CVE-2008-1241

GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab...

Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the handling of the "by" property...

MS Internet Explorer <= 6.x (IMG / XML elements) Denial of Service

No description provided by source. !-- Discovered by Inge Henriksen [email protected] http://ingehenriksen.blogspot.com/ -- table tr tdIMG align=leftX X X?xml:namespace prefix=v v:X style="HEIGHT:1"/td /tr /table...

tcpdump denial of service

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...

FreeBSD : tikiwiki -- multiple vulnerabilities (20a4eb11-8ea3-11dc-a396-0016179b2dd5)

Secunia reports : Some vulnerabilities have been reported in TikiWiki, which can be exploited by malicious people to conduct cross-site scripting and script insertion attacks and disclose potentially sensitive information. Input passed to the username parameter in tiki-remindpassword.php when...

SonicWall SSL VPN client multiple security vulnerabilities

Multiple vulnerabilities with different ActiveX elements...

tikiwiki -- multiple vulnerabilities

Secunia reports: Some vulnerabilities have been reported in TikiWiki, which can be exploited by malicious people to conduct cross-site scripting and script insertion attacks and disclose potentially sensitive information. Input passed to the username parameter in tiki-remindpassword.php when remi...

Apple Safari 3 for Windows - Protocol Handler Command Injection

source: https://www.securityfocus.com/bid/24434/info Apple Safari for Windows is prone to a protocol handler command-injection vulnerability. Exploiting the issue allows remote attackers to pass arbitrary command-line arguments to any application that can be called through a protocol handler. Thi...

Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit

No description provided by source. / Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D. In french: "buffer overflow a gogo!" The generated .PNG file will work for: -Photoshop CS2 -Photoshop CS3 -Photoshop Elements 5.0 -Corel Pain...

GNU Gnash Flash Player array overflow

Array overflow on large number of SHOWFRAME elements within DEFINESPRITE...

CVE-2007-2500

CVE-2007-2500 affects GNU Gnash 0.7.2 where a large number of SHOWFRAME elements inside a DEFINESPRITE in server/parser/sprite_definition.cpp triggers memory corruption and allows code execution by calling free with an arbitrary address. Public reports (NVD, SUSE, openSUSE NASL) describe memory c...

CVE-2007-2365

CVE-2007-2365 affects Adobe Photoshop CS2/CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9. It is a buffer overflow in PNG handling that allows an attacker to execute arbitrary code via a crafted PNG file. The vulnerability is user-assisted (requires opening a crafted image), with a CVS...

CVE-2007-2365: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file...

Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow

No description provided by source. /\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D...

Code injection

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks...

CVE-2007-1970

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks...

CVE-2007-1970

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks...

CVE-2006-7179

ieee80211input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement Information Elements CSA IEs, which allows remote attackers to cause a denial of service loss of communication via a Channel Switch Count less than or equal to one, triggering a channel change...

CVE-2007-1218

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...

DEBIAN-CVE-2007-1218

Off-by-one buffer overflow in the parseelements function in the 802.11 printer code print-80211.c for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service crash via a crafted 802.11 frame. NOTE: this was originally referred to as heap-based, but it might be stack-based...