Microsoft Internet Explorer Select元素内存破坏漏洞(MS11-081)

BUGTRAQ ID: 49964 CVE ID: CVE-2011-1999 Microsoft Internet Explorer简称MSIE，是微软公司推出的一款网页浏览器。 IE在处理Select元素时在实现上存在内存破坏漏洞，远程攻击者可利用此漏洞远程代码，导致拒绝服务。 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 临时解决方法：...

Microsoft IE Option元素内存破坏漏洞(MS11-081)

BUGTRAQ ID: 49961 CVE ID: CVE-2011-1996 Microsoft Internet Explorer简称MSIE，是微软公司推出的一款网页浏览器。 IE在处理Option元素时在实现上存在内存破坏漏洞，当IE访问已删除对象时，远程攻击者可利用此漏洞远程代码或导致拒绝服务。 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 临时解决方法：...

Microsoft Internet Explorer Body元素内存破坏漏洞(MS11-081)

BUGTRAQ ID: 49965 CVE ID: CVE-2011-2000 Microsoft Internet Explorer简称MSIE，是微软公司推出的一款网页浏览器。 IE在处理Body元素时在实现上存在内存破坏漏洞，远程攻击者可利用此漏洞远程代码或导致拒绝服务。 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 临时解决方法：...

CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection

$Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ACDSee FotoSlate PLP File id Parameter Overflow

This module exploits a buffer overflow in ACDSee FotoSlate 4.0 Build 146 via a specially crafted id parameter in a String element. When viewing a malicious PLP file with the ACDSee FotoSlate product, a remote attacker could overflow a buffer and execute arbitrary code. This exploit has been teste...

Microsoft Internet Explorer Time Element Memory Corruption

Added: 09/06/2011 CVE: CVE-2011-1255 BID: 48206 OSVDB: 72947 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. The HTML+Time Timed Interactive Multimedia Extensions helps to add timed, animated, multimedia content to HTML documents. Problem...

SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 5057)

Mozilla Firefox was updated to version 3.6.20. It fixes bugs and security issues. Following security issues were fixed: Mozilla Foundation Security Advisory 2011-30 - MFSA 2011-30 - Miscellaneous memory safety hazards Mozilla developers and community members identified and fixed several memory...

CentOS Update for firefox CESA-2011:1164 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Microsoft Internet Explorer 9 STYLE Object Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Mozilla Firefox 3.6.16 mChannel Use After Free Exploit

require 'msf/core' class Metasploit3 HttpClients::FF, :uaminver = "3.6.16", :uamaxver = "3.6.16", :osname = OperatingSystems::WINDOWS, :javascript = true, :rank = NormalRanking, def initializeinfo = superupdateinfoinfo, 'Name' = 'Mozilla Firefox 3.6.16 mChannel use after free Exploit',...

CVE-2011-2786

Google Chrome before 13.0.782.107 does not ensure that the speech-input bubble is shown on the product's screen, which might make it easier for remote attackers to make audio recordings via a crafted web page containing an INPUT element...

PT-2011-4089

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description The issue concerns a problem where the speech-input bubble is not properly displayed on the screen, potentially making it easier for remote attackers to make unauthorized audio recording...

Novell File Reporter Engine 'RECORD' Processing Buffer Overflow Vulnerability

This host is installed with Novell File Reporter engine and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellfilereporterenginebofvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Novell File Reporter Engine 'RECORD' Processing Buffer Overflow Vulnerability Authors...

CVE-2011-2220

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...

Stack overflow

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...

Cross site scripting

Cross-site scripting XSS vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message...

CVE-2011-2220

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...

PT-2011-3558

Name of the Vulnerable Software and Affected Versions SquirrelMail versions prior to 1.4.22 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message. Recommendations For versions prior to...

CVE-2011-2023: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in functions/mime.php in SquirrelMail before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via a crafted STYLE element in an e-mail message...

CVE-2011-2220: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in NFREngine.exe in Novell File Reporter Engine before 1.0.2.53, as used in Novell File Reporter and other products, allows remote attackers to execute arbitrary code via a crafted RECORD element...