Microsoft Internet Explorer Uninitialized Memory (CVE-2010-1259) Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Meetin...

Apple Webkit CSS Charset Text Transformation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Webkit's...

Internet Explorer and SharePoint 'toStaticHTML' Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Microsoft SharePoint are prone to a cross-domain information-disclosure vulnerability because they fail to properly enforce the same-origin policy. An attacker can exploit this issue to access local files or content from a browser window in another doma...

Mozilla Multiple Products CSSValue Array Memory Corruption (CVE-2008-2785)

Firefox is an open source web browser developed by Mozilla Foundation. The application is capable of interpreting and rendering many types of Internet content, including various versions of HTML, XML, CSS Cascade Style Sheet, JavaScript, various graphic formats, and so on. Firefox is made availab...

Mozilla Pushes Back Firefox 3.6.4

Originally expected for today, Mozilla has confirmed that it is delaying the the release of version 3.6.4 of its open source Firefox web browser, the next security and stability update to the 3.6.x branch of Firefox. Instead, Mozilla has announced the availability of a release candidate for publi...

Mozilla Firefox ConstructFrame With Floating First-letter Memory Corruption (CVE-2009-2462)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Mozilla Multiple Products JavaScript String Replace Buffer Overflow (CVE-2009-3075)

Mozilla Firefox and Seamonkey are popular open source web browsers from Mozilla Foundation. A heap buffer overflow vulnerability has been reported in Mozilla Firefox and SeaMonkey products. The vulnerability is due to improper processing of a crafted substring when performing the replace operatio...

Update Protection against Adobe Shockwave Player DIR Files PAMI Chunk Code Execution Vulnerability (APSB10-12)

A remote code execution vulnerability has been identified in Adobe Shockwave Player. Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. An attacker can exploi...

Flock Web Browser 2.5.6 Denial Of Service

====================================================================== Flock web browser v2.5.6 Remote Memory Corrupt Crash Exploit ====================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /...

Opera Browser Multiple Denial Of Service Vulnerability (Windows)

The host is installed with Opera Web Browser and is prone to Multiple Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodoperamultdosvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Opera Browser Multiple Denial Of Service Vulnerability Windows Authors: Antu Sanadi Copyright:...

REvolution 10.02 - Cross-Site Request Forgery

REvolution 10.02 - Cross-Site Request Forgery Vulnerability ID: HTB22367 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 06 May 2010 Vulnerability...

Mozilla Shell Protocol Validation (CVE-2004-0648)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Adobe Shockwave Player DIR Files PAMI Chunk Code Execution (APSB10-12; CVE-2010-1292)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. A remote code execution vulnerability has been identified in Adobe Shockwave Player. An attacker can exploi...

Adobe Director Files (CVE-2010-0127; CVE-2010-0128; CVE-2010-0129; CVE-2010-0130; CVE-2010-0986; CVE-2010-0987; CVE-2010-1280; CVE-2010-1281; CVE-2010-1282; CVE-2010-1283; CVE-2010-1284; CVE-2010-1286; CVE-2010-1287; CVE-2010-1288; CVE-2010-1289; CVE-2010-1290; CVE-2010-1291; CVE-2010-1292)

Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. Multiple vulnerabilities have been identified in Adobe Shockwave Player. The vulnerabilities are due to...

Mozilla Firefox Top-level Script Object Offset Calculation Memory Corruption (CVE-2009-3073)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, CSS, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the...

Mozilla Firefox nsPropertyTable PropertyList Memory Corruption (CVE-2009-3070)

A memory corruption vulnerability has been reported in Mozilla Firefox web browser. The vulnerability is due to improper handling of PropertyLists in nsPropertyTable while parsing a specially crafted web page. Remote attackers can exploit this vulnerability by enticing target users to visit a...

Apple Safari Vulnerability

US-CERT is aware of a vulnerability affecting Apple Safari. By convincing a user to open a specially crafted web page, an attacker may be able to execute arbitrary code. Exploit code for this vulnerability is publicly available. US-CERT encourages users and administrators to disable JavaScript as...

Microsoft Internet Explorer, Google Chrome, Opera and Mozilla Firefox DoS

Large buffer within marquee tag causes browser to crash...

Opera Closes Severe Hole in Browser

Opera has released version 10.53 of its Opera web browser for Windows and Mac OS X in order to close a vulnerability which the software maker rates as “extremely severe.” The hole allows crafted web pages to inject and run code on a PC. It would only be necessary to visit such a web page for the...

Safari 4.0.3 / 4.0.4 Stack Exhaustion

a="var b="";while1b=b+b;document.writeb;"; while1 a=a+a; document.writea; //Written by: Fredrik Nordberg Almroth //URL: http://h.ackack.net/ //Affected: Safari 4.0.3 & 4.0.4 - Other versions might be vulnerable aswell. //Note: The error seem lay in the window.location property, when called...