Malicious code in csstext (npm)

The package csstext was found to contain malicious code...

MAL-2025-17800 Malicious code in csstext (npm)

The package csstext was found to contain malicious code...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the way Firefox parsed certain web content containing "cssText". A web page containing malicious content could cause firefox to crash or, potentially, execute arbitrary code with the privileges of t...

Microsoft Internet Explorer 5/6 CSSText Bold Font Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/5027/info A problem with Microsoft Internet Explorer may make it possible to deny service to users of the browser. The problem is in the handling of certain types of stylesheet input. It may be possible to crash IE. When ...

FreeBSD : mozilla -- multiple vulnerabilities (a1050b8b-6db3-11e1-8b37-0011856a6e37)

The Mozilla Project reports : MFSA 2012-13 XSS with Drag and Drop and Javascript: URL MFSA 2012-14 SVG issues found with Address Sanitizer MFSA 2012-15 XSS with multiple Content Security Policy headers MFSA 2012-16 Escalation of privilege with Javascript: URL as home page MFSA 2012-17 Crash when...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2012:0387 Updated firefox packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability...

Mozilla: Crash when accessing keyframe cssText after dynamic modification (MFSA 2012-17)

The Cascading Style Sheets CSS implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to cause a denial of service application crash or possibly execute...

Crash when accessing keyframe cssText after dynamic modification — Mozilla

Mozilla community member Daniel Glazman of Disruptive Innovations reported a crash when accessing a keyframe's cssText after dynamic modification. This crash may be potentially exploitable...

RE: Update and comments on the MS02-023 patch, holes still remain

In my comments I wrote that the cssText vulnerability appeared to be patched. After further testing and research I will have to correct myself, as the issue is not patched at all. To sum it up: On February 18, GreyMagic discovered a vulnerability in the cssText property of imported stylesheets...