4898 matches found
EEYE: VBE Document Property Buffer Overflow
VBE Document Property Buffer Overflow Release Date: September 3, 2003 Reported Date: May 7, 2003 Severity: High Code Execution Systems Affected: Microsoft Access 97, 2000, 2002 Microsoft Excel 97, 2000, 2002 Microsoft PowerPoint 97, 2000, 2002 Microsoft Project 2000, 2002 Microsoft Publisher 2002...
Microsoft Virtual Machine allows untrusted applets to access the user.dir system property
Overview Some versions of the Microsoft virtual machine Microsoft VM contain a flaw that could leak information about the user's system. This flaw could allow malicious Java applets to get information they would normally be denied access to. Description The Microsoft virtual machine Microsoft VM...
CVE-2002-1339
The "XMLURL" property in the Spreadsheet component of Office Web Components OWC 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files...
CVE-2002-1339
The "XMLURL" property in the Spreadsheet component of Office Web Components OWC 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files...
Microsoft Internet Explorer contains cross-site scripting vulnerabilities in local HTML resources
Overview Microsoft Internet Explorer IE includes several local HTML resources that contain cross-site scripting vulnerabilities. These resources use the dialogArguments property of dialog frames insecurely, allowing an attacker to execute arbitrary script in the Local Machine Zone. Description...
CVE-2002-0500
Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size...
CVE-2002-0500
Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size...
CVE-2002-0500
The CVE-2002-0500 entry describes a vulnerability in Internet Explorer 5.0–6.0 where a remote attacker can determine the existence of local files on a client by abusing an IMG tag with a dynsrc attribute that references the target file, causing the image object to reveal information such as file ...
CVE-2002-0191
Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "" character via script containing the cssText property of the stylesheet object, aka "Local Information Disclosure through HTML Object" vulnerability...
IE allows universal Cross Site Scripting (TL#002)
Thor Larholm security advisory TL002 ------------------------------------- By Thor Larholm, Denmark. 16 April 2002 HTML Format: http://jscript.dk/adv/TL002/ Topic: IE allows universal Cross Site Scripting. Discovery date: 18 March 2002. Severity: High Affected applications: ----------------------...
Retrieving information on local files in IE (GM#003-IE)
GreyMagic Security Advisory GM003-IE ===================================== By GreyMagic Software, Israel. 27 Mar 2002. Available in HTML format at http://security.greymagic.com/adv/gm003-ie/. Topic: Retrieving information on local files in IE. Discovery date: 18 Feb 2002. Affected applications:...
Unauthorized access via Java Web Start
It's possible to pass property name="NAME" value="VALUE"/ with names different from jnlp. and javaws., it allows to leave sandbox...
FireWall-1 Fastmode Vulnerability
Hi there, service pack 3 is available for FireWall-1 4.1 and in addition to the things listed in the release notes it fixes the following little... errrrm... idiosyncrasy. The HTML version of the advisory is available at http://www.dataprotect.com/fw1/ Merry Christmas and a happy New Year -Thomas...
Пользователь может обойти Inherited Rights Filters (IRF) в Novell Netware
Права на избранные свойства Selected Property Rights в Novell Netware могут наследоваться, но не могут быть блокированы с помощью IRF. Таким образом пользователь, имеющий права на родительский объект может овладеть дочерним объектом NDS, установив права на родительский объект и объявив их...
PT-1997-1170 · Next · Next Netinfo
Name of the Vulnerable Software and Affected Versions: NeXT NetInfo affected versions not specified Description: The issue allows local users to gain root privileges or conduct a denial of service due to a problem with the writers property. Recommendations: At the moment, there is no information...
"Access denied" error when you use a Windows Store app to configure printer property settings in Windows
None None...
Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`
More info at https://symfony.com/blog/cve-2026-48808-sandbox-property-allowlist-bypass-via-the-column-filter-under-sourcepolicyinterface...