DSA-1988-1 qt4-x11 - several vulnerabilities

Bulletin has no description...

ie6 css设置拒绝服务漏洞

No description provided by source. style type="text/css" !-- 问题是css里面设置样式的时候出错了。 css定义的是f:expressionthis.src='about:blank',this.outerHTML=''; 问题应该就是mshtml.dll里 -- /!CDATA/ iframe f:expressionthis.src='about:blank',this.outerHTML=''; f126v:expression !important // /style iframe id=f126 src=test...

Mozilla IFRAME Style Change Handling Code Execution (CVE-2008-1236)

Firefox is an open source web browser developed by Mozilla Foundation. The application is capable of interpreting and rendering many types of Internet content, including various versions of HTML, XML, CSS Cascade Style Sheet, Javascript, various graphic formats, and so on. Firefox is made availab...

Cross-domain data theft with CSS load

CSS can be loaded cross-domain, and in some cases it is be possible to read the data pointed to, leading to the possibility of cross-domain data theft...

CentOS 5 : kdelibs (CESA-2009:1127)

Updated kdelibs packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdelibs packages provide libraries for the K Desktop Environment KDE. A flaw...

LineWeb Local File Inclusion / SQL Injection

LineWeb it's a web-app to manage Lineage 2 private severs, a very known mmorpg, and allows to do action such as: Main Features: - Register - Login - Quick Login Function - Quick statistics function server status, game server status, online players - Statistics login server status, game server...

Microsoft Internet Explorer 8 - CSS 'expression' Remote Denial of Service

source: https://www.securityfocus.com/bid/40487/info Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successfully exploiting this issue will cause the applicati...

CVE-2009-4473: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WorkArea/ContentDesigner/ekformsiframe.aspx in Ektron CMS400.NET 7.6.1.53 and 7.6.6.47, and possibly 7.52 through 7.66sp2, allow remote attackers to inject arbitrary web script or HTML via the 1 css, 2 eca, 3 id, and 4 skin parameters. NOTE: so...

Microsoft IE CSS竞争条件远程代码执行漏洞（MS09-072）

BUGTRAQ ID: 37212 CVE ID: CVE-2009-3673 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 在CSS两个元素之间快速的反复点击切换可能触发竞争条件，导致调用悬浮指针，这可以通过heap spray进一步利用。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 临时解决方法： 将Internet...

Microsoft Internet Explorer CSS Race Condition Code Execution Vulnerability

This vulnerability allows remote attackers to potentially execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists during a race condition...

Apple Safari 'CSS' Buffer Overflow Vulnerability (Dec 2009) - Windows

Apple Safari Web Browser is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

1 0 kind of hung it to the way-vulnerability warning-the black bar safety net

A:The frame hanging horse iframe src=address width=0 height=0/iframe II:the js file hanging horse First, the following code document. write"iframe width='0' height='0' src='address'/iframe"; 保存 为 xxx.js that The JS hung it to the code script language=javascript src=xxx. js/script Three:js...

MS Internet Explorer 'Style' Object Remote Code Execution Vulnerability

This host is missing a critical security update according to Microsoft Bulletin MS09-072. OpenVAS Vulnerability Test $Id: gbmsiestyleobjectremotecodeexecvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Description: MS Internet Explorer 'Style' Object Remote Code Execution Vulnerability Authors: Suj...

MS to Patch Critical IE Zero-Day Flaw

Just two weeks after the release of exploit code for a critical remotely exploitable security hole in its Internet Explorer browser, Microsoft says a fix will be included in this month’s batch of Patch Tuesday updates. Microsoft has already issued an advisory to confirm the severity of the issue,...

Stack overflow

Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service application crash via a long URI value aka url in the Cascading Style Sheets CSS background property...

CVE-2009-4186

The CVE-2009-4186 entry concerns Apple Safari for Windows (Safari 4.0.3) with a CSS-related issue where a long URI in a background property triggers stack consumption, leading to denial of service (application crash). Multiple connected sources corroborate a buffer/stack overflow in the CSS handl...

CVE-2009-4186: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service application crash via a long URI value aka url in the Cascading Style Sheets CSS background property...

CVE-2009-3672

CVE-2009-3672 is a memory-corruption vulnerability in Microsoft Internet Explorer 6/7 related to getElementsByTagName for the STYLE element, with corruption of objects in mshtml.dll when outerHTML is changed. It allows remote code execution and is associated with the MS09-072 bulletin; patches/up...

CVE-2009-4088

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to 1 getjs.php and 2 getcsslocal.php; and include and execute arbitrary local files via the 3 group parameter to...

CVE-2009-4088

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to 1 getjs.php and 2 getcsslocal.php; and include and execute arbitrary local files via the 3 group parameter to...