306 matches found
[Full-disclosure] Skype - URI Handler Command Switch Parsing
======================================================================== = Skype - URI Handler Command Switch Parsing = = Vendor Website: = http://www.skype.com = = Affected Version: = Skype for Windows: = All releases prior to and including 2.0..104 = Release 2.5..0 to and including 2.5..78 = =...
CVE-2006-2312
Argument injection vulnerability in the URI handler in Skype 2.0..104 and 2.5..0 through 2.5..78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches...
CVE-2006-2312
CVE-2006-2312 affects Skype for Windows, specifically versions 2.0..104 and 2.5. .0 through 2.5..78. The flaw is an argument injection vulnerability in the Skype URI handler that allows a remote attacker who has some level of authorization to cause a crafted Skype URL to trigger the transfer/down...
CVE-2006-2312: Improper Neutralization of Argument Delimiters in a Command
Argument injection vulnerability in the URI handler in Skype 2.0..104 and 2.5..0 through 2.5..78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches...
CVE-2006-2111
A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability...
Information disclosure
A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability...
CVE-2006-2111: Exposure of Sensitive Information to an Unauthorized Actor
A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability...
Microsoft Internet Explorer crossite access
Script from one site can access content of the page from different site with mhtml: URI handler...
RHEL 2.1 / 3 / 4 : lynx (RHSA-2005:839)
An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was found in the lynx 'lynxcgi:' URI handler. An attacker...
CVE-2005-1408
Apple Keynote 2.0/2.0.1 is affected by CVE-2005-1408 due to a flaw in the keynote: URI handler that can be triggered by a crafted Keynote presentation. The vulnerability allows remote attackers to read arbitrary files on the local system. The related Nessus NASL entry confirms the issue exists in...
CVE-2005-1408
Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation...
CVE-2005-1408
Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation...
CVE-2005-1408: Undefined Security Weakness
Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation...
Apple Keynote Presentation < 2.0.2 keynote: URI Handler Arbitrary File Access
The remote host contains a version of Keynote 2 which is older than 2.0.2. The installed version is affected by a security issue which may allow an attacker to send a rogue keynote file containing malformed URI links in it. An attacker can exploit this issue to read and upload arbitrary local fil...
CVE-2005-1342
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...
CVE-2005-1342
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...
[Full-disclosure] Advisories for 4 vulnerabilities addressed by Apple SU 2005-005
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have published advisories for 4 security vulnerabilities in Mac OS X that were addressed by Apple Security Update 2005-005, released today. http://docs.info.apple.com/article.html?artnum=301528. This email contains brief summaries of the problems...
GLSA-200405-19 : Opera telnet URI handler file creation/truncation vulnerability
The remote host is affected by the vulnerability described in GLSA-200405-19 Opera telnet URI handler file creation/truncation vulnerability The telnet URI handler in Opera does not check for leading '-' characters in the host name. Consequently, a maliciously-crafted telnet:// link may be able t...
GLSA-200405-11 : KDE URI Handler Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200405-11 KDE URI Handler Vulnerabilities The telnet, rlogin, ssh and mailto URI handlers in KDE do not check for '-' at the beginning of the hostname passed. By crafting a malicious URI and entice an user to click on it, it is...