CVE-2010-4586

The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issue to CVE-2010-4508...

CVE-2010-4586

The CVE-2010-4586 issue concerns Opera before 11.00, where WebSockets functionality is enabled by default. The description indicates an unspecified impact and remote attack vectors, and notes a possible relation to CVE-2010-4508. Connected sources confirm that Opera 11.00 includes fixes, implying...

CVE-2010-4586: Undefined Security Weakness

The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, possibly a related issue to CVE-2010-4508...

PT-2010-5553

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.00 Description The default configuration of Opera enables WebSockets functionality, which has an unspecified impact and remote attack vectors. Recommendations For Opera versions prior to 11.00, update to version 11.0...

Opera < 11 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 11.00. Such versions are potentially affected by the following issues : - An error exists such that web page content can be displayed over dialog boxes leading to security warning misrepresentation. 977, CVE-2010-4579 - An error...

Mozilla Firefox Browser Security Bypass Vulnerabilities - Win

The host is installed with Mozilla Firefox browser and is prone to secuirty bypass vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxsecbypassvulnwin.nasl 5306 2017-02-16 09:00:16Z teissa $ Mozilla Firefox Browser Security Bypass Vulnerabilities - Win Authors: Antu Sanadi Copyright: Copyrig...

Mozilla Firefox Browser 4.x < 4.0 Beta 8 Security Bypass Vulnerabilities - Windows

Mozilla Firefox browser is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4508

The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification...

Code injection

The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification...

CVE-2010-4508

CVE-2010-4508 affects Mozilla Firefox 4 through 4.0 Beta 7, in the WebSockets implementation. The vulnerability arises from improper handling of proxy upgrade negotiation, tied to an described “inherent problem” with the WebSocket spec. The impact is described as unspecified in the provided sourc...

CVE-2010-4508: Undefined Security Weakness

The WebSockets implementation in Mozilla Firefox 4 through 4.0 Beta 7 does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an "inherent problem" with the WebSocket specification...

PT-2010-5511

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4 through 4.0 Beta 7 Description The WebSockets implementation does not properly perform proxy upgrade negotiation, which has unspecified impact and remote attack vectors, related to an inherent problem with the...

Mozilla Disables WebSockets in Firefox 4 Over Security Concerns

Officials at Mozilla have decided to disable support for Web Sockets in future versions of Firefox because of concerns over the security of the the current version of the protocol.The group said that demonstrations of serious attacks against WebSockets have spurred the move. Mozilla said that the...

CVE-2010-3805

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving WebSockets. NOTE: this may overlap...

Integer overflow

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving WebSockets. NOTE: this may overlap...

CVE-2010-3805

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving WebSockets. NOTE: this may overlap...

CVE-2010-3805

The CVE-2010-3805 entry concerns Apple Safari/WebKit. Affected: Safari/WebKit prior to 5.0.3 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1.3 on Mac OS X 10.4. Description: an integer underflow in WebKit via WebSockets allows a remote attacker to execute arbitrary code or cause an applicatio...

About the security content of Safari 5.0.3 and Safari 4.1.3

About the security content of Safari 5.0.3 and Safari 4.1.3 Last Modified: November 18, 2010 Article: HT4455 Email this article Print this page Summary This document describes the security content of Safari 5.0.3 and Safari 4.1.3. For the protection of our customers, Apple does not disclose,...

CVE-2010-3805: Undefined Security Weakness

Integer underflow in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving WebSockets. NOTE: this may overlap...

PT-2010-5091

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.3 on Mac OS X 10.5 through 10.6 and Windows Apple Safari versions prior to 4.1.3 on Mac OS X 10.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via vecto...