57 matches found
CVE-2007-3033
Cross-site scripting XSS vulnerability in Windows Vista Feed Headlines Gadget aka Sidebar RSS Feeds Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zo...
CVE-2007-3033
Cross-site scripting XSS vulnerability in Windows Vista Feed Headlines Gadget aka Sidebar RSS Feeds Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zo...
Adobe SVG Viewer multiple bugs
ActiveX control contains few metods used to access local and remote files, scripting in local zone, crossite scripting...
Multiple Internet Explorer bugs
CSS buffer overflow, local zone scripting, buffer overflow in Install Engine, writing file to any location with drag and drop or scripting in img tag, address bar spoofing, SSL crossite scripting...
Microsoft Internet Explorer (Windows XP SP2) - HTML Help Control Local Zone Bypass
Microsoft Internet Explorer Windows XP SP2 - HTML Help Control Local Zone Bypass // sp2rc.htm // localpage.HHClick; setTimeout"inject.HHClick",100; // writehta.txt // Dim Conn, rs Set Conn = CreateObject"ADODB.Connection" Conn.Open "Driver=Microsoft Text Driver .txt; .csv;" & "Dbq=http://server;"...
Microsoft Internet Explorer (Windows XP SP2) - HTML Help Control Local Zone Bypass
// sp2rc.htm // localpage.HHClick; setTimeout"inject.HHClick",100; // writehta.txt // Dim Conn, rs Set Conn = CreateObject"ADODB.Connection" Conn.Open "Driver=Microsoft Text Driver .txt; .csv;" & "Dbq=http://server;" & "Extensions=asc,csv,tab,txt;" & "Persist Security Info=False" Dim sql sql =...
MS Internet Explorer (<= XP SP2) HTML Help Control Local Zone Bypass
Exploit for unknown platform in category remote exploits ==================================================================== MS Internet Explorer localpage.HHClick; setTimeout"inject.HHClick",100; // writehta.txt /...
Internet Explorer Help ActiveX Control Local Zone Security Restriction Bypass Vulnerability (updated)
I appologize for the previous vulnerability longnamevuln because it was incomplete. After realizing my mistake, longnamevuln looked useless. However, it was just incomplete, not useless. What longnamevuln did was open a local file in the browser window. To execute active content, it needed to be...
Gadu-Gadu, another two bugs
Product: Gadu-Gadu, build 155 and older Vendor: SMS-EXPRESS.COM http://www.gadu-gadu.pl Impact: Script execution in local zone, Remote DoS Severity: High Authors: Blazej Miga [email protected], Jaroslaw Sajko [email protected] Date: 17/12/04 ISSUE Gadu-Gadu is the first Polish instant messenger...
Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities
TITLE : Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities Criticality : Less Critical : WHERE : From remote Requires user interaction IMPACT : Security Bypass System Access Exposure of Sensitive Information SOFTWARE : Microsoft Internet Explorer 6 Tested on :...
Google Toolbar Local zone scripting
By using resource from GoogleToolbar1.dll it's possible to execute scripting in local zone...
VulnCheck KEV: CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...
Two Vulnerabilities in Mozilla may lead to remote compromise
Two Vulnerabilities in Mozilla may lead to remote compromise. =--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--= ---------------------- Vendor Information: ---------------------- Homepage : http://www.mozilla.org Vendor : informed on 11/06/04 Mailed advisory: 13/06/04 Vender Response :...
Media Preview Script Execution Vulnerability
Note: This vulnerability as well as several more can be found at http://www.geryhats.cjb.net Media Preview Script Execution Vulnerability Tested MSDXM.DLL file version 6.4.09.1128 Microsoft Windows 2000 Discussion By using the windows media player control, media can be played in a browser,...
Windows Help Center Dvdupgrade code execution
It's possible to execute any code via local zone scripting...
Microsoft Windows Help And Support Center URI Validation Code Execution Vulnerability
Description Microsoft has reported a vulnerability in the Help and Support Center that is related to how HCP URIs are validated. This issue could reportedly be exploited via a malicious web page or HTML e-mail to execute arbitrary code on a client system. The issue may permit an attacker to injec...
Microsoft Outlook shell characters problem
Shell characters problem allow javacript execution in local zone...
Microsoft Outlook 2002 - Mailto Quoting Zone Bypass
Microsoft Outlook 2002 - Mailto Quoting Zone Bypass source: https://www.securityfocus.com/bid/9827/info Microsoft Outlook is prone to a vulnerability that may permit execution of arbitrary code on client systems. This issue is exposed through Outlook, but will reportedly cause Internet Explorer t...
Microsoft Internet Explorer 5.0.1 - ITS Protocol Zone Bypass (MS04-013)
Microsoft Internet Explorer 5.0.1 - ITS Protocol Zone Bypass MS04-013 source: https://www.securityfocus.com/bid/9658/info Microsoft Internet Explorer has been reported prone to a vulnerability that may permit hostile content to be interpreted in the Local Zone. The issue may be exploited via the...
Microsoft Internet Explorer 5.0.1 - ITS Protocol Zone Bypass (MS04-013)
source: https://www.securityfocus.com/bid/9658/info Microsoft Internet Explorer has been reported prone to a vulnerability that may permit hostile content to be interpreted in the Local Zone. The issue may be exploited via the ITS InfoTech Storage Protocol URI handler. It is possible to use this...