Mozilla Foundation Security Advisory 2008-43

Mozilla Foundation Security Advisory 2008-43 Title: BOM characters, low surrogates stripped from JavaScript before execution Impact: Moderate Announced: September 23, 2008 Reporter: Dave Reed, Chris Weber, Gareth Heyes Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.2 Firefox...

Cross site scripting

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via byte order mark BOM characters that are removed from JavaScript code before...

USN-645-1: Firefox and xulrunner vulnerabilities

Justin Schuh, Tom Cross and Peter Williams discovered errors in the Firefox URL parsing routines. If a user were tricked into opening a crafted hyperlink, an attacker could overflow a stack buffer and execute arbitrary code. CVE-2008-0016 It was discovered that the same-origin check in Firefox...

Mozilla BOM characters stripped from JavaScript before execution

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via byte order mark BOM characters that are removed from JavaScript code before...

Mozilla BOM characters stripped from JavaScript before execution

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow remote attackers to bypass cross-site scripting XSS protection mechanisms and conduct XSS attacks via byte order mark BOM characters that are removed from JavaScript code before...

BOM characters, low surrogates stripped from JavaScript before execution — Mozilla

Microsoft developer Dave Reed reported that certain BOM characters are stripped from JavaScript code before it is executed. This can lead to code, which would otherwise be treated as part of a quoted string, to be executed. The issue could potentially be used by an attacker to bypass or evade...

Ubuntu 5.04 / 5.10 : firefox, mozilla-firefox vulnerabilities (USN-296-2)

USN-296-1 fixed several vulnerabilities in Firefox for the Ubuntu 6.06 LTS release. This update provides the corresponding fixes for Ubuntu 5.04 and Ubuntu 5.10. For reference, these are the details of the original USN : Jonas Sicking discovered that under some circumstances persisted XUL...

CVE-2007-0117

DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials BOM files, which allows attackers to gain privileges via a BOM file under /Library/Receipts/, which triggers arbitrary file permission changes upon execution of a diskutil...

Design/Logic Flaw

DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials BOM files, which allows attackers to gain privileges via a BOM file under /Library/Receipts/, which triggers arbitrary file permission changes upon execution of a diskutil...

CVE-2007-0117

DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials BOM files, which allows attackers to gain privileges via a BOM file under /Library/Receipts/, which triggers arbitrary file permission changes upon execution of a diskutil...

Mac OS X 10.4.8 DiskManagement BOM Local Privilege Escalation Exploit

No description provided by source. !/usr/bin/ruby c 2006 LMH lmh at info-pull.com Kevin Finisterre kflists at digitalmunition.com Thanks to The French Connection for bringing this in-the-wild 0-day to our attention. If /tmp/ps2 exists on your system, you've been pwned already...

Mac OS X 10.4.8 DiskManagement BOM (cron) Privilege Escalation Exploit

No description provided by source. !/usr/bin/ruby c 2006 LMH lmh at info-pull.com code from the other exploit, porting Kevin Finisterre kflists at digitalmunition.com crontab rock and roll Second exploit for MOAB-05-01-2007, uses crontab. much more simple than the other one...

MOAB-05-01-2007: Apple DiskManagement BOM Local Privilege Escalation Vulnerability

Summary Apple DiskManagement.framework is the back-end for the ' diskutil' tool, used to perform disk/file system maintenance tasks. One of these tasks, permissions repair, involves the usage of BOM Bill Of Materials files, which declare the default file permissions and owner among other...

Apple Mac OSX 10.4.8 - DiskManagement BOM cron Local Privilege Escalation

Apple Mac OSX 10.4.8 - DiskManagement BOM cron Local Privilege Escalation !/usr/bin/ruby c 2006 LMH code from the other exploit, porting Kevin Finisterre crontab rock and roll Second exploit for MOAB-05-01-2007, uses crontab. much more simple than the other one. And works like a charm. require...

Mac OS X 10.4.8 DiskManagement BOM (cron) Privilege Escalation Exploit

Exploit for macOS platform in category local exploits ====================================================================== Mac OS X 10.4.8 DiskManagement BOM cron Privilege Escalation Exploit ====================================================================== !/usr/bin/ruby c 2006 LMH code...

Apple Mac OSX 10.4.8 - DiskManagement BOM Privilege Escalation

!/usr/bin/ruby c 2006 LMH Kevin Finisterre Thanks to The French Connection for bringing this in-the-wild 0-day to our attention. If /tmp/ps2 exists on your system, you've been pwned already. Thanks to the original authors of the exploit 'meow'. You know who you are. "They did it for the lulz" - A...

Apple Mac OSX 10.4.8 - DiskManagement BOM 'cron' Local Privilege Escalation

!/usr/bin/ruby c 2006 LMH code from the other exploit, porting Kevin Finisterre crontab rock and roll Second exploit for MOAB-05-01-2007, uses crontab. much more simple than the other one. And works like a charm. require 'fileutils' EVILCOMMANDS = "rm...

CVE-2006-3497

Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Zip archive...

CVE-2006-3497

CVE-2006-3497 : A memory corruption vulnerability in Mac OS X’s Bom caused by the compression state handling of ZIP archives. A crafted ZIP file could crash the application or allow arbitrary code execution with the user’s privileges. Affected systems include Mac OS X 10.3.9 and 10.4.7. Remediati...

CVE-2006-3497

Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Zip archive...