CVE-2005-0389

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-0814. Reason: This candidate is a duplicate of CVE-2005-0814. Notes: All CVE users should reference CVE-2005-0814 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Mozilla Firefox < 1.7.6 Multiple Vulnerabilities

Binary data 2671.prm...

security flaw

Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing."...

PT-2005-1374 · Novell · Novell Groupwise Webaccess

Name of the Vulnerable Software and Affected Versions: Novell GroupWise WebAccess affected versions not specified Description: The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an...

GoogleToolbar:About -- Allows Script Injection

Affection Software : GoogleToolbar Version : Tested on 2.0.114.1-big/en GGLD Notes: GoogleToolbar's About section allows injection of script, since it lacks any checking. The following code is a Proof Of Concept. s c r i p t...

CVE-2001-0722: Undefined Security Weakness

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability."...

PT-2001-2052 · Infopop · Infopop Ultimate Bulletin Board

Name of the Vulnerable Software and Affected Versions: Infopop Ultimate Bulletin Board UBB versions prior to 5.47e Description: The issue allows remote attackers to steal user cookies via an IMG tag that references an about: URL with an onerror field. This is a cross-site scripting vulnerability...

Microsoft IE cookies readable via about: URLS

Microsoft Internet Explorer has a vulnerability which allows a malicious website to access any cookie in the browser's memory or those stored on disk. Cookies are used by web sites for storing preferences, statistics and tracking users, but also for storing more sensitive information such as...

Minor IE vulnerability: about: URLs

Zone spoofing? Oh yes, that reminds me. Here's another one. Affected: Internet Explorer under Windows, up to version 6 Risk: Low Workaround: Disable scripting in the Internet Zone Problem: If an unknown 'about:' name is used, IE echos the string exactly to the page. So 'about:foo' results in an...

Netscape 4.76 gif comment flaw

Product: Netscape Navigator/Communicator Tested on: 4.76 on Linux and Win98/NT Vendor Contact: Reported 2001-03-22 Problem -------------------------------------------------------- - Overview: The Netscape browser does not escape the gif file comment in the image information page. This allows...

CVE-1999-0347: Undefined Security Weakness

Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character...

CVE-1999-0762: Undefined Security Weakness

When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information...

PT-1999-1333 · Netscape · Netscape Communicator

Name of the Vulnerable Software and Affected Versions: Netscape Communicator affected versions not specified Description: The issue allows a remote attacker to gain access to browser information when Javascript is embedded within the TITLE tag, utilizing the "about" protocol. Recommendations: At...