Sql injection

Opera 9.52 and earlier allows remote attackers to cause a denial of service CPU and memory consumption, and application hang via a long Unicode string argument to the write method, a related issue to CVE-2009-2479...

CVE-2009-2578

Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service application crash via a long Unicode string argument to the write method, a related issue to CVE-2009-2479...

CVE-2009-2576

CVE-2009-2576 refers to a Denial of Service in Microsoft Internet Explorer (IE) where a long Unicode string passed to the write method can consume CPU/memory. The OpenVAS entry OpenVAS:900400 explicitly links CVE-2009-2576 to IE Unicode String DoS and lists a base CVSS v2 score of 5.0 (AV:N/AC:L/...

CVE-2009-2578

CVE-2009-2578 affects Google Chrome 2.x up to 2.0.172, with a denial-of-service condition caused by passing a long Unicode string to the write method. Connected data confirms the CVE mapping to a Google Chrome DoS vulnerability; no further exploitation details or fixes are provided in the supplie...

CVE-2009-2578

Removed by vendor...

CVE-2009-2576: Undefined Security Weakness

Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also...

CVE-2009-2578: Improper Restriction of Operations within the Bounds of a Memory Buffer

Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service application crash via a long Unicode string argument to the write method, a related issue to CVE-2009-2479...

CVE-2009-2577: Undefined Security Weakness

Opera 9.52 and earlier allows remote attackers to cause a denial of service CPU and memory consumption, and application hang via a long Unicode string argument to the write method, a related issue to CVE-2009-2479...

Mozilla Firefox Unicode数据远程拒绝服务漏洞

Bugraq ID: 35707 CVE ID：CVE-2009-2479 CNCVE ID：CNCVE-20092479 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox处理unicode数据存在问题，远程攻击者可以利用漏洞使应用程序崩溃。 构建恶意WEB页，诱使用户打开可触发此漏洞。 Mozilla Firefox 3.5.1 Mozilla Firefox 3.5 Mozilla Firefox 3.0.11 Mozilla Firefox 3.0.10 Mozilla Firefox 3.0.9 Mozilla Firefox 3.0...

openSUSE Security Update : rxvt-unicode (rxvt-unicode-163)

It was possible to open a terminal on :0 when the environment variable was not set. This could be exploited by local users to hijack X11 connections CVE-2008-1142. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Multiple browsers DoS

Crash or resources exhaustion on oversized unicode string operations via Javascript...

CVE-2009-2479

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service uncaught exception and application crash via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, ...

Stack overflow

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service uncaught exception and application crash via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, ...

CVE-2009-2479

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service uncaught exception and application crash via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, ...

CVE-2009-2479: Improper Restriction of Operations within the Bounds of a Memory Buffer

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service uncaught exception and application crash via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, ...

Mozilla Firefox 3.5 Unicode Buffer Overflow

------------------------------------------- Firefox 3.5 unicode stack overflow Andrew Haynes , Simon Berry-Byrne ------------------------------------------- var str = unescape"%u4141%u4141"; var str2 = unescape"%u0000%u0000"; var finalstr2 = mul8str2, 49000000; var finalstr = mul8str, 21000000;...

Mozilla Firefox 3.5 - Unicode Remote Buffer Overflow (PoC)

Mozilla Firefox 3.5 - Unicode Remote Buffer Overflow PoC ------------------------------------------- Firefox 3.5 unicode stack overflow Andrew Haynes , Simon Berry-Byrne ------------------------------------------- var str = unescape"%u4141%u4141"; var str2 = unescape"%u0000%u0000"; var finalstr2 ...

Mozilla Firefox 3.5 unicode Remote Buffer Overflow PoC

No description provided by source. ------------------------------------------- Firefox 3.5 unicode stack overflow Andrew Haynes , Simon Berry-Byrne ------------------------------------------- html head script language="JavaScript" type="Text/Javascript" var str = unescape"%u4141%u4141"; var str2 ...

Mozilla Firefox 3.5 - Unicode Remote Buffer Overflow (PoC)

------------------------------------------- Firefox 3.5 unicode stack overflow Andrew Haynes , Simon Berry-Byrne ------------------------------------------- var str = unescape"%u4141%u4141"; var str2 = unescape"%u0000%u0000"; var finalstr2 = mul8str2, 49000000; var finalstr = mul8str, 21000000;...

kernel: cifs: fix potential buffer overruns when converting unicode strings sent by server

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...