CVE-2007-0048

Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service memory consumption via a long...

CVE-2007-0045

Multiple cross-site scripting XSS vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770...

Adobe Reader 9.1.3 Plugin - Cross-Site Scripting

Adobe Reader 9.1.3 Plugin - Cross-Site Scripting source: https://www.securityfocus.com/bid/21858/info Adobe Reader Plugin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

Adobe Reader 9.1.3 Plugin - Cross-Site Scripting

source: https://www.securityfocus.com/bid/21858/info Adobe Reader Plugin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Vz (Adp) Forum 2.0.3 - Remote Password Disclosure

Vz Adp Forum 2.0.3 - Remote Password Disclosure SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC:...

P-News 1.16/1.17 - 'user.dat' Remote Password Disclosure

P-News user.datRemote Password Disclosure Vulnerablity S.name:P-News Affected versions:1.17 and 1.16 Vendor:www.ppopn.net Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/db/user.dat As We see Admin name and hash !!!!!!!!!!!!!!!!!!!!!!!!!! You can crack the...

P-News 1.161.17 - user.dat Remote Password Disclosure

P-News 1.161.17 - user.dat Remote Password Disclosure P-News user.datRemote Password Disclosure Vulnerablity S.name:P-News Affected versions:1.17 and 1.16 Vendor:www.ppopn.net Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/db/user.dat As We see Admin name and...

Sv(ADP) Forum 2.0.3 Remote Password Disclosure Vulnerablity

SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/users/admin.txt As We see Admin name and hash...

Vz (Adp) Forum 2.0.3 - Remote Password Disclosure

SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/users/admin.txt As We see Admin name and hash...

Opera Web浏览器URI标签解析堆溢出漏洞

Opera是一款流行的WEB浏览器，支持多种平台。 Opera浏览器在解析包含有URL的标签时存在堆溢出漏洞，成功利用这个漏洞的攻击者可能以登录用户的权限执行任意代码，失败的攻击也可能导致浏览器崩溃。 在解析过程中分配了256字节的堆缓冲区，但没有经过长度检查便将标签的URL拷贝到了这个缓冲区。C/C++的漏洞代码如下： char localurl = malloc256; strcpylocalurl, tagurl; Opera Software Opera 9.01 Opera Software Opera 9.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

FreeBSD : opera -- URL parsing heap overflow vulnerability (4867ae85-608d-11db-8faf-000c6ec775d9)

iDefense Labs reports : Remote exploitation of a heap overflow vulnerability within version 9 of Opera Software's Opera Web browser could allow an attacker to execute arbitrary code on the affected host. A flaw exists within Opera when parsing a tag that contains a URL. A heap buffer with a...

Opera Web Browser fails to properly process overly long URLs

Overview The Opera Web Browser fails to properly process overly long URLs. This vulnerability may allow arbitrary code execution. Description Opera is a multi-platform web browser that is available for a range of operating systems and embedded Internet products. Opera contains a heap buffer...

Opera < 9.02 Multiple Vulnerabilities

Binary data 3796.prm...

iDefense Security Advisory 10.17.06: Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability

Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability iDefense Security Advisory 10.17.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 17, 2006 I. BACKGROUND Opera is a cross-platform web browser. More information is available from http://www.opera.com/ II...

Opera buffer overflow

Buffer overflow on oversized URL...

Opera < 9.02 Multiple Vulnerabilities

The version of Opera installed on the remote host reportedly contains a heap-based buffer overflow vulnerability that can be triggered by a long link. Successful exploitation of this issue may result in a crash of the application or even allow for execution of arbitrary code subject to the user's...

CVE-2006-4819

Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag long link address...

CVE-2006-4819

Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag long link address...

CVE-2006-4819

CVE-2006-4819 describes a heap-based buffer overflow in Opera 9.0 and 9.01 caused by parsing a URL within a tag. The overflow can allow remote code execution when a user visits a malicious page containing a specially crafted long URL in a tag (e.g., long link address). Public sources cite that Op...

Very large link addresses can cause Opera to crash

An extremely long link address can cause Opera to crash.A specially crafted long link could cause malicious codeto be run on the user's computer...