15 matches found
EUVD-2013-3880
Malware in sbrugna...
CVE-2025-0080
In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0080
Google Android is affected by an elevation of privilege vulnerability where an attacker can perform a tapjacking/overlay attack to overlay the installation confirmation dialog in multiple locations. This flaw allows for a local escalation of privilege without requiring additional execution privil...
CVE-2020-0015
In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
SUSE CVE-2005-0590
The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real...
OTRS Install Dialog Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2017-018 Product: OTRS Manufacturer: OTRS Affected Versions: OTRS 5.0.x, OTRS 4.0.x, OTRS 3.3.x Fixed Versions: OTRS 5.0.20, OTRS 4.0.24, OTRS 3.3.17 Tested Versions: 5.0.19 Vulnerability Type: Access to Installation Dialog Risk...
Mozilla Firefox Security Bypass Vulnerability July-11 (Windows)
The host is installed with Mozilla Firefox and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmozillafirefoxsecbypassvulnwinjul11.nasl 7029 2017-08-31 11:51:40Z teissa $ Mozilla Firefox Security Bypass Vulnerability July-11 Windows Authors: Sooraj KS Copyright:...
Mozilla Firefox Security Bypass Vulnerability (Jul 2011) - Windows
Mozilla Firefox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-2370
Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a 1 add-on or 2 theme via unspecified vectors...
CVE-2011-2370
Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a 1 add-on or 2 theme via unspecified vectors...
CVE-2011-2370: Undefined Security Weakness
Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a 1 add-on or 2 theme via unspecified vectors...
Ubuntu Update for firefox USN-1157-1
Ubuntu Update for Linux kernel vulnerabilities USN-1157-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11571.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for firefox USN-1157-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
CVE-2011-2370
Mozilla Firefox before 5.0 does not properly enforce the whitelist for the xpinstall functionality, which allows remote attackers to trigger an installation dialog for a 1 add-on or 2 theme via unspecified vectors...
Ubuntu: Security Advisory (USN-1157-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2011-3809
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 5.0 Description The issue is related to the xpinstall functionality in Mozilla Firefox, where the whitelist is not properly enforced. This allows remote attackers to trigger an installation dialog for a 1 add-...