1220 matches found
CVE-2008-3623
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image, related to...
Heap overflow
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image, related to...
CVE-2008-3623
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image, related to...
CVE-2008-3623
The CVE-2008-3623 entry describes a heap-based buffer overflow in CoreGraphics affecting Apple Safari before 3.2 on Windows and in iPhone OS 1.0–2.2.1 (and iPod touch 1.1–2.2.1). The vulnerability arises from improper handling of color spaces in image parsing, enabling remote attackers to execute...
CVE-2008-3623: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image, related to...
CVE-2008-3867: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the emailuserkey parameter...
Code injection
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL...
CVE-2008-1588
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL...
PT-2008-3144 · Apple · Iphone +2
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 2.0 on Apple iPhone and iPod touch Description: The issue allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL. Recommendations: For Safari versions prior to 2.0 on Apple iPhone a...
CVE-2008-1588: Improper Input Validation
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL...
konquerer -- address bar spoofing
The KDE development team reports: The Konqueror address bar is vulnerable to spoofing attacks that are based on embedding white spaces in the url. In addition the address bar could be tricked to show an URL which it is intending to visit for a short amount of time instead of the current URL...
Recently updated links for users with personal spaces link to profile if personal space is not accessible
Users without the global access right for personal space can still see links to personal spaces in the "Recently updated" list on their dashboard. This is a serious security problem for extranets, when one wants to prevent non anonymous external users to see who's using the wiki. Note: this probl...
Recently updated links for users with personal spaces link to profile if personal space is not accessible
Users without the global access right for personal space can still see links to personal spaces in the "Recently updated" list on their dashboard. This is a serious security problem for extranets, when one wants to prevent non anonymous external users to see who's using the wiki. Note: this probl...
XSS vulnerability in app/spaces/listattachmentforspace.action
Description: XSS via the "Filter By File Extension" field in app/spaces/listattachmentforspace.action. Exploit: blah"alertdocument.cookiex x="...
wls-xss.txt
Windows Live Spaces has a XSS vulnerability in NetworkSetup.aspx page. This vuln affects every windows live space and it works only on logged users. With this vuln you can grab cookies and so gain the access to the blog's admin panel, where you can edit user's options and data, MSN Messenger...
Fedora Core 6 : mono-1.1.17.1-4.fc6 (2007-067)
A security problem was found and fixed in mono class libraries that affects the Mono web server implementation. By appending spaces to URLs attackers could download the source code of ASP.net scripts that would normally get executed by the web server. After upgrading the packages you need to...
CVE-2006-5544
Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces %A0, which causes the address bar to omit some characters from the URL...
PT-2006-3920 · Winscp · Winscp
Name of the Vulnerable Software and Affected Versions: WinSCP version 3.8.1 build 328 Description: The issue allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI. Recommendations: For WinSCP version 3.8.1 build 328, upda...
Arbitrary Code Execution
Overview Affected versions of this package are vulnerable to Arbitrary Code Execution scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice. Remediation There is no fixed version for openssh...
