CVE-2010-1410

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via an SVG document with nested use elements...

Sun Solaris嵌套目录树处理本地拒绝服务漏洞

BUGTRAQ ID: 40319 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 本地用户可以通过对嵌套了深层目录树的文件系统执行rm1、find1等操作触发栈溢出，导致拒绝服务的情况。 Sun Solaris 10.0x86 Sun Solaris 10.0 厂商补丁： Sun --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sunsolve.sun.com/security perl -e '$a="X";for1..8000 ! -d $a and mkdir $a and chdir $a '...

Sun Solaris 10 - Nested Directory Tree Local Denial of Service

Sun Solaris 10 - Nested Directory Tree Local Denial of Service source: https://www.securityfocus.com/bid/40319/info Sun Solaris is prone to a local denial-of-service vulnerability. Exploiting this issue allows local users to cause denial-of-service conditions in certain filesystem commands. Sun...

Sun Solaris 10 - Nested Directory Tree Local Denial of Service

source: https://www.securityfocus.com/bid/40319/info Sun Solaris is prone to a local denial-of-service vulnerability. Exploiting this issue allows local users to cause denial-of-service conditions in certain filesystem commands. Sun Solaris 10 is affected, other versions may also be vulnerable...

Sent Recursive Archive (Mailbomb)

This script sends the Universum.zip recursive archive to the mail server. OpenVAS Vulnerability Test $Id: GSHBsmtpmailbombtest.nasl 7061 2017-09-05 11:50:40Z teissa $ Sent Recursive Archive Mailbomb Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.n...

Apple Safari Nested 'object' Tag Remote Denial Of Service vulnerability

The host is installed with Apple Safari and is prone to Denial Of Service vulnerability OpenVAS Vulnerability Test $Id: gbapplesafariobjecttagdosvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ Apple Safari Nested 'object' Tag Remote Denial Of Service vulnerability Authors: Madhuri D Copyright:...

CVE-2010-0050

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an HTML document with improperly nested tags...

Design/Logic Flaw

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an HTML document with improperly nested tags...

CVE-2010-0050

Removed by vendor...

PT-2010-1875 · Apple · Safari +1

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0.5 Description: The issue is related to a use-after-free vulnerability in WebKit, allowing remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. This can ...

Internet Explorer Nested Object Tag Handling Memory Corruption (MS06-021; CVE-2006-1992)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, scripting languages, and interpretation of various other popular Internet specifications. There exists a memory corruption vulnerability in Microsoft Internet Explorer. The...

Google Chrome < 4.0.249.78 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 4.0.249.78. Such versions are reportedly affected by multiple vulnerabilities : - A pop-up blocker bypass. Issue 3275 - Cross-domain theft due to CSS design error. Issue 9877 - Browser memory error with stale pop-up block...

Mandriva Security Advisory MDVSA-2009:223-1 (xerces-c)

The remote host is missing an update to xerces-c announced via advisory MDVSA-2009:223-1. OpenVAS Vulnerability Test $Id: mdksa20092231.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:223-1 xerces-c Authors: Thomas Reinke Copyright: Copyright c 2009...

neon: billion laughs DoS attack

neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...

CVE-2009-2473

neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...

CVE-2009-2473

neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...

CVE-2009-1885

Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrat...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested...

DEBIAN-CVE-2009-1885

Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrat...

CVE-2009-1885

Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service application crash via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrat...