Lucene search
K

8 matches found

securityvulns
securityvulns
added 2010/01/26 12:0 a.m.58 views

Internet Explorer memory corruption

Memory corruption then setting outerHTML from body style...

1.9AI score
Exploits0References4
NVD
NVD
added 2007/02/09 1:28 a.m.14 views

CVE-2006-6986

Cross-domain vulnerability in PhaseOut 5.4.4 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which...

7.8CVSS5.9AI score0.00522EPSS
Exploits0References1
NVD
NVD
added 2007/02/09 1:28 a.m.14 views

CVE-2006-6987

Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target...

7.8CVSS5.9AI score0.00461EPSS
Exploits0References1
NVD
NVD
added 2007/02/09 1:28 a.m.19 views

CVE-2006-6990

Cross-domain vulnerability in Enigma Browser 3.8.8 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site,...

7.8CVSS5.9AI score0.00461EPSS
Exploits0References1
CVE
CVE
added 2007/02/09 1:0 a.m.41 views

CVE-2006-6983

CVE-2006-6983 documents a cross-domain information disclosure in MYweb4net Browser 3.8.8.0. The vulnerability arises from an object tag with a data parameter referencing a link that points to a Location header on the attacker's site, allowing the target content to be exposed via the outerHTML att...

5CVSS5.9AI score0.00306EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2007/02/09 1:0 a.m.23 views

CVE-2006-6991

Cross-domain vulnerability in Fast Browser Pro 8.1 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site,...

5.9AI score0.00461EPSS
Exploits0References1
seebug.org
seebug.org
added 2006/10/27 12:0 a.m.20 views

Microsoft Internet Explorer OuterHTML重新定向信息泄漏漏洞(MS06-042)

Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft Internet Explorer中存在跨域漏洞。攻击者可以创建特制的对象标签,该标签的数据参数引用了攻击者站点的链接,而这个站点将Location HTTP首部指定为目标站点,这样就可以通过对象的outerHTML属性读取敏感信息。 Microsoft Internet Explorer 6.0 Microsoft已经为此发布了一个安全公告(MS06-042)以及相应补丁: MS06-042:Cumulative Security Update for Internet Explorer...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2006/06/27 12:0 a.m.26 views

Microsoft Internet Explorer 5.0.1 - OuterHTML redirection Handling Information Disclosure

source: https://www.securityfocus.com/bid/18682/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain policies. This issue may allow attackers to access arbitrary websites in the context of a targeted user's browser...

7.4AI score
Exploits0
Rows per page
Query Builder