CVE-2008-3667

Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header...

CVE-2008-3667

The CVE-2008-3667 issue affects Maxthon Browser 2.0 and earlier, where a stack-based overflow occurs in processing a long HTTP Content-Type header, enabling remote arbitrary code execution. Root cause: improper handling of the Content-Type header leading to a stack overflow. Affected products: Ma...

KLA10258 ACE vulnerability in Maxthon Browser

A buffer overflow was found in Maxthon Browser. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed HTTP request. Original advisories - Exploitation Public exploits exist for this vulnerability. Related...

CVE-2008-3667: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header...

Maxthon Browser Content-Type缓冲区溢出漏洞

BUGTRAQ ID: 30617 CNCAN ID：CNCAN-2008081108 Maxthon Browser是一款国内非常流行的WEB浏览器。 Maxthon Browser不正确处理Content-Type字段数据，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建包含超长字符串的Content-Type应答提供给Maxthon浏览器解析，可导致触发缓冲区溢出而崩溃，存在执行任意指令可能。 Maxthon Maxthon 1.2.1 Maxthon Maxthon 1.2 Maxthon Maxthon 1.1.39 Maxthon Maxthon 1.6.3.80...

Maxthon Browser 1.x - Content-Type Buffer Overflow

Maxthon Browser 1.x - Content-Type Buffer Overflow source: https://www.securityfocus.com/bid/30617/info Maxthon Browser is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts...

Maxthon Browser 1.x - Content-Type Buffer Overflow

source: https://www.securityfocus.com/bid/30617/info Maxthon Browser is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition...

CVE-2006-6985

Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site,...

CVE-2006-6985

Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site,...

CVE-2006-6985

CVE-2006-6985 affects Maxthon 1.5.6 build 42. a cross-domain information disclosure via an object tag with a data parameter referencing a link on an attacker site, which specifies a Location header pointing to the target site and exposes content through the object’s outerHTML. The root cause is c...

CVE-2006-6985: Undefined Security Weakness

Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site,...

Maxthon Web Browser < 1.3.3 Cross-Domain Dialog Box Spoofing

Binary data 3240.prm...

CVE-2005-0905

Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2searchtext property...

CVE-2005-1090

Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files...

CVE-2005-1091

Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page...

maxthon_arbitrary_read-write.html.txt

var iVuln=null; function checkVuln try if external.readFilemaxsecurityid,"m2bookmark","plugin.ini"!=null pls.innerText='Done!'; alert"Vulnerable!"; showFileContent; window.clearIntervaliVuln; else window.status=''; // Refresh the "max.src" script by setting the source file as the same file...

CVE-2005-1090

CVE-2005-1090 affects Maxthon versions 1.2.0 and 1.2.1. A directory traversal vulnerability exists in the readFile and writeFile API, enabling a remote attacker to read or write arbitrary files. The provided documents describe the vulnerability but do not detail exploitation steps, specific filen...

CVE-2005-1091

Maxthon 1.2.0 and 1.2.1 expose a vulnerability where remote attackers can bypass a security ID and call restricted plugin API functions by crafting a page that includes max.src. The NVD entry CVE-2005-1091 documents this as a cross-page script inclusion issue allowing limited privileges to be use...

CVE-2005-1090

Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files...

CVE-2005-1091

Maxthon 1.2.0 and 1.2.1 allows remote attackers to bypass the security ID and use restricted plugin API functions via script that includes the max.src file into the source page...