RHEL 4 : seamonkey (RHSA-2009:1163)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1163 advisory. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the...

Opera Web Browser Select Object Denial Of Service Vulnerability (Linux)

The host is installed with Opera Web Browser and is prone to Select Object Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gboperaselectdosvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera Web Browser Select Object Denial Of Service Vulnerability Linux Authors: Nikita MR...

Opera Web Browser Select Object Denial Of Service Vulnerability - Windows

Opera Web Browser is prone to Select Object Denial of Service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : freetype2 (freetype2-794)

Freetype was updated to fix some integer overflows that can be exploited remotely in conjunction with programs like a web-browser. CVE-2009-0946 Thanks to Tavis Ormandy who found the bugs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2009-2541

The web browser on the Sony PLAYSTATION 3 PS3 allows remote attackers to cause a denial of service memory consumption and console hang via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

Design/Logic Flaw

The web browser on the Sony PLAYSTATION 3 PS3 allows remote attackers to cause a denial of service memory consumption and console hang via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

CVE-2009-2541

The web browser on the Sony PLAYSTATION 3 PS3 allows remote attackers to cause a denial of service memory consumption and console hang via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

CVE-2009-2541

The web browser on the Sony PLAYSTATION 3 PS3 allows remote attackers to cause a denial of service memory consumption and console hang via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

CVE-2009-2541

Technical details for CVE-2009-2541 are not provided in the connected documents. The initial description mentions a PS3 browser DoS via a large length value, but no concrete vendor/product/version, affected components, impact, or fix is given in the supplied materials.

Mozilla Firefox JIT Escape Function Memory Corruption

Added: 07/13/2009 CVE: CVE-2009-2477 BID: 35660 OSVDB: 55846 Background Mozilla is a suite of Internet client products available for multiple platforms. Problem A memory corruption vulnerability in Mozilla Firefox in the way it handles JIT escape function calls allows arbitrary code injection and...

Opera Web Browser 'Refresh' Header XSS Vulnerabilities (Linux)

The host is installed with Opera Web Browser and is prone to Cross-Site Scripting Vulnerability. OpenVAS Vulnerability Test $Id: gboperaxssvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera Web Browser 'Refresh' Header XSS Vulnerabilities Linux Authors: Antu Sanadi Copyright: Copyright c 2009...

[Full-disclosure] CORE-2009-0519 - Awingsoft Awakening Winds3D Viewer remote command execution vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Awingsoft Awakening Winds3D Viewer remote command execution vulnerability 1. Advisory Information Title: Awingsoft Awakening Winds3D Viewer remote command execution...

Opera Web Browser 'Refresh' Header XSS Vulnerabilities - Linux

Opera Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Web Browser 'Refresh' Header XSS Vulnerabilities - Windows

Opera Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Security Advisory RHSA-2009:1134

The remote host is missing updates announced in advisory RHSA-2009:1134. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. A flaw was found in the way that SeaMonkey parsed malformed HTML mail messages. If a user opened a specially-crafted HTML...

[oCERT-2009-008] Dillo integer overflow

2009-008 Dillo integer overflow Description: Dillo, an open source graphical web browser, suffers from an integer overflow which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. The vulnerability is triggered by HTML pages with embedded PNG images, the...

Protection against Mozilla Firefox SSL Tampering via non-200 Responses to Proxy CONNECT Requests

Mozilla Firefox, Thunderbird and SeaMonkey use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server. A vulnerability was reported in Mozilla Firefox, a feely available Web browser. The vulnerability resides in the handling of non-2...

HP Multiple LasterJet Printer xss

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com/ Bug: Multiple...

Google Chrome HTTP响应处理缓冲区溢出漏洞

BUGTRAQ ID: 35462 CVECAN ID: CVE-2009-2121 Google Chrome是Google发布的开源WEB浏览器。 Google Chrome在处理HTTP服务器的响应时存在缓冲区溢出漏洞。如果用户受骗访问了恶意网站并从服务器接收到了包含有超长分块编码块大小的响应报文，就会在memmove中触发溢出，导致浏览器崩溃或执行任意代码。 Google Chrome 2.0.172.33 厂商补丁： Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Debian: Security Advisory (DSA-1820-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...