Ubuntu 9.10 : firefox-3.5, xulrunner-1.9.1 vulnerabilities (USN-896-1)

Several flaws were discovered in the browser engine of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2010-0159 Orlando Barrera II...

One in Every 150 Legitimate Sites Infected by Malware

MOSCOW–The problem of attackers infecting legitimate Web sites with malware that then silently exploits vulnerabilities in users’ browsers reached unprecedented levels in 2009, with 1 in every 150 legitimate sites serving up malware, experts say. Analysts at Kaspersky Lab have been monitoring a...

How to Get Owned in One Easy Step

As 2009 draws to a close, one thing has become clear: The most dangerous piece of software on your PC isn’t a banking Trojan or a bot; it’s your Web browser. The Web browser has become the main focal point of attackers’ attention and the frequency with which new vulnerabilities are found in all o...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:1037-01 Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...

Safari 3.1.1 Multiple Vulnerabilities for windows

I found a number of flaws in the browser Safari 3.1.1. The first is a way to make spoofing "falsify direction". Is that as we all know many browser to put eg [email protected] This attempt to connect to the domain after the @ user and use the first word or letters that we have, this is not today becau...

[Full-disclosure] Assorted browser vulnerabilities

Hello, Will keep it brief. A couple of browser bugs, fresh from the oven, hand crafted with love: 1 Title : MSIE page update race condition CRITICAL Impact : cookie stealing / setting, page hijacking, memory corruption Demo : http://lcamtuf.coredump.cx/ierace/ ...aka the bait & switch...

Internet Explorer Heap Spray Shell Code Execution (MS06-055 MS06-067; CVE-2006-4446; CVE-2006-4777; CVE-2006-4868; CVE-2009-2991)

Heap spraying is a new and increasingly popular technique to exploit vulnerabilities in Internet browsers. Heap spraying is used by attackers to implant a shell code on a target system. Shell code is a piece of executable code that opens a command shell that the attacker can control remotely...

Concurrency-related vulnerabilities in browsers - expect problems

Good morning, "Fame-hungry sociopath torches cars, finds browser flaws WARSAW, Poland AP -- police are on a look out for a local adolescent vandal who continues to terrorize local IT workers in what appears to be a bizzare bid for fame. Larry Seltzer reports from the scene." Well, I just had to d...

Firefox < 1.0.2 Multiple Vulnerabilities

The remote version of Firefox contains various security issues that may allow an attacker to impersonate a website and to trick a user into accepting and executing arbitrary files or to cause a heap overflow in the FireFox process and execute arbitrary code on the remote host. C Tenable Network...

CVE-2004-1483

Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact...

web browsers -- window injection vulnerabilities

A Secunia Research advisory reports: Secunia Research has reported a vulnerability in multiple browsers, which can be exploited by malicious people to spoof the content of websites. The problem is that a website can inject content into another site's window if the target name of the window is...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (2)

source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Java implementation. These issues may allow an attacker to craft a Java...

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities (2)

Opera Web browser 7.54 java implementation - Multiple Vulnerabilities 2 source: https://www.securityfocus.com/bid/11712/info Multiple remote vulnerabilities reportedly affect the Opera Web Browser Java implementation. These issues are due to the insecure proprietary design of the Web browser's Ja...

Multiple web browsers do not properly interpret BASE and FORM elements when displaying URLs in the status bar

Overview Multiple web browsers do not properly display the location of HTML documents in the status bar. An attacker could exploit this behavior to mislead users into revealing sensitive information. Description Web browsers frequently display the Uniform Resource Locator URL in the status bar wh...

Multiple (Almost all) Browsers Tabbed Browsing Vulnerabilities

Exploit for unknown platform in category remote exploits ============================================================== Multiple Almost all Browsers Tabbed Browsing Vulnerabilities ============================================================== Test Your Browser Open the link below in a new tab,...

Multiple browsers tab vulnerabilities

Multiple browsers allow tab spoofing...

Multiple (Almost all) Browsers Tabbed Browsing Vulnerabilities

No description provided by source. bTest Your Browser/bbr br Open the link below in a new tab, then try to type data into form fields on the CitiBank website.br br a href="http://www.citibank.com/" onMouseOver="setInterval'document.myform.userinput.focus;', 10;"Open this Link in New Tab/abr br fo...

The ActiveX and HTML file browsers of the Symantec 4400 Series Clientless VPN Gateway contains various unspecified vulnerabilities

Overview The ActiveX and HTML file browsers in the Symantec Clientless VPN Gateway 4400 Series contain various unspecified vulnerabilities. Description The Symantec Clientless VPN Gateway 4400 Series is a stand-alone security appliance for connecting remote users to a trusted network via a virtua...

Opera < 7.54 location Object Crafted URL Arbitrary Local File Access

The version of Opera on the remote host fails to block write access to the 'location' object. This could allow a user to create a specially crafted URL to overwrite methods within the 'location' object that would execute arbitrary code in a user's browser within the trust relationship between the...

Mozilla Browser 0.9/1.x Cache File - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/10709/info Mozilla Browser is reported prone to multiple vulnerabilities that could eventually allow for code execution on the local computer. These vulnerabilities do not represent a significant threat on their own, however, code execution in the context...