7464 matches found
Critical: Red Hat Security Advisory: seamonkey security update
Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...
Symantec Client Proxy Buffer Overflow in Older Product Versions
SUMMARY The Symantec Client Proxy integrated into older versions of Symantec AntiVirus and Symantec Client Security is vulnerable to a buffer overflow. AFFECTED PRODUCTS Product | Version | Solutions ---|---|--- Symantec AntiVirus | 10.0.x | Upgrade to SAV 10.1 MR9 10.1.x | Upgrade to to MR9 10.2...
Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities
Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabilities in the Web Browser of the high end smartphones manufactured by Nokia running Symbian OS 3rd Edition. The...
Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities
My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabilities in the Web Browser of the high end smartphones manufactured by Nokia running Symbian OS 3rd Edition. The detailed vulnerability disclosures along with tested PoCs have been...
Nokia Symbian S60v3 web browser DoS Exploits
Exploit for unknown platform in category dos / poc ============================================ Nokia Symbian S60v3 web browser DoS Exploits ============================================ This archive has six denial of service exploits that affect the Nokia Symbian S60v3 web browser. Exploits:...
Multiple Web Browser Vulnerabilities in Nokia Symbian OS 3rd Edition
Exploit for unknown platform in category dos / poc ==================================================================== Multiple Web Browser Vulnerabilities in Nokia Symbian OS 3rd Edition ==================================================================== My name is Nishant Das Patnaik, an...
Microsoft Outlook Web Access Cross-Site Scripting (MS05-029; CVE-2005-0563)
Microsoft Outlook Web Access OWA is a component of Microsoft Exchange Server. OWA allows authorized users to send and receive email, manage a calendar, and perform other functions using a web browser. OWA utilizes HTML, CSS and scripting techniques to present the user interface through the web...
Opera 10.10 Remote Code Execution DoS Exploit
No description provided by source. !/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an...
Apple Safari 4.0.4 / Firefox 3.5.7 / SeaMonkey 2.0.1 - Remote Denial of Service
function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...
Opera 10.10 Remote Code Execution DoS Exploit
Exploit for unknown platform in category dos / poc ============================================= Opera 10.10 Remote Code Execution DoS Exploit ============================================= !/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description :...
Opera 10.10 - Remote Code Execution Denial of Service
!/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an out-of-bounds memory access This have in...
Microsoft IE动态OBJECT标签信息泄露漏洞
BUGTRAQ ID: 38055 CVE ID: CVE-2010-0255 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer在加载OBJECT标签中所指定内容时如果index.dat文件直接从类似于以下的网页引用的话，则不会渲染和显示该文件的内容： /----- object data="file://127.0.0.1/C$/.../index.dat" type="text/html" width="100%" height="50" /object - -----/...
Novell iPrint Client ienipp.ocx target-frame Stack Buffer Overflow (CVE-2009-1568)
Novell iPrint Client is an application that allows users to install and manage printers, or submit print jobs from a web browser. Novell iPrint Client is bundled with an ActiveX control that implements various functions. A buffer overflow vulnerability exists in Novell iPrint Client. The...
Microsoft IE远程内存破坏漏洞(MS10-002)
BUGTRAQ ID: 37893 CVE ID: CVE-2010-0247 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer访问尚未正确初始化或已被删除的对象的方式中存在一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0.1 SP4 临时解决方法：...
Microsoft Internet Explorer Cross Domain Information Disclosure (MS06-042; CVE-2006-3280)
Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. Internet Explorer has numerous built-in mechanisms that enforce security policies which are...
Microsoft IE基线标签渲染远程代码执行漏洞（MS10-002）
BUGTRAQ ID: 37895 CVE ID: CVE-2010-0245 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 如果交错的strike和center标签中包含用用于操控sub或sup等字体基线的元素的话，则在IE渲染该标签时存在释放后使用错误。在删除这个元素指针的时候，IE之后会引用已被释放的指针。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 8.0 临时解决方法： 将Internet...
Internet Explorer Eventparam use-after-free vulnerability
Added: 01/20/2010 CVE: CVE-2010-0249 BID: 37815 OSVDB: 61697 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem A vulnerability in the Eventparam function can cause Internet Explorer's HTML engine to access memory that has already be...
US-CERT Technical Cyber Security Alert TA10-013A -- Adobe Reader and Acrobat Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA10-013A Adobe Reader and Acrobat Vulnerabilities Original release date: Last revised: -- Source: US-CERT Systems Affected Adobe Reader and Acrobat 9.2 and earlier 9.x versions Adobe Reader a...
Internet Explorer CVE-2010-0249 'srcElement()' Remote Code Execution Vulnerability
Description Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the browser. Successful exploits will compromise the application and possibly the computer. Failed attacks will cause...
