CVE-2005-2830: Undefined Security Weakness

Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."...

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities Lets IE crash pre white-space:normal; milw0rm.com 2005-12-14...

Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities

Lets IE crash pre white-space:normal; milw0rm.com 2005-12-14...

Microsoft Internet Explorer HTTPS Proxy Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information disclosure vulnerability when using an authenticating proxy server for HTTPS communications. Exploitation of this issue could result in an attacker gaining a user's authentication credentials. This issue only exists when the...

CVE-2005-4089

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets CSS files, as demonstrated using Google Desktop, aka...

CVE-2005-4089: Undefined Security Weakness

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets CSS files, as demonstrated using Google Desktop, aka...

Horde IMP 2.2.x3.2.x4.0.x - Email Attachments HTML Injection

Horde IMP 2.2.x3.2.x4.0.x - Email Attachments HTML Injection source: https://www.securityfocus.com/bid/15730/info Horde IMP is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically...

CVE-2005-3983

Unknown vulnerability in the login page for HP Systems Insight Manager SIM 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service browser hang. NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all. ...

CVE-2005-3983

CVE-2005-3983 describes an unknown vulnerability in the login page of HP Systems Insight Manager (SIM) 4.0 and 4.1 when accessed through Microsoft Internet Explorer with the MS04-025 patch , resulting in a denial of service (browser hang) . The advisory is vague and the connected documents do not...

CVE-2005-3983: Undefined Security Weakness

Unknown vulnerability in the login page for HP Systems Insight Manager SIM 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service browser hang. NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all. ...

[Full-disclosure] Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability

Computer Terrorism UK ======================== Security Advisory Reclassification :: CT21-11-2005 ----------------------------------------------------- Title: Microsoft Internet Explorer JavaScript Window Vulnerability Author: S. Pearson Organisation: Computer Terrorism UK Web:...

Microsoft Internet Explorer code execution

Uninitilized memory call on Window function within OnLoad handler of BODY tag allows code execution...

IE VBScript Handling patch (Q318089)

Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files. Impact of vulnerability: Information Disclosure Affected Software: Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0 See...

Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service (1)

Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service 1 source: https://www.securityfocus.com/bid/15268/info Microsoft Internet Explorer is affected by a denial of service vulnerability. This issue arises because the application fails to properly parse certain malformed HTML...

CVE-2005-3312: Undefined Security Weakness

The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting XSS attacks via HTML in corrupted images and other files such as .GIF, JPG, and WAV, which is rendered as HTML when the user clicks on the link, even though the web server response...

openssl, openssl096b security update

CentOS Errata and Security Advisory CESA-2005:800 Updated OpenSSL packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 a...

Microsoft Internet Explorer COM Object Instantiation Variant Vulnerability

Description Microsoft Internet Explorer is prone to a buffer overflow vulnerability that is related to instantiation of COM objects. Successful exploitation could let remote attackers execute arbitrary code in the context of the currently logged in user on the affected computer. This is a variant...

CVE-2005-3077: Undefined Security Weakness

Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service crash via a web page with malformed attributes in a BGSOUND tag, possibly involving double-quotes in an about: URI...

[SA16775] PunBB Multiple Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Microsoft Internet Explorer 5.2.3 for Mac OS - Denial of Service

Microsoft Internet Explorer 5.2.3 for Mac OS - Denial of Service source: https://www.securityfocus.com/bid/14899/info Microsoft Internet Explorer for Mac OS is prone to a denial of service vulnerability. This issue occurs when Internet Explorer attempts to render a Web page with malformed content...