Mozilla Firefox 'Basic Realm' Basic Authentication Header Spoofing Vulnerability

Mozilla Firefox is prone to a domain-spoofing vulnerability that allows an attacker to spoof an HTTP basic authentication dialog. Attackers may exploit this vulnerability via a malicious webpage to spoof the origin of an HTTP basic authentication dialog that the victim may trust. Attackers may fi...

MacroVision InstallShield Update Service isusweb.dll unsafe method

Added: 12/07/2007 CVE: CVE-2007-5660 BID: 26280 OSVDB: 38347 Background MacroVision InstallShield is software for creating installers or software packages. Problem Several unsafe methods in the Update Service ActiveX control allow command execution when a user loads a specially crafted web page...

Apple Mac OS X v10.4.11之前版本多个安全漏洞

BUGTRAQ ID: 26444 CVECAN ID:...

[48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow

48bits Advisory QuickTime Panorama Sample Atom Heap Overflow Abstract: QuickTime is prone to a heap overflow vulnerability when parsing malformed Panorama Sample Atoms, which are used in QuickTime Virtual Reality Movies. This Vulnerability allows attackers to execute code on vulnerable...

CVE-2002-2308

Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself...

Microsoft Internet Explorer Address Bar Spoofing Vulnerability

Description Microsoft Internet Explorer is prone to a vulnerability that lets attackers spoof the address bar of a trusted site. Attackers may exploit this vulnerability via a malicious webpage to spoof the contents and origin of a page that the victim may trust. Attackers may find this issue...

apple-overflow.txt

---------------------------------------------------------------------- ATTACK VECTORS ---------------------------------------------------------------------- This vulnerability can be triggered by luring a target user into running a malicious SMIL file locally or via a webpage. In the later scenar...

Apple Quicktime < 7.2 SMIL Remote Integer Overflow PoC

Exploit for multiple platform in category dos / poc ====================================================== Apple Quicktime SRC="available-sample.qtif" QTSRC="poc.smil" WIDTH="10" HEIGHT="10" PLUGINSPAGE=" www.apple.com/quicktime/download" TYPE="video/quicktime" /...

IBM AIX rmpvc工具本地缓冲区溢出漏洞

BUGTRAQ ID: 25217 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的rmpvc工具在处理命令行参数时存在缓冲区溢出漏洞，本地攻击可能利用此漏洞导致系统崩溃。 如果执行rmpvc -l port logical name命令时，logical namel参数超过16个字符的话，就可以触发这个溢出，导致系统崩溃。 IBM AIX 4.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

LinkedIn IE工具栏IEContextMenu控件远程溢出漏洞

BUGTRAQ ID: 25032 LinkedIn是一个联网工具，帮助用户在线寻找各类工作或业务联系人。 LinkedIn的IEToolbar.IEContextMenu.1 ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 LinkedIn工具栏的IEToolbar.IEContextMenu.1（LinkedInIEToolbar.dll）控件在处理Search方式时将VARIANT用作了varBrowser参数，如果用户受骗访问了恶意网页的话就可能触发缓冲区溢出，导致在用户浏览器会话中执行任意指令。 LinkedIn IE Toolbar...

Mozilla Foundation Security Advisory 2007-23

Mozilla Foundation Security Advisory 2007-23 Title: Remote code execution by launching Firefox from Internet Explorer Impact: Critical Announced: July 17, 2007 Reporter: Greg MacManus and Billy Rios Products: Firefox and Thunderbird Fixed in: Firefox 2.0.0.5 and Thunderbird 2.0.0.5 Description...

Apple QuickTime 7.1.5 - Information Disclosure / Multiple Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/24873/info Apple QuickTime is prone to an information-disclosure and multiple remote code-execution vulnerabilities. Remote attackers may exploit these issues by enticing victims into opening maliciously crafted files or visiting maliciously crafted...

Apple Safari 3.0.x for Windows - Document.Location.Hash Buffer Overflow

Apple Safari 3.0.x for Windows - Document.Location.Hash Buffer Overflow source: https://www.securityfocus.com/bid/26448/info Safari for Windows is prone to a buffer overflow that occurs when an attacker entices a victim to view a maliciously crafted webpage. A remote attacker may exploit this iss...

Apple Safari 3.0.x for Windows - 'Document.Location.Hash' Buffer Overflow

source: https://www.securityfocus.com/bid/26448/info Safari for Windows is prone to a buffer overflow that occurs when an attacker entices a victim to view a maliciously crafted webpage. A remote attacker may exploit this issue to execute arbitrary machine code in the context of the affected...

Safari for Windows, 0day URL protocol handler command injection

Apple released version 3 of their popular Safari web browser today, with the added twist of offering both an OS X and a Windows version. Given that Apple has had a lousy track record with security on OS X, in addition to a hostile attitude towards security researchers, a lot of people are expecti...

Cross-Site Scripting in Adobe RoboHelp 6, Server 6 and X5

Hi, I'd like to inform you about a XSS-vulnerability in Adobe RoboHelp 6, RoboHelp Server 6 and RoboHelp X5. See attached advisory below. I - TITLE Security advisory: Cross-Site Scripting in RoboHelp 6, RoboHelp Server 6 and RoboHelp X5 II - SUMMARY Description: A Cross-Site Scripting Flaw in...

Kaspersky AntiVirus SysInfo ActiveX控件信息泄露漏洞

Kaspersky Antivirus是一款流行的反病毒程序。 Kaspersky Antivirus ActiveX控件存在设计问题，远程攻击者可以利用漏洞获得敏感信息。 问题存在于如下控件中： ProgID: KL.SysInfo Clsid: BA61606B-258C-4021-AD27-E07A3F3B91DB File: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\AxKLSysInfo.dll Version: 5.0.5.0...

IE NCTAudioFile2.AudioFile ActiveX Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== IE NCTAudioFile2.AudioFile ActiveX Remote Overflow Exploit ========================================================== /...

Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Overflow

/ ------------------------------------------------------------------------------------------------- PoC 79 Exes's / IE NCTAudioFile2.AudioFile ActiveX Remote Stack Overfl0w Auther: InTeL Original Advisory: http://secunia.com/secuniaresearch/ Attack Vector: EIP smash Type: Remote Malicious webpage...

MS Internet Explorer Recordset Double Free Memory Exploit (MS07-009)

No description provided by source. HTML !-- Microsoft Internet Explorer ADODB.Recordset Double Free Memory Exploit ms07-009. Review: This code exploit "double free error" in msado15.dll NextRecordset function. As a result of double freeing of same string, rewriting of Heap Control Block ...