[SECURITY] Fedora 11 Update: epiphany-extensions-2.26.1-11.fc11

Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...

[SECURITY] Fedora 12 Update: galeon-2.0.7-22.fc12

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 12 Update: firefox-3.5.9-1.fc12

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

JVN#41842181 PrettyFormMail vulnerable to cross-site scripting

PrettyFormMail from PrettyBook is a software that sends emails with contents that are input into a HTML form. PrettyFormMail contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use PrettyFormMail As patches will not ...

Microsoft IE跨域信息泄露漏洞（MS10-018）

BUGTRAQ ID: 39047 CVE ID: CVE-2010-0494 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer中存在信息泄露漏洞，可能允许脚本访问其他域或Internet Explorer区中的浏览器窗口。攻击者可以通过创建特制网页来利用这个漏洞，如果用户查看了网页并跨第二个浏览器窗口拖拉了该窗口，就会导致信息泄露。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer...

Microsoft Internet Explorer 张贴编码信息泄露漏洞（MS10-018）

BUGTRAQ ID: 39028 CVE ID: CVE-2010-0488 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 在提交数据时Internet Explorer处理使用特制编码字符串的内容的方式存在信息泄露漏洞。攻击者可以通过创建特制的网页来利用这个漏洞，如果用户查看了该网页就会导致信息泄露。成功利用这个漏洞的攻击者可以查看本地计算机或其他域或Internet Explorer区中的其他浏览器窗口的内容。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP...

Firefox < 3.5.9 Multiple Vulnerabilities

The installed version of Firefox is earlier than 3.5.9. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-16 - A select event handler for XUL tree items can be called after the item is deleted. MFSA 2010-...

Microsoft Internet Explorer 'Tabular Data Control' ActiveX Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks m...

Update Protection against Mozilla Firefox JIT escape Function Memory Corruption

A memory corruption vulnerability exists in Mozilla Firefox, a web browser developed by Mozilla Foundation. This flaw is due to the way Mozilla Firefox handles JIT Just-in-Time escape Function calls. A remote attacker can exploit this vulnerability by enticing a target user to open a malicious we...

[SECURITY] Fedora 13 Update: firefox-3.6.2-1.fc13

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 13 Update: galeon-2.0.7-25.fc13

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

Microsoft Internet Explorer 'CStyleSheet' Uninitialized Memory Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. NOTE: This issue was originally...

Mozilla Firefox 3.6 WOFF解码器整数溢出漏洞

BUGTRAQ ID: 38298 CVE ID: CVE-2010-1028 Firefox是一款流行的开源WEB浏览器。 Firefox中所使用的Web开放字体格式（WOFF）解码器在解析字体文件中所指定的表格大小时存在最终可导致堆溢出的整数溢出漏洞。如果用户所访问网页中所嵌入的WOFF字体包含有超长的origLen字段的话，就可以触发这个溢出，导致执行任意代码。 Mozilla Firefox 3.6 临时解决方法： 禁止下载远程字体，在浏览器的地址栏中输入about:config并将以下值设置为false： gfx.downloadablefonts.enabled 厂商补丁：...

Mozilla Firefox ClearTextRun Function Memory Corruption (CVE-2009-1313)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Opera 10.51 Closes HTTP Header Holes

Opera has announced the release of version 10.51 of its web browser for Windows-based systems, closing two “highly severe” security holes. The security and stability update addresses a previously reported vulnerability caused by an incorrectly set value in HTTP headers. Read the full article. The...

Internet Explorer 6

Microsoft Internet Explorer 6 IE6 is the sixth major revision of Internet Explorer, a web browser developed by Microsoft for Windows operating systems. It was released on August 27, 2001. It is the default browser shipped with Windows XP and Windows Server 2003, and was also made available for...

VUPEN Security Research - Apple Safari ColorSync Profile Integer Overflow Vulnerability

VUPEN Security Research - Apple Safari ColorSync Profile Integer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser, with 4.45 of the...

Mozilla Firefox Browser Engine Memory Corruption (CVE-2009-3382)

Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...

Microsoft Internet Explorer 'iepeers.dll' Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Meetin...

Mozilla Firefox Tag Order Memory Corruption (CVE-2006-0749)

Mozilla Firefox is a very popular web browser developed by the Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions HTML, Cascading Style Sheets, Javascript, various graphics formats, and so on. The...