7437 matches found
CVE-2009-2541
The web browser on the Sony PLAYSTATION 3 PS3 allows remote attackers to cause a denial of service memory consumption and console hang via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...
CVE-2009-2541
Technical details for CVE-2009-2541 are not provided in the connected documents. The initial description mentions a PS3 browser DoS via a large length value, but no concrete vendor/product/version, affected components, impact, or fix is given in the supplied materials.
Mozilla Firefox JIT Escape Function Memory Corruption
Added: 07/13/2009 CVE: CVE-2009-2477 BID: 35660 OSVDB: 55846 Background Mozilla is a suite of Internet client products available for multiple platforms. Problem A memory corruption vulnerability in Mozilla Firefox in the way it handles JIT escape function calls allows arbitrary code injection and...
Opera Web Browser 'Refresh' Header XSS Vulnerabilities (Linux)
The host is installed with Opera Web Browser and is prone to Cross-Site Scripting Vulnerability. OpenVAS Vulnerability Test $Id: gboperaxssvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ Opera Web Browser 'Refresh' Header XSS Vulnerabilities Linux Authors: Antu Sanadi Copyright: Copyright c 2009...
[Full-disclosure] CORE-2009-0519 - Awingsoft Awakening Winds3D Viewer remote command execution vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Awingsoft Awakening Winds3D Viewer remote command execution vulnerability 1. Advisory Information Title: Awingsoft Awakening Winds3D Viewer remote command execution...
Opera Web Browser 'Refresh' Header XSS Vulnerabilities - Windows
Opera Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Opera Web Browser 'Refresh' Header XSS Vulnerabilities - Linux
Opera Web Browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[oCERT-2009-008] Dillo integer overflow
2009-008 Dillo integer overflow Description: Dillo, an open source graphical web browser, suffers from an integer overflow which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. The vulnerability is triggered by HTML pages with embedded PNG images, the...
RedHat Security Advisory RHSA-2009:1134
The remote host is missing updates announced in advisory RHSA-2009:1134. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. A flaw was found in the way that SeaMonkey parsed malformed HTML mail messages. If a user opened a specially-crafted HTML...
Protection against Mozilla Firefox SSL Tampering via non-200 Responses to Proxy CONNECT Requests
Mozilla Firefox, Thunderbird and SeaMonkey use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server. A vulnerability was reported in Mozilla Firefox, a feely available Web browser. The vulnerability resides in the handling of non-2...
HP Multiple LasterJet Printer xss
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com/ Bug: Multiple...
Google Chrome HTTP响应处理缓冲区溢出漏洞
BUGTRAQ ID: 35462 CVECAN ID: CVE-2009-2121 Google Chrome是Google发布的开源WEB浏览器。 Google Chrome在处理HTTP服务器的响应时存在缓冲区溢出漏洞。如果用户受骗访问了恶意网站并从服务器接收到了包含有超长分块编码块大小的响应报文，就会在memmove中触发溢出，导致浏览器崩溃或执行任意代码。 Google Chrome 2.0.172.33 厂商补丁： Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Debian: Security Advisory (DSA-1820-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
多个浏览器HTTPS内容上下文中的HTTP资源安全绕过漏洞
Bugraq ID: 35403 CVE ID：CVE-2009-2065 CVE-2009-2064 CVE-2009-2066 CVE-2009-2067 CNCVE ID：CNCVE-20092065 CNCVE-20092064 CNCVE-20092066 CNCVE-20092067 当页面通过不安全方法对安全内容请求资源进行操作时不正确显示警告，可导致绕过多个WEB浏览器安全限制。 攻击者可以利用这个漏洞进行钓鱼攻击或获得敏感信息。不过要利用此漏洞，攻击者必须截获或控制网络通信，如通过中间人，DNS毒药等攻击。 如下浏览器受此漏洞影响： Microsoft Internet...
firefox, xulrunner security update
CentOS Errata and Security Advisory CESA-2009:1095 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open sour...
Foxit Reader contains multiple vulnerabilities in the processing of JPX data
Overview Foxit Reader contains multiple vulnerabilities that may allow an attacker to execute arbitrary code. Description Foxit Reader is software designed to view Portable Document Format PDF files. Foxit Reader contains multiple vulnerabilities in the handling of JPX JPEG2000 streams. These...
[SECURITY] Fedora 9 Update: firefox-3.0.11-1.fc9
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 9 Update: epiphany-extensions-2.22.1-12.fc9
Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...
[SECURITY] Fedora 9 Update: kazehakase-0.5.6-4.fc9.3
Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine...