FreeBSD : web browsers -- window injection vulnerabilities (b0911985-6e2a-11d9-9557-000a95bc6fae)

A Secunia Research advisory reports : Secunia Research has reported a vulnerability in multiple browsers, which can be exploited by malicious people to spoof the content of websites. The problem is that a website can inject content into another site's window if the target name of the window is...

CVE-2002-1933

The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window...

CVE-2002-1898

Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window...

ClamAV antivirus Qantum compression DoS

Compression with small windows size causes anti virus to crash...

CVE-2005-1722

CVE-2005-1722 : Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions. Documented impact is local privilege escalation to root; root cause and exact exploit details are not provided in the suppli...

CVE-2005-1722

Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions...

CVE-2005-1722: Undefined Security Weakness

Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions...

Moderate: Red Hat Security Advisory: gftp security update

An updated gFTP package that fixes a directory traversal issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. gFTP is a multi-threaded FTP client for the X Window System. A directory traversal bug was found in gFTP. If a user...

CVE-2005-1901

Multiple cross-site scripting XSS vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 the username in the Add User window or 2 the license key in the Licensing page...

CVE-2005-1901: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML via 1 the username in the Add User window or 2 the license key in the Licensing page...

Mandrake Linux Security Advisory : openssl (MDKSA-2005:096)

Colin Percival reported a cache timing attack that could be used to allow a malicious local user to gain portions of cryptographic keys CVE-2005-0109. The OpenSSL library has been patched to add a new fixed-window modexp implementation as default for RSA, DSA, and DH private key operations. The...

ImageMagick security update

CentOS Errata and Security Advisory CESA-2005:480-01 Updated ImageMagick packages that fix a denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for...

Moderate: Red Hat Security Advisory: ImageMagick security update

Updated ImageMagick packages that fix a denial of service issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System that can read and write multiple...

Microsoft Internet Explorer - JavaScript 'window()' Crash

milw0rm.com 2005-05-31...

Microsoft Internet Explorer - JavaScript window() Crash

Microsoft Internet Explorer - JavaScript window Crash milw0rm.com 2005-05-31...

MS Internet Explorer - javascript ""window()"" Crash

No description provided by source. body onLoad="window" milw0rm.com 2005-05-31...

Important: Red Hat Security Advisory: ImageMagick security update

Updated ImageMagick packages that fix a buffer overflow issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System which can read and write multiple...

CVE-2005-1710

Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...

CVE-2005-1710

Multiple cross-site scripting XSS vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the username in an Add User window or 2 the license key volatile.licensetoadd parameter in the Licensing page...

Fedora Core 2 : mozilla-1.7.6-1.2.2 (2005-248)

A buffer overflow bug was found in the way Mozilla processes GIF images. It is possible for an attacker to create a specially crafted GIF image, which when viewed by a victim will execute arbitrary code as the victim. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the...