IE 5.x-6.0 allows executing arbitrary programs using showHelp()

IE 5.x-6.0 allows executing arbitrary programs using showHelp =============================================================== Title: IE 5.x-6.0 allows executing arbitrary programs using showHelp Date: Monday, December 29, 2003 Software: IE 5.x, 6.0 Vendor: Microsoft Corp. Patch: N/A Author: Arman...

Microsoft Outlook Express MHTML Forced File Execution Vulnerability

Description A vulnerability has been discovered in Microsoft Outlook Express when handling MHTML file and res URIs that could lead to an unexpected file being downloaded and executed. The problem occurs due to the component failing to securely handle MHTML file URIs that reference a non-existent...

Microsoft Internet Explorer 6 - Codebase Double Backslash Local Zone File Execution

Microsoft Internet Explorer 6 - Codebase Double Backslash Local Zone File Execution source: https://www.securityfocus.com/bid/10344/info A vulnerability has been reported that may potentially permit HTML documents to gain unauthorized access to local resources by using specific syntax when...

Microsoft Outlook Express 6.0 - .MHTML Forced File Execution (1)

Microsoft Outlook Express 6.0 - .MHTML Forced File Execution 1 source: https://www.securityfocus.com/bid/9105/info A vulnerability has been discovered in Microsoft Outlook Express when handling MHTML file and res URIs that could lead to an unexpected file being downloaded and executed. The proble...

Microsoft Internet Explorer crossite scripting

Few vulnerabilities allow scripting in local zone...

Opera Web Browser 7 - IFRAME Zone Restriction Bypass

Opera Web Browser 7 - IFRAME Zone Restriction Bypass source: https://www.securityfocus.com/bid/8887/info A flaw in the Opera web browsers security model has been discovered that could allow an attacker to access a users filesystem within the Local Zone. The problem occurs when handling malformed...

Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location

Macromedia Flash Player 6.0.x - Flash Cookie Predictable File Location source: https://www.securityfocus.com/bid/8900/info Macromedia Flash Player is reported to store Flash cookies .sol files in a predictable location on client systems. Other attacks are possible given the ability to store conte...

Microsoft Internet Explorer 6 - ADODB.Stream Object File Installation

source: https://www.securityfocus.com/bid/10514/info Microsoft Internet Explorer is prone to a security weakness that may permit malicious HTML documents to create or overwrite files on a victim file system when interpreted from the Local Zone or other Security Zones with relaxed security...

Microsoft Internet Explorer 6 - ADODB.Stream Object File Installation

Microsoft Internet Explorer 6 - ADODB.Stream Object File Installation source: https://www.securityfocus.com/bid/10514/info Microsoft Internet Explorer is prone to a security weakness that may permit malicious HTML documents to create or overwrite files on a victim file system when interpreted fro...

Microsoft Internet Explorer ADODB.Stream Object File Installation Weakness

Description Microsoft Internet Explorer is prone to a security weakness that may permit malicious HTML documents to create or overwrite files on a victim file system when interpreted from the Local Zone or other Security Zones with relaxed security restrictions, such as the Intranet Zone. This...

gm014-ie.txt

GreyMagic Security Advisory GM014-IE ===================================== By GreyMagic Software, Israel. 17 Jun 2003. Available in HTML format at http://security.greymagic.com/adv/gm014-ie/. Topic: Script Injection to Custom HTTP Errors in Local Zone. Discovery date: 18 Feb 2003. Affected...

KaZaA - Bad Zone

To follow up my mid Oct post: KaZaA is still launching ads in the local zone. KaZaA was contacted 6 Jan 03 via their bug report page. "Pop-up ads are being spawned from the local hard disk. This puts them in the local zone. Scripts running in this zone can be harmful." I am now awaiting their...

KaZaA crossite access

All advirtizing is executed in local zone...

Internet Explorer modal dialog style crossite scripting

By using IMG width="0" height="0" style="width: expressionalert;" script may be executed in local zone...

Internet Explorer/Mozilla/Opera local zone script execution via FTP folders

It's possible to script on local securty zone if FTP folder presentation is enabled...

RealONE Player Gold / RealJukebox2 multiple bugs

Buffer overflow and local zone scripting during skin file processing...

IE dot bug - Sandblad advisory #7

Sandblad advisory 7 - ---..---..---..---..---..---..---..---..---..---..---..---..---- Title: IE dot bug updated IE: Remote webpage can script in local zone Date: 2002-05-19 Software: Internet Explorer Patches: MS02-023, MS02-015 issue still not 100 solved Vendor: http://www.microsoft.com/...