CVE-2008-5282

CVE-2008-5282 concerns the W3C Amaya Web Browser (notably version 10.0.1) and describes multiple stack-based buffer overflow vulnerabilities. The flaws allow remote attackers to execute arbitrary code by supplying a link with an excessively long HREF attribute and by using a DIV tag with a very l...

CVE-2008-5282

Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via 1 a link with a long HREF attribute, and 2 a DIV tag with a long id attribute...

W3C Amaya 10.1 Web Browser (id) Remote Stack Overflow PoC

No description provided by source. W3C Amaya 10.1 Web Browser Amaya id Remote Stack Overflow Vulnerability Written and discovered by: r0ut3r writ3r at gmail.com / www.bmgsec.com.au Advisory: http://www.bmgsec.com.au/advisory/41/ ------------------------------------------------------ Shellcode...

Amaya (id) Remote Stack Overflow Vulnerability

W3C Amaya 10.1 Web Browser Amaya id Remote Stack Overflow Vulnerability Written and discovered by: r0ut3r writ3r at gmail.com / www.bmgsec.com.au Advisory: http://www.bmgsec.com.au/advisory/41/ ------------------------------------------------------ Shellcode notes: The application fails to...

w3camayaurl-overflow.txt

W3C Amaya 10.1 Web Browser Amaya URL Bar Remote Stack Overflow Vulnerability Written and discovered by: r0ut3r writ3r at gmail.com / www.bmgsec.com.au Advisory: http://www.bmgsec.com.au/advisory/40/ ------------------------------------------------------ Shellcode notes: The application fails to...

[SECURITY] Fedora 10 Update: drupal-cck-6.x.2.0-3.fc10

The Content Construction Kit allows you create and customize fields using a web browser. The 4.7x version of CCK creates custom content types and allows you to add custom fields to them. In Drupal 5.x custom content types can be created in core, and CCK allows you to add custom fields to any...

DSquare Exploit Pack: D2SEC_OPERAHEAP

Name| d2secoperaheap ---|--- CVE| CVE-2008-5178 Exploit Pack| D2ExploitPack Description| Opera Web Browser file:// Heap Overflow Notes|...

Opera Web浏览器file://处理器堆溢出漏洞

BUGTRAQ ID: 32323 Opera是一款流行的WEB浏览器，支持多种平台。 Opera Web浏览器的file://处理器没有正确地验证用户提供输入参数，如果用户受骗打开了恶意的HTML文档并向处理器传送了大约16,500个字符的话，就可以触发堆溢出，导致执行任意指令。请注意无法从Internet调用file://处理器，因此访问恶意网页不会触发这个溢出。 Opera Software Opera 9.62 Opera Software -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Novell iPrint Client nipplib.dll ActiveX Control Buffer Overflow (CVE-2008-2436)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A buffer overflow vulnerability has been reported in Novell iPrint Client. The vulnerability is due to a boundary error in the Novell iPrint Client nipplib.dll ActiveX contro...

Immunity Canvas: SAFARI_FILE_STEALING

Name| safarifilestealing ---|--- CVE| CVE-2008-4216 Exploit Pack| CANVAS Description| Safari 3.2 File Stealing Notes| A Warning: Due to the nature of this exploit, a file error.html will be left behind on the target system CVE Name: CVE-2008-4216 VENDOR: Apple NOTES: There are a lot of things...

Apple Safari 3.2版本修复多个安全漏洞

BUGTRAQ ID: 32291 CVECAN ID: CVE-2008-4216,CVE-2008-3644,CVE-2008-3623 Safari是苹果家族机器操作系统中默认捆绑的WEB浏览器。 WebKit的插件接口没有阻止插件启动本地URL，访问恶意站点可能允许远程攻击者在Safari中启动本地文件，导致泄露敏感信息。 禁止自动填充表单字段可能无法防范在浏览器页面缓存中存储字段中的数据，这可能导致向本地用户泄露敏感信息。 CoreGraphics处理颜色空间时存在堆溢出，查看恶意的图形可能导致浏览器意外终止或执行任意代码。 Apple Safari 3.2 Apple ---...

Fedora 8 : Miro-1.2.7-2.fc8 / blam-1.8.3-19.fc8 / cairo-dock-1.6.3.1-1.fc8.1 / chmsee-1.0.0-5.31.fc8 / etc (2008-9667)

Updated firefox and xulrunner packages that fix various security issues are now available for Fedora Core 8. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the processin...

devhelp, firefox, nss, xulrunner, yelp security update

CentOS Errata and Security Advisory CESA-2008:0978 An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open...

[SECURITY] Fedora 9 Update: mugshot-1.2.2-3.fc9

Mugshot works with the server at mugshot.org to extend the panel, web browser, music player and other parts of the desktop with a "live social experience" and interoperation with online services you and your friends use. It's fun and easy...

[SECURITY] Fedora 9 Update: galeon-2.0.7-3.fc9

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 9 Update: kazehakase-0.5.6-1.fc9.1

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine...

[SECURITY] Fedora 9 Update: epiphany-2.22.2-5.fc9

Epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

[SECURITY] Fedora 9 Update: epiphany-extensions-2.22.1-5.fc9

Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...

[SECURITY] Fedora 9 Update: firefox-3.0.4-1.fc9

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 8 Update: galeon-2.0.4-6.fc8.3

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...