9932 matches found
Apple Safari 3.2.x - XML External Entity Local File Theft
Safari prior to version 4 may permit an evil web page to steal files from the local system. This is accomplished by mounting an XXE attack against the parsing of the XSL XML. This is best explained with a sample evil XSL file which includes a DTD that attempts the XXE attack: Below you should see...
WebKit - XML External Entity Information Disclosure
source: https://www.securityfocus.com/bid/35321/info WebKit is prone to a remote information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. NOTE: This issue was previously covered in BID 35260 Apple Safari Prior to 4.0...
Xxe
The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity XXE attacks and cause a denial of service or acces...
CVE-2008-0628
The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity XXE attacks and cause a denial of service or acces...
CVE-2008-0628
CVE-2008-0628 affects Sun Java Runtime Environment (JRE/JDK) 6 Update 3 and earlier. The XML parsing code processes external entity references even when the “external general entities” property is false, enabling an XXE attack that can cause denial of service or allow access to restricted resourc...
Adobe Acrobat Reader local files access
By using XML External Entity document script can access local files and have them sent to remote site...
CVE-2005-1306
The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulnerability."...
PT-2005-2309 · Adobe · Reader +1
Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 7.0 through 7.0.1 Description: The issue allows remote attackers to determine the existence of files via Javascript containing XML script. This is related to the XML External Entity vulnerability...
Security Update for Microsoft Visual Studio 2005 Service Pack 1 XML Editor (KB2251481)
A security issue has been identified leading to an XXE Xml eXternal Entity vulnerability. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...
Security Update for Microsoft Visual Studio 2005 Service Pack 1 XML Editor (KB2251481)
A security issue has been identified leading to an XXE Xml eXternal Entity vulnerability. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...
Security Update for Microsoft Visual Studio 2010 XML Editor (KB2251489)
A security issue has been identified leading to an XXE Xml eXternal Entity vulnerability. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...
