Ubuntu 5.10 / 6.06 LTS : firefox regression (USN-398-4)

USN-398-2 fixed vulnerabilities in Firefox 1.5. However, when auto-filling saved-password login forms without a username field, Firefox would crash. This update fixes the problem. We apologize for the inconvenience. Various flaws have been reported that allow an attacker to execute arbitrary code...

AskJeeves Toolbar 4.0.2.53 activex Remote Buffer Overflow Exploit

No description provided by source. html SCRIPT language="javascript" // This is new technique I invent call 'heap fill attack' var str0ke = 0x0d0d0d0d; var sucks = unescape // Launch the system calculator 100 times because what else?...

askjeeves-overflow.txt

// This is new technique I invent call 'heap fill attack' var str0ke = 0x0d0d0d0d; var sucks = unescape // Launch the system calculator 100 times because what else? // This code currently not work on Solaris/Sparc "%u9090%u9090%uE8FC%u0044%u0000%u458B%u8B3C%u057C%u0178%u8BEF%u184F%u5F8B%u0120" +...

AskJeeves Toolbar 4.0.2.53 activex Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= AskJeeves Toolbar 4.0.2.53 activex Remote Buffer Overflow Exploit ================================================================= // This is new technique I invent call 'he...

Ask.comAskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow

Ask.comAskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow // This is new technique I invent call 'heap fill attack' var str0ke = 0x0d0d0d0d; var sucks = unescape // Launch the system calculator 100 times because what else? // This code currently not work on Solaris/Sparc...

Ask.com/AskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow

// This is new technique I invent call 'heap fill attack' var str0ke = 0x0d0d0d0d; var sucks = unescape // Launch the system calculator 100 times because what else? // This code currently not work on Solaris/Sparc "%u9090%u9090%uE8FC%u0044%u0000%u458B%u8B3C%u057C%u0178%u8BEF%u184F%u5F8B%u0120" +...

CVE-2007-3703

Stack-based buffer overflow in a certain ActiveX control in sasatl.dll 1.5.0.531 in Zenturi Program Checker ProgramChecker Pro allows remote attackers to execute arbitrary code via a long argument to the Fill method. NOTE: this is probably a different issue than CVE-2007-2987...

Zenturi Program Checker Pro ActiveX buffer overflow

Buffer overflow in Fill method...

Vmare workstation guest isolation weaknesses (clipboard transfer)

Suggested severity level: Low Type of Risk: isolation failure, information leakage, infection path Affected Software: VMware Workstation, version 5.5.3 build 34685 including installation of "VMware tools" of the same version on the guest OS. Other products by the vendor using the same isolation...

CVE-2006-4105

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...

CVE-2006-4105

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...

CVE-2006-4105

CVE-2006-4105 concerns a Cross-site Scripting (XSS) vulnerability in Fill Threads Database (FTD) version 3.7.3. The issue allows remote attackers to inject arbitrary web script or HTML through two vectors: the search field and an e-mail message. The provided documents confirm the affected product...

[SECURITY] [DSA 794-1] New polygen packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 794-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2005 http://www.debian.org/security/faq -...

CVE-2005-0589

The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability...

CVE-2005-0589

The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability...

security flaw

The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability...

CVE-2005-0589

CVE-2005-0589 affects Firefox before 1.0.1. The Form Fill feature can allow remote attackers to steal potentially sensitive information by monitoring values generated by the autocomplete capability. This is described in the NVD entry and echoed by multiple advisories (e.g., RHSA-2005:176, GLSA-20...

CVE-2005-0589

The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that monitors the values that are generated by the autocomplete capability...

security flaw

lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors...

OmniHTTPd visadmin.exe Malformed URL DoS

It is possible to fill the hard disk of a server running OmniHTTPd by issuing the request : http://omni.server/cgi-bin/visadmin.exe?user=guest This allows an attacker to crash your web server. This script checks for the presence of the faulty CGI, but does not execute it. %NASLMINLEVEL 70300 C...