CVE-2009-3857

Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service application crash via a Ruby .rb file containing a long string, which triggers the crash when a scroll bar is used...

CVE-2009-3375

content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function...

Stack overflow

Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code via a long hostname in an FTP server entry in a site backup file. NOTE: some of these details are obtained from third party information...

CVE-2009-3329

Stack-based buffer overflow in Winplot 1.25.0.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Plot2D .wp2 file...

CVE-2009-3329

Winplot 1.25.0.1 is affected by a stack-based buffer overflow in the Plot2D (.wp2) parser that allows user-assisted remote attackers to execute arbitrary code. The vulnerability is triggered by a crafted .wp2 file, enabling arbitrary code execution with high impact. No remediation details are pro...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-3289

The gfilecopy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link 777, which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory...

CVE-2009-2811

Incomplete blacklist vulnerability in Launch Services in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code via a .fileloc file, which does not trigger a "potentially unsafe" warning message in the Quarantine feature...

GLSA-200909-12 : HTMLDOC: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200909-12 HTMLDOC: User-assisted execution of arbitrary code ANTHRAX666 reported an insecure call to the sscanf function in the setpagesize function in htmldoc/util.cxx. Nico Golde of the Debian Security Team found two more insecu...

GLSA-200909-02 : libvorbis: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200909-02 libvorbis: User-assisted execution of arbitrary code Lucas Adamski reported that libvorbis does not correctly process file headers, related to static mode headers and encoding books. Impact : A remote attacker could enti...

GLSA-200908-10 : Dillo: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200908-10 Dillo: User-assisted execution of arbitrary code Tilei Wang reported an integer overflow in the Pngdatainfocallback function, possibly leading to a heap-based buffer overflow. Impact : A remote attacker could entice a us...

CVE-2008-6998

Stack-based buffer overflow in chrome/common/gfx/urlelider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target href attribute with a large number of path elements, which triggers the overflow wh...

Deserialization of untrusted data

Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service browser crash via an IMG tag with a long src attribute, which triggers the crash when the victim performs an "Inspect Element" action...

CVE-2008-6998

Removed by vendor...

CVE-2008-6994

CVE-2008-6994 concerns Google Chrome (around 0.2.149.x). A stack-based buffer overflow in the SaveAs pathway (SaveFileAsWithFilter in win_util.cc) can be triggered by a web page containing a long TITLE element, causing a long filename during save and allowing user-assisted remote code execution. ...

CVE-2008-6946

Cross-site scripting XSS vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via the project Name, which is not properly handled when the administrator performs an editform action, related to admin.php...

OpenJDK: Possibility of trusted applet run in older, vulnerable version of JRE (6706490)

The Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490...

CVE-2009-1727

Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X 10.5 before 10.5.8 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safa...

CVE-2009-2646

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server BES software 4.1.3 through 4.1.6 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service memory...

CVE-2009-2643

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server BES software 4.1.3 through 5.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service memory...