1546 matches found
Thunderbird mail crash
Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type...
CVE-2009-2210: Undefined Security Weakness
Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type...
Crash viewing multipart/alternative message with text/enhanced part — Mozilla
Bernd Jendrissek reported a crash in Thunderbird when viewing a multipart/alternative mail message with a text/enhanced part. Internally this led to operations on an unexpected type of object resulting in a crash which may be exploitable...
[SECURITY] Fedora 11 Update: jetty-5.1.15-4.fc11
Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server like Apache in order to use java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate...
dWebPro 6.8.26 (DT/FD) Multiple Remote Vulnerabilities
No description provided by source. dWebPro v 6.8.26 ============================================ Remote Directory Tarvelsal && Remote File Disclosure p0c's ============================================ Download : http://www.dwebpro.com/downloads/dwebpro6.8.26.exe...
dwebpro 6.8.26 - Directory Traversal File Disclosure
dwebpro 6.8.26 - Directory Traversal File Disclosure dWebPro v 6.8.26 ============================================ Remote Directory Tarvelsal && Remote File Disclosure p0c's ============================================ Download : http://www.dwebpro.com/downloads/dwebpro6.8.26.exe...
dwebpro 6.8.26 - Directory Traversal / File Disclosure
dWebPro v 6.8.26 ============================================ Remote Directory Tarvelsal && Remote File Disclosure p0c's ============================================ Download : http://www.dwebpro.com/downloads/dwebpro6.8.26.exe ============================================ Autor : Alfons Luja Test...
dWebPro 6.8.26 (DT/FD) Multiple Remote Vulnerabilities
Exploit for windows platform in category remote exploits ====================================================== dWebPro 6.8.26 DT/FD Multiple Remote Vulnerabilities ====================================================== dWebPro v 6.8.26 ============================================ Remote Director...
TLS certificates can be used to execute arbitrary code
When connecting to a TLS-protected website, Opera parses the X.509 certificate. If a site uses a specially crafted Subject Alternative Name in the certificate, it can cause Opera to crash. To inject code, additional means will have to be employed...
TLS certificates can be used to execute arbitrary code – Opera Security Advisories
TLS certificates can be used to execute arbitrary code – Opera Security Advisories OPCOM Team | February 13, 2009 Severity Highly Severe Problem Description When connecting to a TLS-protected website, Opera parses the X.509 certificate. If a site uses a specially crafted Subject Alternative Name ...
PECL Alternative PHP Cache Local 3 - HTML Injection
source: https://www.securityfocus.com/bid/32934/info PECL Alternative PHP Cache is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in...
TmaxSoft JEUS source code leakage
It's possible to access code source by using NTFS alternative streams be adding ::$DATA to filename...
Easy File Sharing Web Server Information Disclosure
The version of Easy File Sharing Web Server that is installed on the remote host fails to restrict access to files via alternative data streams. By passing a specially-crafted request to the web server, an attacker may be able to access privileged information. SPDX-FileCopyrightText: 2008 Justin...
Firefox self signed certificate flaw
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also...
Firefox self signed certificate flaw
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Mozilla-based web browsers, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regard the certificate as also...
w3m Vulnerability of Unauthorized Access to Files or Cookies
Overview w3m fails to properly escape HTML tags in the ALT attribute of an IMG tag, which could allow an attacker to access files or cookies. Impact An remote attacker could access files and cookies. Solution Please refer to the 'Vendor Information' section for official remediation and take...
[SECURITY] Fedora 8 Update: kazehakase-0.5.3-5.fc8
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine. If you want to use WebKit for HTML rendering engine, install "kazehakase-webkit" rpm instead...
PECL 3.0.x - Alternative PHP Cache Extension apc_search_paths() Remote Buffer Overflow
PECL 3.0.x - Alternative PHP Cache Extension apcsearchpaths Remote Buffer Overflow source: https://www.securityfocus.com/bid/28457/info PECL Alternative PHP Cache APC extension is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input...
CVE-2008-1488: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in apc.c in Alternative PHP Cache APC 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename...
