JVN#28011334 Opera bookmark function vulnerability

Impact An user cannot start Opera Web Browser because it crashes during startup. Solution Products Affected Opera for Windows, earlier than version 8.51 Opera for MacOS, earlier than version 8.51...

CVE-2005-1212

Buffer overflow in Microsoft Step-by-Step Interactive Training orun32.exe allows remote attackers to execute arbitrary code via a bookmark link file .cbo, cbl, or .cbm extension with a long User field...

Microsoft Step-By-Step Interactive Training Bookmark Link Buffer Overflow Vulnerability

Description Microsoft Step-By-Step Interactive Training is prone to a buffer overflow vulnerability. This is due to a boundary condition error related to validation of data in bookmark link files. As bookmark link files may originate from an external source, this issue may be remotely exploitable...

CVE-2005-0150

Firefox before 1.0 allows the user to store a 1 javascript: or 2 data: URLs as a Livefeed bookmark, then executes it in the security context of the currently loaded page when the user later accesses the bookmark, which could allow remote attackers to execute arbitrary code...

CVE-2005-1045

OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark...

OpenText FirstClass client code execution

Internet Bokkmark can point to UNC resource...

IE bookmark 'clever' feature not so clever after all

short: type the name of one of your bookmarksfavorites in the addressfield in IE, and IE will execute the bookmark. bit longer: its trivial to trick a user into accepting a bookmark for a popular site, uh, lets say www.hotmail.com .. or placing it yourself. effect: users wont be able to access...

Linux news 28.06.00

Linux Kernel 2.2.17pre9 Вышел очередной пререлиз нового стабильного ядра Linux - Linux Kernel 2.2.17. Подробнее: http://www.cs.helsinki.fi/linux/linux-kernel/2000-26/0205.html Linux kernel 2.4.0-test2-ac2 Вышло новое тестовое ядро из серии Linux kernel 2.4.0-test2-acXX - Linux kernel...

ie5_vulnerabilities.txt

Subject: IE 5.0 security vulnerabilities - ImportExportFavorites - at least creating and overwriting files, probably executing programs To: [email protected] Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer...

msie.5.0.bookmark.txt

http://www.wired.com/news/printversion/technology/story/19160.html?wnpg=all Another Privacy Hole in IE 5.0? by Chris Oakes 3:00 a.m. 16.Apr.99.PDT An obscure feature in Microsoft's Internet Explorer 5.0 Web browser informs Web sites when users bookmark their pages. The feature was discovered duri...