RHEL 2.1 / 3 : ImageMagick (RHSA-2005:070)

Updated ImageMagick packages that fix a heap based buffer overflow are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the X Window System. Andrei Nigmatulin discovered a...

security flaw

Buffer overflow in the EXIF library libexif 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag...

CVE-2003-1105

Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to cause a denial of service browser or Outlook Express crash via HTML with certain input tags that are not properly rendered...

CVE-2003-1091

Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via malformed ID3 tags in MP3 files...

CVE-2003-1091

CVE-2003-1091 : Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via malformed ID3 tags in MP3 files. Affected: MP3Broadcaster component within the QuickTime/Dar...

[USN-91-1] EXIF library vulnerability

=========================================================== Ubuntu Security Notice USN-91-1 March 07, 2005 libexif vulnerabilities https://bugzilla.ubuntulinux.org/7152 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10...

Libexif buffer overflow

Buffer overflow during EXIF tags parsing...

USN-91-1: EXIF library vulnerability

Sylvain Defresne discovered that the EXIF library did not properly validate the structure of the EXIF tags. By tricking a user to load an image with a malicious EXIF tag, an attacker could exploit this to crash the process using the library, or even execute arbitrary code with the privileges of t...

CVE-2005-0588

Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system...

CVE-2004-1614

Mozilla allows remote attackers to cause a denial of service application crash from invalid memory access via an "unusual combination of visual elements," including several large MARQUEE tags with large height parameters, as demonstrated by mangleme...

yamt -- buffer overflow and directory traversal issues

Stanislav Brabec discovered errors in yamt's path name handling that lead to buffer overflows and directory traversal issues. When processing a file with a maliciously crafted ID3 tag, yamt might overwrite arbitrary files or possibly execute arbitrary code. The SuSE package ChangeLog contains:...

XSS in the nested BB tag in many forum

XSS was found in the nested BB tag in many forum: Invision Power Board: COLOR=IMGhttp://aaa.aa/=aaa.jpg/IMG style=background:urljavascript:alert /COLOR vBulletin EMAIL=URL=s [email protected]:[email protected] sssssss/URL/EMAIL style=background:urljavaSCrip t:alert/HifromAlgol/ using tab between...

CVE-2004-2644

Unspecified vulnerability in ASN.1 Compiler asn1c before 0.9.7 has unknown impact and attack vectors when processing "ANY" type tags...

CVE-2004-2363

Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting XSS attacks via hex-encoded tags, which bypass the check for literal "", "", and "" characters, as demonstrated using the limi...

CVE-2004-2015

Cross-site scripting XSS vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web script via 1 iframe, 2 img, or 3 object tags...

Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation

source: https://www.securityfocus.com/bid/11565/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue is due to a failure of the affected application to properly handle specially crafted HTML anchor URI tags and various form tags. This issue may be leveraged ...

Microsoft Internet Explorer 6 - Font Tag Denial of Service

Microsoft Internet Explorer 6 - Font Tag Denial of Service source: https://www.securityfocus.com/bid/11536/info Microsoft Internet Explorer is reported prone to a remote denial of service vulnerability. The issue presents itself due to a malfunction that occurs when certain font tags are...

Microsoft Internet Explorer 6 - Font Tag Denial of Service

source: https://www.securityfocus.com/bid/11536/info Microsoft Internet Explorer is reported prone to a remote denial of service vulnerability. The issue presents itself due to a malfunction that occurs when certain font tags are encountered and rendered. When a page that contains the malicious...

CVE-2004-1614

Mozilla allows remote attackers to cause a denial of service application crash from invalid memory access via an "unusual combination of visual elements," including several large MARQUEE tags with large height parameters, as demonstrated by mangleme...

YaBB 1.x9.1.2000 - Administrator Command Execution

YaBB 1.x9.1.2000 - Administrator Command Execution source: https://www.securityfocus.com/bid/11214/info It is reported that YaBB is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to administrative command...