Mozilla Firefox Unicode数据远程拒绝服务漏洞

Bugraq ID: 35707 CVE ID：CVE-2009-2479 CNCVE ID：CNCVE-20092479 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox处理unicode数据存在问题，远程攻击者可以利用漏洞使应用程序崩溃。 构建恶意WEB页，诱使用户打开可触发此漏洞。 Mozilla Firefox 3.5.1 Mozilla Firefox 3.5 Mozilla Firefox 3.0.11 Mozilla Firefox 3.0.10 Mozilla Firefox 3.0.9 Mozilla Firefox 3.0...

openSUSE Security Update : rxvt-unicode (rxvt-unicode-163)

It was possible to open a terminal on :0 when the environment variable was not set. This could be exploited by local users to hijack X11 connections CVE-2008-1142. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Multiple browsers DoS

Crash or resources exhaustion on oversized unicode string operations via Javascript...

CVE-2009-2479

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service uncaught exception and application crash via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, ...

CVE-2009-2479

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service uncaught exception and application crash via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, ...

Stack overflow

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service uncaught exception and application crash via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, ...

Mozilla Firefox 3.5 - Unicode Remote Buffer Overflow (PoC)

Mozilla Firefox 3.5 - Unicode Remote Buffer Overflow PoC ------------------------------------------- Firefox 3.5 unicode stack overflow Andrew Haynes , Simon Berry-Byrne ------------------------------------------- var str = unescape"%u4141%u4141"; var str2 = unescape"%u0000%u0000"; var finalstr2 ...

Mozilla Firefox 3.5 Unicode Buffer Overflow

------------------------------------------- Firefox 3.5 unicode stack overflow Andrew Haynes , Simon Berry-Byrne ------------------------------------------- var str = unescape"%u4141%u4141"; var str2 = unescape"%u0000%u0000"; var finalstr2 = mul8str2, 49000000; var finalstr = mul8str, 21000000;...

Mozilla Firefox 3.5 unicode Remote Buffer Overflow PoC

No description provided by source. ------------------------------------------- Firefox 3.5 unicode stack overflow Andrew Haynes , Simon Berry-Byrne ------------------------------------------- html head script language="JavaScript" type="Text/Javascript" var str = unescape"%u4141%u4141"; var str2 ...

Mozilla Firefox 3.5 - Unicode Remote Buffer Overflow (PoC)

------------------------------------------- Firefox 3.5 unicode stack overflow Andrew Haynes , Simon Berry-Byrne ------------------------------------------- var str = unescape"%u4141%u4141"; var str2 = unescape"%u0000%u0000"; var finalstr2 = mul8str2, 49000000; var finalstr = mul8str, 21000000;...

kernel: cifs: fix potential buffer overruns when converting unicode strings sent by server

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

RedHat Security Advisory RHSA-2009:1122

The remote host is missing updates announced in advisory RHSA-2009:1122. A flaw was found in the way ICU processed certain, invalid byte sequences during Unicode conversion. If an application used ICU to decode malformed, multibyte character data, it may have been possible to bypass certain conte...

RedHat Security Advisory RHSA-2009:1122

The remote host is missing updates announced in advisory RHSA-2009:1122. A flaw was found in the way ICU processed certain, invalid byte sequences during Unicode conversion. If an application used ICU to decode malformed, multibyte character data, it may have been possible to bypass certain conte...

icu, libicu security update

CentOS Errata and Security Advisory CESA-2009:1122 Updated icu packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The International Components for Unicode ICU...

Firefox browser engine crashes

The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1...

icu: XSS vulnerability due to improper invalid byte sequence handling

International Components for Unicode ICU 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences...

Moderate: Red Hat Security Advisory: icu security update

Updated icu packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The International Components for Unicode ICU library provides robust and full-featured Unicode...

RedHat Security Advisory RHSA-2009:1106

The remote host is missing updates to the Linux kernel announced in advisory RHSA-2009:1106. Security fixes: several flaws were found in the way the Linux kernel CIFS implementation handles Unicode strings. CIFS clients convert Unicode strings sent by a server to their local character sets, and...

SuSE Security Advisory SUSE-SA:2009:034 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:034. OpenVAS Vulnerability Test $Id: susesa2009034.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:034 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2009:1095 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open sour...