CVE-2007-2906

Java Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service browser crash via a Thread subclass that calls super.run from its run method...

CVE-2007-2906

Java Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service browser crash via a Thread subclass that calls super.run from its run method...

CVE-2007-2906

CVE-2007-2906 affects Java Embedding Plugin 0.9.6.1. The vulnerability is in a Thread subclass that calls super.run from its run method, which can be exploited remotely to cause a denial of service (browser crash). The available connected records confirm the affected product/version and the root ...

CVE-2007-2906: Undefined Security Weakness

Java Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service browser crash via a Thread subclass that calls super.run from its run method...

Allow embedding multimedia content located on remote servers

Re: CSP-8387 Currently, when embedding multimedia content on Confluence you are restricted to embedding files located on the Confluence server. The page http://confluence.atlassian.com/display/CONF20/Embedding+Multimedia+Content singles out "security reasons" as the reason for this limitation. In...

Multiple RSS applications crosssite scripting

It's possible to embed scripts in RSS content...

CVE-2007-0164

Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing certain bytes of the JPEG image with alternate password information...

Authentication flaw

Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing certain bytes of the JPEG image with alternate password information...

DEBIAN-CVE-2006-4514

Heap-based buffer overflow in the oleinforeadmetabat function in Gnome Structured File library libgsf 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large nummetabat value in an OLE document, which causes the oleinitinfo function to...

Apple QuickTime H.264 Parsing Buffer Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple's QuickTime media player. The specific flaw exists within the parsing of H.264 content. The implicit trust of a user-supplied size value during a memory copy loop allows an attacker to create an...

NTFS file stream with RAR join forces to create free kill Trojan-vulnerability warning-the black bar safety net

Maybe from the title you can know the article probably meant, good! Today I want to talk about is the NTFS file stream how to with WINRAR teamed up with“packers”Trojan. Tip: the flow STREAM is NTFS under the concept, currently only NTFS supports streams. Stream attached to the file exists, can be...

Sun Java Applet 1.x - Invocation Version Specification

source: https://www.securityfocus.com/bid/11757/info Java provides support for dynamic and static versioning when loading applets in the Java plug-in. This means that during the invocation of an applet, a user can request that a particular version of a plug-in be used to run the applet. The featu...

CVE-2003-0223

Cross-site scripting vulnerability XSS in the ASP function responsible for redirection in Microsoft Internet Information Server IIS 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message...

Captaris Infinite WebMail 3.61.5 - HTML Injection

source: https://www.securityfocus.com/bid/6411/info An HTML injection vulnerability has been discovered in Captaris Infinite WebMail. Due to insufficient sanitization of HTML content, it is possible for an attacker to embed malicious script code into HTML email messages. This may allow an attacke...

Macromedia Flash plugin can read local files

.---. .---------- / / ------ / / / ----- ////// ' / --- //// / // : : --- // / / / '-- // //.. ====UU====UU==== '//|| Macromedia Flash plugin can read local files Description : Macromedia Flash Player is the leading rich client for Internet content and applications across the broadest range of...

CVE-2002-0078

Affected software: Microsoft Internet Explorer 5.5 and 6.0. Vulnerability: zone determination flaw allows a script embedded in a cookie to execute in the Local Computer zone, enabling in‑the‑wild commands with the victim’s privileges. Impact: arbitrary commands can run on the target system due to...

CVE-2002-0078

The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability...

CVE-2002-0474

Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag...

SunShop Shopping Cart 1.5/2.x - User-Embedded Scripting

source: https://www.securityfocus.com/bid/4506/info SunShop is commercial web store software. It is written in PHP, and will run on most Unix and Linux operating systems as well as Microsoft Windows. SunShop allows attackers to embed arbitrary script code into form fields. This may enable a remot...

guninski-53.txt

Georgi Guninski security advisory 53, 2002 More Office XP problems Systems affected: Office XP Risk: High Date: 31 March 2002 Legal Notice: This Advisory is Copyright c 2002 Georgi Guninski. You may distribute it unmodified. You may not modify it and distribute it or distribute parts of it withou...