CVE-2010-1199

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node...

Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or otherwise render a malicious file. The specific flaw exists within a...

CVE-2010-1199: Undefined Security Weakness

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node...

Mozilla Thunderbird < 3.0.5 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 3.0.5. Such versions are potentially affected by the following security issues : - A memory corruption vulnerability can lead to arbitrary code execution if garbage collection is carefully timed after DOM nodes are moved between documents. MFSA...

Mozilla Integer Overflow in XSLT Node Sorting

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node...

Mozilla FirefoxThunderbirdSeaMonkey - XSLT Integer Overflow

Mozilla FirefoxThunderbirdSeaMonkey - XSLT Integer Overflow source: https://www.securityfocus.com/bid/41082/info Mozilla Firefox, SeaMonkey, and Thunderbird are prone to a remote integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the use...

Integer Overflow in XSLT Node Sorting — Mozilla

Security researcher Martin Barbella reported via TippingPoint's Zero Day Initiative that an XSLT node sorting routine contained an integer overflow vulnerability. In cases where one of the nodes to be sorted contained a very large text value, the integer used to allocate a memory buffer to store...

Mozilla Firefox/Thunderbird/SeaMonkey - XSLT Integer Overflow

source: https://www.securityfocus.com/bid/41082/info Mozilla Firefox, SeaMonkey, and Thunderbird are prone to a remote integer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running an affected application. Failed exploit attempts...

Symphony Detection

Symphony, an XSLT-powered, open source content management system, is hosted on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46818; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

Opera 'XSLT' Information Disclosure Vulnerability - (Windows)

The host is installed with Opera Web Browser and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperaxsltinfodiscvulnwin.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera 'XSLT' Information Disclosure Vulnerability - Windows Authors: Antu Sanadi Copyright: Copyrig...

Opera 'XSLT' Information Disclosure Vulnerability - Windows

Opera Web Browser is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages...

CVE-2010-1310

Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages...

CVE-2010-1310

Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages...

CVE-2010-1310: Exposure of Sensitive Information to an Unauthorized Actor

Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages...

Opera Web浏览器XSLT跨域信息泄露漏洞

BUGTRAQ ID: 38892 Opera是一款流行的WEB浏览器，支持多种平台。 正常情况下XSLT受到严格的控制以防独立站点的文档读取其他站点的内容。某些XSLT construct可能导致Opera从所生成的文档检索错误的内容，这些内容会随机的出现在缓存的之前访问页面中，其中可能包含有敏感信息。 Opera Software Opera 10.50 厂商补丁： Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.opera.com/browser/download/...

Opera < 10.51 Multiple Vulnerabilities

The version of Opera installed on the remote host is earlier than 10.51. Such versions are potentially affected by multiple issues : - Large values in the HTTP Content-Length header can be used to execute arbitrary code. 948 - XSLT can be used to retrieve random contents of unrelated documents. 9...

XSLT can be used to retrieve random contents of unrelated documents

XSLT is normally subject to strict controls, preventing documents from separate Web sites from reading the contents of other sites. Certain XSLT constructs can cause Opera to retrieve the wrong contents for the resulting document. These contents will appear randomly from the cached versions of an...

GNOME Project libxslt Library RC4 Key String Buffer Overflow (CVE-2008-2935)

XSLT is an XML language to define transformation for XML. XSLT is designed for use as part of XSL, which is a stylesheet language for XML. In addition to XSLT, XSL includes an XML vocabulary for specifying formatting. There exists a heap based buffer overflow vulnerability in RC4 libxslt...

CentOS 4 / 5 : firefox (CESA-2009:0397)

Updated firefox packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...