Mozilla Firefox出错页面地址栏URI欺骗漏洞

BUGTRAQ ID: 35803 Firefox是Mozilla所发布的开源WEB浏览器。 如果用户受骗使用Firefox打开了包含有无效字符（如“,”或“%”）的特制URL的话，所生成出错页面的地址栏中可能会显示欺骗性的URL。这可能给用户造成误导，有助于攻击者执行网络钓鱼类的欺骗攻击。 Mozilla Firefox 3.0.11 厂商补丁： Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/ /script center h1Firefox...

CVE-2009-2571

Multiple cross-site scripting XSS vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the URI, 2 the q parameter, 3 the nick parameter, or 4 the nick parameter in a bantest action...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-125)

This update brings Mozilla Firefox to version 3.0.1. It fixes various bugs and also following security problems : MFSA 2008-34 / CVE-2008-2785: An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla CSS reference counting code. The vulnerabili...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-509)

The Mozilla Firefox browser is updated to version 3.0.6 fixing various security and stability issues. MFSA 2009-01 / CVE-2009-0352 / CVE-2009-0353: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

CVE-2009-2484

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...

Stack overflow

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...

CVE-2009-2484

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...

CVE-2009-2484

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...

CVE-2009-2484

CVE-2009-2484 affects VideoLAN VLC Media Player on Windows. It is a stack-based buffer overflow in the Win32AddConnection function (modules/access/smb.c) that can be triggered by a long smb:// URI in a playlist, potentially allowing remote code execution or a crash. Affected versions are VLC 0.9....

CVE-2009-2484

Stack-based buffer overflow in the Win32AddConnection function in modules/access/smb.c in VideoLAN VLC media player 0.9.9, when running on Microsoft Windows, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long smb URI in a playlist...

CVE-2009-2351

CVE-2009-1312 is referenced in MiracleLinux AXSA advisories as a vulnerability in Mozilla Firefox and SeaMonkey where javascript: URIs in Refresh headers in HTTP responses were not blocked. Affected versions include Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17; this could enable cross...

CVE-2009-2305

The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //.\ slash slash dot backslash sequences...

CVE-2009-2305

The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //.\ slash slash dot backslash sequences...

CVE-2009-2269

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

Sql injection

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

VideoLAN VLC Media Player 0.9.9 smb:// URI Stack BOF PoC

No description provided by source. !/usr/bin/ruby VideoLAN VLC Media Player 0.9.9 smb:// URI Stack-based Buffer Overflow Proof-of-Concept Bugtraq ID: 35500 The vulnerability can also be triggered via the VLC web interface disabled by default:...

Ubuntu USN-782-1 (thunderbird)

The remote host is missing an update to thunderbird announced via advisory USN-782-1. OpenVAS Vulnerability Test $Id: ubuntu7821.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7821.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-782-1 thunderbird Authors:...

VideoLAN VLC Media Player 0.9.9 Buffer Overflow

!/usr/bin/ruby VideoLAN VLC Media Player 0.9.9 smb:// URI Stack-based Buffer Overflow Proof-of-Concept Bugtraq ID: 35500 The vulnerability can also be triggered via the VLC web interface disabled by default: http://vulnerableip:8080/requests/status.xml?command=inplay&input=smb://............ Patc...

VideoLAN VLC Media Player 0.9.9 - smb: URI Stack Buffer Overflow (PoC)

VideoLAN VLC Media Player 0.9.9 - smb: URI Stack Buffer Overflow PoC !/usr/bin/ruby VideoLAN VLC Media Player 0.9.9 smb:// URI Stack-based Buffer Overflow Proof-of-Concept Bugtraq ID: 35500 The vulnerability can also be triggered via the VLC web interface disabled by default:...