Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a 1 location or 2 location.href property, related to incorrect determination of t...

CVE-2008-2948

CVE-2008-2948 is documented as a cross-domain vulnerability in Internet Explorer, described as a duplicate/related attack to CVE-2008-2947. The connected sources indicate it affects IE, involves window location cross-domain handling via the Object data type, and is tied to the same family of vuln...

CVE-2008-2947

Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a 1 location or 2 location.href property, related to incorrect determination of t...

CVE-2008-2949

CVE-2008-2949 describes a cross-domain vulnerability in Internet Explorer 6 and 7 where the attacker could manipulate the window.location object using a String to observe events across domains. The root cause is the incorrect determination of the origin of web script, enabling potential viewing o...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update

Red Hat Network Satellite Server version 4.2.3 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components. This update has been rated as having moderate security impact by the Red Hat Security Response Team. This...

Microsoft Internet Explorer 7/8 Beta 1 - Frame Location Cross Domain Security Bypass

source: https://www.securityfocus.com/bid/29986/info Microsoft Internet Explorer is prone to a cross-domain scripting security-bypass vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to change the location of a frame from a...

Microsoft Internet Explorer multiple security vulnerabilities

Crossite scripting, information leak...

Microsoft Internet Explorer DOM Object substringData() Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of various Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the substringData method...

Information disclosure

Microsoft Internet Explorer 7 can save encrypted pages in the cache even when the DisableCachingOfSSLPages registry setting is enabled, which might allow local users to obtain sensitive information...

Microsoft Internet Explorer 2 - UTF-7 HTTP Response Handling

Microsoft Internet Explorer 2 - UTF-7 HTTP Response Handling source: https://www.securityfocus.com/bid/29112/info Microsoft Internet Explorer is prone to a weakness that can facilitate cross-site scripting attacks. The issue occurs because the application fails to sufficiently sanitize...

Microsoft IE 7 popup window address bar URI spoofing vulnerability-vulnerability warning-the black bar safety net

| Affected versions: Microsoft Internet Explorer 7.0 --- Description: BUGTRAQ ID: 2 8 4 9 8 Internet Explorer is Microsoft's release of the very popular WEB browser. If the user use IE to visit a malicious Web page while the pop-up window's address bar may be any address and the window theme to a...

Microsoft Internet Explorer memory corruption

Memory corruption on datasream processing...

CVE-2008-1086

The HxTocCtrl ActiveX control hxvz.dll, as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption...

Microsoft Internet Explorer Data Stream Handling Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because it fails to adequately handle certain user-supplied data. Attackers can leverage this issue to execute arbitrary code with the privileges of the application. Successful exploits will compromise...

Internet Explorer ActiveX Control hxvz.dll Memory Corruption (MS08-023; CVE-2008-1086)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The flaw is located in the ActiveX Controls of the component hxvz.dll. The vulnerability is due to a memory corruption error in Microsoft Internet Explorer. A remote attacker could exploit this issue by...

Microsoft Internet Explorer 7 - Header Handling 'res://' Information Disclosure

source: https://www.securityfocus.com/bid/28667/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain potentially sensitive information from the local computer. Information obtained may aid in further attacks. This issue...

Microsoft Internet Explorer 8 Beta 1 - 'ieframe.dll' Script Injection

source: https://www.securityfocus.com/bid/28581/info Microsoft Internet Explorer is prone to a script-injection vulnerability when handling specially crafted requests to 'acrerror.htm' via the 'res://' protocol. The file resides in the 'ieframe.dll' dynamic-link library. An attacker may leverage...

Microsoft Internet Explorer 8 Beta 1 - ieframe.dll Script Injection

Microsoft Internet Explorer 8 Beta 1 - ieframe.dll Script Injection source: https://www.securityfocus.com/bid/28581/info Microsoft Internet Explorer is prone to a script-injection vulnerability when handling specially crafted requests to 'acrerror.htm' via the 'res://' protocol. The file resides ...

Microsoft Internet Explorer 8 Beta 1 - XDR Prototype Hijacking Denial of Service

source: https://www.securityfocus.com/bid/28580/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted webpage. Successfully exploiting this issue will allow attackers to crash the...

sitekiosk-pwn.txt

Proviso SiteKiosk File Download Vulnerability x Vendor Information: "SiteKiosk is a software for public access internet terminals and lets you turn any computer into a secure multilanguage Internet terminal already 20 different languages included, allowing the user to access the Internet but...