CVE-2006-7065

CVE-2006-7065 affects Microsoft Internet Explorer (mshtml.dll). A crafted IFRAME referencing a particular XML file and XSL stylesheet can trigger a crash in mshtml.dll when a refresh occurs, described as probably a null pointer dereference. The issue is documented across Red Hat and NVD/CVE sourc...

CVE-2006-7065

Microsoft Internet Explorer allows remote attackers to cause a denial of service crash via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference...

CVE-2006-7065: Undefined Security Weakness

Microsoft Internet Explorer allows remote attackers to cause a denial of service crash via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference...

The use of xml+xsl to the client to add the super admin account!- Vulnerability warning-the black bar safety net

Usage: put swords. xml and swords. xsl is placed in an ordinary space, I believe very few people will pay attention to the xml security bar, quack, as long as you want to run the program added to run , the default support for js and vbs. This app was a user of swords, the password for the est of...

The use of xml+xsl to the client to add the super admin account-vulnerability warning-the black bar safety net

Usage: put swords. xml and swords. xsl is placed in an ordinary space, I believe very few people will pay attention to the xml security bar, quack, as long as you want to run the program added to run , the default support for js and vbs. This app was a user of swords, the password for the est of...

CVE-2005-4455

cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi...

CVE-2005-4455

cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi...

CVE-2005-4455: Undefined Security Weakness

cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi...

CVE-2005-2517: Undefined Security Weakness

Safari in Mac OS X 10.3.9 and 10.4.2 submits forms from an XSL formatted page to the next page that is browsed by the user, which causes form data to be sent to the wrong site...

CVE-2005-0837

IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . dot...

CVE-2005-0837

IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . dot...

DEBIAN-CVE-2005-0837

IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . dot...

CVE-2005-0838

Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via 1 a long test value in an xsl:when tag, 2 a long test value in an xsl:if tag, or 3 a long select value in an xsl:value-of tag...

DEBIAN-CVE-2005-0838

Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via 1 a long test value in an xsl:when tag, 2 a long test value in an xsl:if tag, or 3 a long select value in an xsl:value-of tag...

CVE-2005-0838

Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via 1 a long test value in an xsl:when tag, 2 a long test value in an xsl:if tag, or 3 a long select value in an xsl:value-of tag...

CVE-2005-0837

IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . dot...

CVE-2005-0837

IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . dot...

CVE-2005-0837

IceCast 2.20 is affected: remote attackers can bypass the XSL parser and obtain the source of XSL files by requesting a .xsl file with a trailing dot. The provided documents identify the affected product and the exact bypass method, but do not include any remediation details or patch versions.

CVE-2005-0838

CVE-2005-0838 affects IceCast 2.20’s XSL parser. Multiple buffer overflows in handling long values in xsl:when, xsl:if, or xsl:value-of may lead to denial of service and possibly arbitrary code execution. The description specifies the vulnerable components but does not provide patched versions or...

CVE-2005-0838

Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via 1 a long test value in an xsl:when tag, 2 a long test value in an xsl:if tag, or 3 a long select value in an xsl:value-of tag...