Internet Explorer CButton Use After Free Vulnerability

Added: 01/04/2013 CVE: CVE-2012-4792 BID: 57070 OSVDB: 88774 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem All references to DOM button objects are not properly removed when a DOM buttom object is deleted. If the stale reference...

[BeEF] Fake Browser Update Exploitation

How to use BeEF Framework for fake browser update exploitation. Fake Browser Update : - In BeEF Framework there is a new feature available in social-engineering called Clippy using this feature we are sending the fake Update notification and if user click on that so obviously he is going to insta...

Fedora Update for firefox FEDORA-2012-18661

Check for the Version of firefox OpenVAS Vulnerability Test Fedora Update for firefox FEDORA-2012-18661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Opera Web Browser重复站点访问地址栏URI伪造漏洞

Bugtraq ID:56984 Opera Web Browser是一款开源的WEB浏览器。 通过连续快速重复请求加载目标站点，可导致Opera不正确显示地址栏，攻击者可以构建恶意WEB页，诱使用户解析，欺骗目标用户，进行钓鱼等攻击。 0 Opera Web Browser 12.12之前版本 厂商解决方案 Opera Web Browser 12.12已经修复此漏洞，建议用户下载使用： http://www.opera.com...

[SECURITY] Fedora 16 Update: firefox-17.0-1.fc16

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

RHEL 5 / 6 : flash-plugin (RHSA-2012:1569)

An updated Adobe Flash Player package that fixes three security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

openSUSE: Security Advisory for opera (openSUSE-SU-2012:0610-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows CVE-2012-4774 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed attempts may trigger a denial-of-service condition. Technologies Affected...

Low severity flaw in RIM BlackBerry PlayBook OS browser

Summary The web browser which comes as part of the RIM BlackBerry PlayBook OS can be tricked into disclosing the contents of local files through the planting of a malicious HTML file through the standard download mechanism. It should be noted that in order to exploit this issue, user interaction ...

Dolphin3D 1.52 / 1.60 Command Execution

Dolphin3D web browser ActiveX Remote Command Execution Date: Dez 9 2012 Author: Rh0 Affected Version: Dolphin3D 1.52 and 1.60 Tested on: Windows XP Professional SP3 EN require 'msf/core' class Metasploit3 'Dolphin3D web browser ActiveX Exec', 'Description' = %q This module exploits the default...

Opera Web Browser 12.11 - Crash (PoC)

Title : Opera Web Browser 12.11 WriteAV Vulnerability Version : 12.11 Build 1661 and 12.12 Date : 2012-12-03 Vendor : http://www.opera.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : windows XP SP3 Author : coolkaveh Opera is a web browser and Internet suite...

Opera Web Browser 12.11 - Crash (PoC)

Opera Web Browser 12.11 - Crash PoC Title : Opera Web Browser 12.11 WriteAV Vulnerability Version : 12.11 Build 1661 and 12.12 Date : 2012-12-03 Vendor : http://www.opera.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : windows XP SP3 Author : coolkaveh Opera...

RIM BlackBerry PlayBook OS 1.0.8.6067 Local File Access Vulnerability

The web browser which comes as part of the RIM BlackBerry PlayBook OS can be tricked into disclosing the contents of local files through the planting of a malicious HTML file through the standard download mechanism. It should be noted that in order to exploit this issue, user interaction is...

Opera Web Browser 12.11 Crash PoC

Heap corruption during the handling of the Gif files Context-dependent Successful exploits can allow attackers to execute arbitrary code Title : Opera Web Browser 12.11 WriteAV Vulnerability Version : 12.11 Build 1661 and 12.12 Date : 2012-12-03 Vendor : http://www.opera.com/ Impact : High Contac...

[SECURITY] Fedora 18 Update: firefox-17.0-1.fc18

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

CentOS Update for firefox CESA-2012:1482 centos5

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2012:1482 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 17 Update: firefox-17.0-1.fc17

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2012:1482 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVS...

CVE-2012-5839

CVE-2012-5839 is a heap-based buffer overflow in Mozilla's gfxShapedWord::CompressedGlyph::IsClusterStart that affects Firefox and related Mozilla components. Affected software includes Mozilla Firefox before 17.0 (and ESR 10.x before 10.0.11), Thunderbird before 17.0 (and ESR 10.x before 10.0.11...

RHEL 5 / 6 : firefox (RHSA-2012:1482)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1482 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were...