1657 matches found
Debian DSA-2399-2 : php5 - several vulnerabilities
Several vulnerabilities have been discovered in PHP, the web scripting language. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-1938 The UNIX socket handling allowed attackers to trigger a buffer overflow via a long path name. - CVE-2011-2483 The...
Thunderbird 3.1 < 3.1.18 Multiple Vulnerabilities (Mac OS X)
The installed version of Thunderbird 3.1 is earlier than 3.1.18. Such versions are potentially affected by multiple vulnerabilities : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly...
[SECURITY] [DSA 2399-2] php5 regression fix
------------------------------------------------------------------------- Debian Security Advisory DSA-2399-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 31, 2012 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2399-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2399-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 31, 2012 http://www.debian.org/security/faq -...
DSA-2399-1 php5 - several
Bulletin has no description...
Crash with malformed embedded XSLT stylesheets — Mozilla
Security researchers Nicolas Grégoire and Aki Helin independently reported that when processing a malformed embedded XSLT stylesheet, Firefox can crash due to a memory corruption. While there is no evidence that this is directly exploitable, there is a possibility of remote code execution...
libxml2: double-free caused by malformed XPath expression in XSLT
Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling...
libxml2: double free caused by malformed XPath expression in XSLT
Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression...
UBUNTU-CVE-2011-3881
WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks via vectors related to 1 the DOMWindow::clear function and use of a selection object, 2 the...
Apple Safari libxslt File Create
Added: 10/24/2011 CVE: CVE-2011-1774 BID: 48840 OSVDB: 74017 Background Safari is a web browser for Mac OS X and Windows. Problem Safari versions prior to 5.0.6 use unsafe security settings when implementing libxslt. An attacker may leverage this weakness by creating a web page that references a...
Cross Platform Webkit File Dropper
This module exploits a XSLT vulnerability in Webkit to drop ASCII or UTF-8 files to the target file-system. By default, the file will be dropped in C:\Program Files\ This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework cla...
Apple Safari Webkit libxslt Arbitrary File Creation
This module exploits a file creation vulnerability in the Webkit rendering engine. It is possible to redirect the output of a XSLT transformation to an arbitrary file. The content of the created file must be ASCII or UTF-8. The destination path can be relative or absolute. This module has been...
Apple Safari Webkit libxslt Arbitrary File Creation
$Id: safarixsltoutput.rb 13987 2011-10-18 07:39:50Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Apple Safari Webkit - libxslt Arbitrary File Creation (Metasploit)
$Id: safarixsltoutput.rb 13987 2011-10-18 07:39:50Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Apple Safari Webkit libxslt Arbitrary File Creation
Exploit for macOS platform in category remote exploits $Id: safarixsltoutput.rb 13987 2011-10-18 07:39:50Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
Memory corruption
Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "XSLT Memory Corruption Vulnerability."...
CVE-2011-1963
CVE-2011-1963 refers to a memory corruption flaw in Microsoft Internet Explorer 7–9 related to XSLT processing that can allow remote code execution when a malformed root object is accessed. The root cause is improper handling of memory objects (uninitialized or deleted objects) during a reloading...
CVE-2011-1963
Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "XSLT Memory Corruption Vulnerability."...
Microsoft Internet Explorer XSLT内存破坏远程代码执行漏洞
Bugtraq ID: 49037 CVE ID：CVE-2011-1963 Microsoft Internet Explorer是一款流行的WEB浏览器。 负责重载根文档root document对象标记的应用代码存在缺陷。在重载标记过程中，应用程序会派发一个通知，同时保留一个指向函数上下文中对象的引用。这允许事件回调篡改根文档对象，使用这个畸形对象可用于以应用程序上下文执行任意代码。 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 厂商解决方案...
ZDI-11-247: Microsoft Internet Explorer XSLT SetViewSlave Remote Code Execution Vulnerability
ZDI-11-247: Microsoft Internet Explorer XSLT SetViewSlave Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-247 August 9, 2011 -- CVE ID: CVE-2011-1963 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Microsoft -- Affected Products: Microsoft...