaScript, various graphic formats, and so on. Firefox is made availab...

Mozilla Pushes Back Firefox 3.6.4

Originally expected for today, Mozilla has confirmed that it is delaying the the release of version 3.6.4 of its open source Firefox web browser, the next security and stability update to the 3.6.x branch of Firefox. Instead, Mozilla has announced the availability of a release candidate for publi...

Mozilla Firefox ConstructFrame With Floating First-letter Memory Corruption (CVE-2009-2462)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Mozilla Multiple Products JavaScript String Replace Buffer Overflow (CVE-2009-3075)

Mozilla Firefox and Seamonkey are popular open source web browsers from Mozilla Foundation. A heap buffer overflow vulnerability has been reported in Mozilla Firefox and SeaMonkey products. The vulnerability is due to improper processing of a crafted substring when performing the replace operatio...

Flock Web Browser 2.5.6 Denial Of Service

====================================================================== Flock web browser v2.5.6 Remote Memory Corrupt Crash Exploit ====================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /...

Update Protection against Adobe Shockwave Player DIR Files PAMI Chunk Code Execution Vulnerability (APSB10-12)

A remote code execution vulnerability has been identified in Adobe Shockwave Player. Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. An attacker can exploi...

Opera Browser Multiple Denial Of Service Vulnerability (Windows)

The host is installed with Opera Web Browser and is prone to Multiple Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodoperamultdosvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Opera Browser Multiple Denial Of Service Vulnerability Windows Authors: Antu Sanadi Copyright:...

REvolution 10.02 - Cross-Site Request Forgery

REvolution 10.02 - Cross-Site Request Forgery Vulnerability ID: HTB22367 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 06 May 2010 Vulnerability...

Mozilla Shell Protocol Validation (CVE-2004-0648)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Adobe Shockwave Player DIR Files PAMI Chunk Code Execution (APSB10-12; CVE-2010-1292)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. An attacker can exploi...