[SECURITY] Fedora Core 6 Update: epiphany-2.16.3-5.fc6

epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

[SECURITY] Fedora Core 6 Update: firefox-1.5.0.12-1.fc6

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way...

Authentium Command Antivirus odapi.dll multiple ActiveX buffer overflows

Overview Authentium Command Antivirus contains multiple ActiveX vulnerabilities, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Authentium Command Antivirus provides multiple ActiveX controls. Many of the ActiveX controls provided ...

Apple QuickTime for Java information disclosure vulnerability

Overview Apple QuickTime for Java fails to properly clear memory. As a result, sensitive information may be exposed to unintended parties. Description Apple QuickTime includes the ability to integrate QuickTime into Java applications and applets. This feature is known as QuickTime for Java. Apple...

Apple QuickTime for Java security bypass vulnerability

Overview Apple QuickTime for Java fails to properly restrict the instantiation and manipulation of Java objects. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple QuickTime includes the ability to integrate QuickTim...

CVE-2007-2389

Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not clear potentially sensitive memory before use, which allows remote attackers to read memory from a web browser via unknown vectors related to Java applets...

CVE-2007-2389

CVE-2007-2389 concerns Apple QuickTime for Java 7.1.6 on Mac OS X and Windows. The root cause is that QuickTime for Java does not clear memory before use, potentially allowing a remote attacker to read memory from a web browser via Java applets. Impact is memory disclosure from the browser contex...

iDefense Security Advisory 05.23.07: Opera Software Opera Web Browser Transfer Item Pop-up Menu Stack Overflow Vulnerability

Opera Software Opera Web Browser Transfer Item Pop-up Menu Stack Overflow Vulnerability iDefense Security Advisory 05.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 23, 2007 I. BACKGROUND Opera is a cross-platform web browser. More information is available at http://www.opera.co...

RHEL 5 : firefox (RHSA-2007:0097)

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Flaws were found in the way Firefox execute...

Opera Web浏览器Torrent文件处理远程溢出漏洞

Opera是一款流行的WEB浏览器，支持多种平台。 Opera在处理畸形格式的Torrent文件时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 如果用户在Opera中的传输管理器右击了恶意的torrent项的话，就可能触发缓冲区溢出，导致执行任意指令。仅仅点击torrent链接不会触发这个漏洞。 Opera Software Opera Web Browser 9.21 http://secunia.com/advisories/25278/ http://www.opera.com/support/search/view/860/...

Design/Logic Flaw

Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service web browser crash via an "empty" .MPA file, which triggers a divide-by-zero error...

CVE-2007-2723

Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service web browser crash via an "empty" .MPA file, which triggers a divide-by-zero error...

CVE-2007-2723

Media Player Classic 6.4.9.0 is affected. Processing an empty .MPA file triggers a divide-by-zero error, allowing user-assisted remote attackers to cause a denial of service (web browser crash). The available documents confirm the vulnerability and impact but do not provide a concrete patch/versi...

CVE-2007-2723

Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service web browser crash via an "empty" .MPA file, which triggers a divide-by-zero error...

PT-2007-4039 · Mpc Hc Team · Media Player Classic

Name of the Vulnerable Software and Affected Versions: Media Player Classic version 6.4.9.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, by utilizing an "empty" .MPA file. This triggers a divide-by-zero error. Recommendations: For...

SOL7397 - Download of local FirePass files using the URL in Webtop or the Admin UI

A vulnerability exists that allows an authenticated FirePass user to download files from the filesystem of a FirePass controller. In order to download a file, the user must first log in to the FirePass controller webtop or the Admin UI, and type a specially crafted URL into their web browser. Thi...

CVE-2006-3456

The Symantec NAVOPTS.DLL ActiveX control aka Symantec.Norton.AntiVirus.NAVOptions 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is designed for use only in application-embedded web browsers, which allows remote attackers to "crash the control" via...

Microsoft Outlook Web Access远程脚本注入漏洞（MS07-026）

Outlook Web Access是Microsoft Exchange中用于通过Web浏览器读取和发送邮件的工具。 Outlook Web Access在处理特定的数据编码时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 Outlook Web Access没有正确地处理某些UTF字符集标签，因此可能未经正确地过滤便显示了基于脚本的附件。如果攻击者发送了带有特制UTF编码邮件附件的话，就可能导致在用户浏览器环境中执行任意代码或读取敏感信息。 Microsoft Exchange Server 2003 SP2 Microsoft Exchange Server 2003 SP1...