Mozilla Foundation Security Advisory 2007-37

Mozilla Foundation Security Advisory 2007-37 Title: jar: URI scheme XSS hazard Impact: High Announced: November 26, 2007 Reporter: Jesse Ruderman, Petko D. Petkov, beford.org Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.10 SeaMonkey 1.1.7 Description The jar: URI scheme was introduced as ...

Firefox < 2.0.0.10 Multiple Vulnerabilities

The installed version of Firefox is affected by various security issues : - Three bugs that can result in crashes with traces of memory corruption - A cross-site scripting vulnerability involving support for the 'jar:' URI scheme - A timing issue when setting the 'window.location' property that...

jar: URI scheme XSS hazard — Mozilla

The jar: URI scheme was introduced as a mechanism to support digitally signed web pages, enabling web sites to load pages packaged in zip archives containing signatures in java-archive format...

GLSA-200711-26 : teTeX: Multiple vulnerabilities

"The remote host is affected by the vulnerability described in GLSA-200711-26 teTeX: Multiple vulnerabilities Joachim Schrod discovered several buffer overflow vulnerabilities and an insecure temporary file creation in the 'dvilj' application that is used by dvips to convert DVI files to printer...

SWSoft Confixx Fehler.Inc.PHP远程文件包含漏洞

SWSoft Confixx Fehler.Inc.PHP Remote File Include Vulnerability SWSoft Confixx是一款基于PHP的WEB应用程序。 SWSoft Confixx不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Fehler.Inc.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 SWSoft Confixx Professional 3.2.1 目前没有详细解决方案提供：...

RHEL 4 : mailman (RHSA-2007:0779)

Updated mailman packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. Mailman is a program used to help manage email discussion lists. A flaw was found i...

Microsoft Windows URI处理器命令注入漏洞（MS07-061）

BUGTRAQ ID: 25945 CVECAN ID: CVE-2007-3896 Microsoft Windows是微软发布的非常流行的操作系统。 Windows shell（shell32.dll）在使用所注册的URI处理器（如mailto、news、nntp、snews、telnet、http等）处理特制URI时存在输入验证错误，远程攻击者可能利用此漏洞诱使用户运行程序。 如果用户使用Windows上所安装的IE 7访问了恶意站点，或点击了包含有“%”字符且以某些扩展名（如.bat或.cmd）结束的特制URI的话，就可能导致启动任意程序。 Microsoft Internet...

Nuked-Klan 1.7.5 File Parameter News Module Cross-Site Scripting Vulnerability

Nuked-Klan 1.7.5 File Parameter News Module Cross-Site Scripting Vulnerability. CVE-2007-6090. Webapps exploit for php platform source: http://www.securityfocus.com/bid/26458/info Nuked-Klan is prone to a cross-site scripting vulnerability because the application fails to properly sanitize...

CVE-2007-5947

The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting XSS...

CVE-2007-5947

The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting XSS...

Microsoft Security Bulletin MS07-061 – Critical Vulnerability in Windows URI Handling Could Allow Remote Code Execution &#40;943460&#41;

Microsoft Security Bulletin MS07-061 – Critical Vulnerability in Windows URI Handling Could Allow Remote Code Execution 943460 Published: November 13, 2007 Version: 1.0 General Information Executive Summary This update resolves a publicly reported vulnerability. A remote code execution...

VulnCheck KEV: CVE-2007-3896

The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox,...

MS07-061: Vulnerability in Windows URI Handling Could Allow Remote Code Execution (943460)

The remote version of Windows contains a version of the Windows Shell that contains a vulnerability in the way it handles URI. An attacker might use this flaw to execute arbitrary commands on the remote host using attack vectors such as IE or other tools. C Tenable Network Security, Inc...

Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities

Background Mozilla Firefox is a cross-platform web browser from Mozilla. SeaMonkey is a free, cross-platform Internet suite. Description Multiple vulnerabilities have been reported in Mozilla Firefox and SeaMonkey. Various errors in the browser engine and the Javascript engine can be exploited to...

Ubuntu 6.06 LTS / 6.10 / 7.04 : xfce4-terminal vulnerability (USN-497-1)

Lasse Karkkainen discovered that the Xfce Terminal did not correctly escape shell meta-characters during 'Open Link' actions. If a remote attacker tricked a user into opening a specially crafted URI, they could execute arbitrary commands with the user's privileges. Note that Tenable Network...

Design/Logic Flaw

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

CVE-2007-5896

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

CVE-2007-5896

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

Mozilla-based browsers jar: URI cross-site scripting vulnerability

Overview Mozilla-based web browsers including Firefox contain a vulnerability that may allow an attacker to execute code, or conduct cross-site scripting attacks. Description The jar: protocol is designed to extract content from ZIP compressed files. Mozilla-based browsers include support for jar...

Quick/Dirty Blog Categories.PHP本地文件包含漏洞

Quick And Dirty Blog是一款基于PHP的WEB应用程序。 Quick And Dirty Blog不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于'Categories.PHP'脚本对用户提交的'theme'参数缺少过滤，提交包含多个"../"字符作为参数，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 Quick and Dirty Blog 0.4 目前没有详细解决方案提供： http://sourceforge.net/projects/qdblog/...