FreeBSD : opera -- multiple vulnerabilities (ad4a00fa-0157-11dd-8bd3-001372ae3ab9)

Opera Software reports of multiple security issues in Opera. All of them can lead to arbitrary code execution. Details are as the following : - Newsfeed prompt can cause Opera to execute arbitrary code - Resized canvas patterns can cause Opera to execute arbitrary code %NASLMINLEVEL 70300 C Tenab...

Immunity Canvas: FLASH_DUKE

Name| flashduke ---|--- CVE| CVE-2007-0071 Exploit Pack| CANVAS Description| Adobe Flash Player DefineSceneAndFrameLabelData Tag Overflow Notes| CVE Name: CVE-2007-0071 VENDOR: Adobe VersionsAffected: Adobe Flash Player 9.0.115.0 and below Repeatability: References:...

Opera Web浏览器9.27版本修复多个内存破坏漏洞

BUGTRAQ ID: 28585 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的实现上存在多个安全漏洞，远程攻击者可能利用这些漏洞控制用户系统。 当Opera遇到网页上的newsfeed源时，就会提示用户添加该源为newsfeed。恶意脚本可以控制feed源，导致Opera由于错误的内存访问而出现崩溃或执行任意指令。 HTML CANVAS单元可使用度量图形作为图样。如果精心控制了图形的度量的话，脚本就会导致Opera由于内存破坏而出现崩溃或执行任意代码。 Opera Software Opera = 9.26 Opera Software -------------...

Immunity Canvas: MS08_025

Name| ms08025 ---|--- CVE| CVE-2008-1084 Exploit Pack| CANVAS Description| Win32k ClientLoadMenu Privilege Escalation Notes| CVE Name: CVE-2008-1084 VENDOR: Microsoft MSADV: MS08-025 Repeatability: One Shot MSRC: http://www.microsoft.com/technet/security/Bulletin/MS08-025.mspx CVS URL:...

Immunity Canvas: JOOMLAOFLQ_INCLUDE

Name| joomlaoflqinclude ---|--- CVE| CVE-2008-1682 Exploit Pack| CANVAS Description| Joomla FlashQuiz 1.0.2 Remote File Inclusion Notes| CVE Name: CVE-2008-1682 VENDOR: Joomla Repeatability: Infinite References: http://www.securityfocus.com/bid/28574 CVE Url: https://vulners.com/cve/CVE-2008-1682...

opera -- multiple vulnerabilities

Opera Software reports of multiple security issues in Opera. All of them can lead to arbitrary code execution. Details are as the following: Newsfeed prompt can cause Opera to execute arbitrary code Resized canvas patterns can cause Opera to execute arbitrary code...

Immunity Canvas: JAFCMS_INCLUDE

Name| jafcmsinclude ---|--- CVE| CVE-2008-1609 Exploit Pack| CANVAS Description| Jaf-CMS Remote File include Notes| CVE Name: CVE-2008-1609 VENDOR: Jaf-CMS Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/jafcms-rfi.txt.html CVE Url: https://vulners.com/cve/CVE-2008-160...

Immunity Canvas: JOOMLACP_INCLUDE

Name| joomlacpinclude ---|--- CVE| CVE-2008-1505 Exploit Pack| CANVAS Description| Joomla Component custompages Remote File Inclusion Notes| CVE Name: CVE-2008-1505 VENDOR: Joomla Repeatability: Infinite References: http://www.securityfocus.com/bid/28409 CVE Url:...

Immunity Canvas: FUZZYLIME_INCLUDE

Name| fuzzylimeinclude ---|--- CVE| CVE-2008-1405 Exploit Pack| CANVAS Description| fuzzylime cms = 3.01 Remote File include Notes| CVE Name: CVE-2008-1405 VENDOR: FuzzyLime Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1405...

Immunity Canvas: BARRYVAN_INCLUDE

Name| barryvaninclude ---|--- CVE| CVE-2008-1126 Exploit Pack| CANVAS Description| barryvancompo-0.3 remote file include Notes| CVE Name: CVE-2008-1126 VENDOR: barryvancompo Repeatability: Infinite References: http://securityreason.com/exploitalert/3471 CVE Url:...

Immunity Canvas: GROUPE_INCLUDE

Name| groupeinclude ---|--- CVE| CVE-2008-1074 Exploit Pack| CANVAS Description| GROUP-E 1.6.41 remote file include Notes| CVE Name: CVE-2008-1074 VENDOR: Group-E Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/groupe-rfi.txt.html CVE Url:...

Immunity Canvas: QGS_INCLUDE

Name| qgsinclude ---|--- CVE| CVE-2008-1069 Exploit Pack| CANVAS Description| Quantum Game Library 0.7.2c remote file include Notes| CVE Name: CVE-2008-1069 VENDOR: Quantum Game Library Repeatability: Infinite References: http://www.securityfocus.com/bid/27945 CVE Url:...

Immunity Canvas: PHPQLADMIN_INCLUDE

Name| phpqladmininclude ---|--- CVE| CVE-2008-1067 Exploit Pack| CANVAS Description| phpQLAdmin 2.2.7 Remote File Include Notes| CVE Name: CVE-2008-1067 VENDOR: phpQLAdmin.com Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/phpqladmin-rfi.txt.html CVE Url:...

Immunity Canvas: WPSNIPLETS_RFI

Name| wpsnipletsrfi ---|--- CVE| CVE-2008-1059 Exploit Pack| CANVAS Description| WordPress Plugin Sniplets 1.1.2 Remote File Include Notes| CVE Name: CVE-2008-1059 VENDOR: WordPress Repeatability: Infinite CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1059 References: None CVSS: 7.5...

Immunity Canvas: WPSNIPLETS_EXEC

Name| wpsnipletsexec ---|--- CVE| CVE-2008-1060 Exploit Pack| CANVAS Description| Wordpress Plugin Sniplets 1.1.2 Remote Code Execution exploict Notes| CVE Name: CVE-2008-1060 VENDOR: WordPress Repeatability: Infinite References: http://seclists.org/bugtraq/2008/Feb/0402.html CVE Url:...

Immunity Canvas: QUINSONNAS_INCLUDE

Name| quinsonnasinclude ---|--- CVE| CVE-2008-1046 Exploit Pack| CANVAS Description| Quinsonnas Mail Checker 1.55 Remote File Inclusion Notes| CVE Name: CVE-2008-1046 VENDOR: Quinsonnas Repeatability: Infinite References: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1046 CVE Url:...

Immunity Canvas: PHPUSERBASE_INCLUDE

Name| phpuserbaseinclude ---|--- CVE| CVE-2008-1043 Exploit Pack| CANVAS Description| phpUserBase Remote File Include Notes| CVE Name: CVE-2008-1043 VENDOR: phpuserbase Repeatability: Infinite References: http://www.milw0rm.com/exploits/5180 CVE Url:...

Mozilla Foundation Security Advisory 2008-07

Mozilla Foundation Security Advisory 2008-07 Title: Possible information disclosure in BMP decoder Impact: Moderate Announced: February 19, 2008 Reporter: Gynvael Coldwind // Vexillium Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.12 Thunderbird 2.0.0.12 SeaMonkey 1.1.8...

Immunity Canvas: LOOKSTRIKE_INCLUDE

Name| lookstrikeinclude ---|--- CVE| CVE-2008-0803 Exploit Pack| CANVAS Description| LookStrike Lan Manager v0.9 Remote File Include Notes| CVE Name: CVE-2008-0803 VENDOR: LookStrike Repeatability: Infinite References: http://securityreason.com/exploitalert/3398 CVE Url:...

Immunity Canvas: NWSPOOL_C

Name| nwspoolc ---|--- CVE| CVE-2008-0639 Exploit Pack| CANVAS Description| Novell Netware Client for Windows Notes| CVE Name: CVE-2008-0639 VENDOR: Novell Notes: Use the setthreadtoken module to revert back to LocalSystem once the exploitation is successful Platforms Tested: References:...