CVE-2009-3376

CVE-2009-3376 affects Mozilla Firefox (before 3.0.15 and 3.5.x before 3.5.4) and SeaMonkey (before 2.0). The root cause is improper handling of a right-to-left override (RLO, U+202E) Unicode character in a download filename, which can cause the displayed name to differ from the actual filename. T...

CVE-2009-3376

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...

Mozilla Products IDN Spoofing (CVE-2005-0233)

The Internationalized Domain Names IDN standard defines specifications for the representation of domain names containing non-ASCII characters. The IDN standard has been developed to allow representation of Unicode domain names without depending on alterations to any network infrastructure...

IBM DB2 JDBC Applet Server远程拒绝服务漏洞

CVE ID：CVE-2009-2971 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 IBM DB2 JDBC Applet Server服务程序中的jdbcReadString函数存在一个安全漏洞，在转换UNICODE到ANSI字符的时候，没有判断报文中实际的字符串大小，而直接使用报文中的长度域。如果远程攻击者发送特殊构造的JDBC数据，无须认证即可导致JDBC Applet Server退出. IBM DB2 Universal Database...

SuSE Security Update: Security update for Mozilla Firefox (firefox35upgrade-6562)

This update brings the Mozilla Firefox 3.5 webbrowser to version 3.5.3, the Mozilla XULRunner 1.9.0 engine to the 1.9.0.14 stable release, and the Mozilla XULRunner 1.9.1 engine to the 1.9.1.3 stable release. It also fixes various security issues: MFSA 2009-47 / CVE-2009-3069 / CVE-2009-3070 /...

NSFOCUS SA2009-02 : IBM DB2 JDBC Applet Server Remote DoS Vulnerability

NSFOCUS Security Advisory SA2009-02 IBM DB2 JDBC Applet Server Remote DoS Vulnerability Release Date: 2009-10-16 CVE ID: CVE-2009-2971 http://www.nsfocus.com/en/advisories/0902.html Affected system: ============== IBM DB2 Universal Database v8.1 Fixpak 15 v8.2 Fixpak 8 and lower versions IBM DB2...

Firefox Domain Name Handling Buffer Overflow (CVE-2005-2871)

The Internationalized Domain Names IDN standard defines specifications for the representation of domain names containing non-ASCII characters. The IDN standard has been developed to allow representation of Unicode domain names without depending on alterations to any network infrastructure...

Ubuntu 8.04 LTS / 8.10 / 9.04 : icu vulnerability (USN-846-1)

It was discovered that ICU did not properly handle invalid byte sequences during Unicode conversion. If an application using ICU processed crafted data, content security mechanisms could be bypassed, potentially leading to cross-site scripting XSS attacks. Note that Tenable Network Security has...

USN-846-1: ICU vulnerability

It was discovered that ICU did not properly handle invalid byte sequences during Unicode conversion. If an application using ICU processed crafted data, content security mechanisms could be bypassed, potentially leading to cross-site scripting XSS attacks...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-6495)

This update brings the Mozilla Firefox browser to the 3.0.14 stable release. It also fixes various security issues: MFSA 2009-47 / CVE-2009-3069 / CVE-2009-3070 / CVE-2009-3071 / CVE-2009-3072 / CVE-2009-3073 / CVE-2009-30 / CVE-2009-3075: Mozilla developers and community members identified and...

openSUSE 10 Security Update : icu (icu-6322)

icu does not properly handle invalid byte sequences during Unicode conversion. Remote attackers could potentially exploit that to conduct conduct cross-site scripting XSS attacks CVE-2009-0153. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mozilla Firefox Unicode Sequence Handling Stack Corruption (CVE-2005-2702)

The Firefox and Mozilla web browsers are applications designed for tasks related to browsing the web, such as displaying HTML encoded pages, downloading files, and so on. The web browser is capable of rendering Unicode characters contained in web pages which allows unconventional characters from...

SuSE 11 Security Update : Firefox (SAT Patch Number 1340)

This update brings Mozilla Firefox from the 3.0 stable branch to the current stable branch version 3.5.3. It also fixes various security issues : - / / CVE-2009-3075: Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in Firefox and oth...

SuSE 11 Security Update : Mozilla (SAT Patch Number 1328)

This update brings the Mozilla XULRunner engine to the 1.9.0.14 stable release. It also fixes various security issues : - / CVE-2009-30 /. MFSA 2009-47 / CVE-2009-3069 / CVE-2009-3070 / CVE-2009-3071 / CVE-2009-3072 / CVE-2009-3073 - Mozilla developers and community members identified and fixed...

Fedora 11 : rubygem-actionpack-2.3.3-2.fc11 / rubygem-activesupport-2.3.3-2.fc11 (2009-9922)

A vulnerability is found on Ruby on Rails in the escaping code for the form helpers, which also affects the rpms shipped in Fedora Project. Attackers who can inject deliberately malformed unicode strings into the form helpers can defeat the escaping checks and inject arbitrary HTML. This issue ha...

Fedora Core 10 FEDORA-2009-9799 (rubygem-activesupport)

The remote host is missing an update to rubygem-activesupport announced via advisory FEDORA-2009-9799. OpenVAS Vulnerability Test $Id: fcore20099799.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9799 rubygem-activesupport Authors: Thomas Reinke...

Core FTP LE 2.1 Buffer Overflow

!/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX 00000064 ECX 00410041...

Core FTP LE 2.1 build 1612 - Local Buffer Overflow (PoC)

Core FTP LE 2.1 build 1612 - Local Buffer Overflow PoC !/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register...

Core FTP LE 2.1 build 1612 local buffer overflow PoC

No description provided by source. !/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX...

Core FTP LE 2.1 build 1612 - Local Buffer Overflow (PoC)

!/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX 00000064 ECX 00410041...