7437 matches found
Opera Web浏览器HTML注入及跨站脚本漏洞
BUGTRAQ ID: 31842 Opera是一款流行的WEB浏览器，支持多种平台。 Opera的9.61之前版本中的多个安全漏洞可能允许恶意用户执行脚本注入攻击、绕过某些安全限制或泄露敏感信息。 1 History Search功能没有正确地过滤某些输入，用户在查看恶意数据时可能在用户的浏览器会话中注入任意HTML和脚本代码，导致泄露之前所访问的页面。 2 实现Fast Forward功能中的错误可能允许通过特制的JavaScript URL在受限制的帧中执行任意脚本代码。 3 在预览新闻源期间时阻断脚本存在错误，可能导致泄露所订阅新闻源的内容，或将用户订阅到任意的新闻源。 Oper...
JVN#03300113 Blosxom vulnerable to cross-site scripting
Blosxom is an open source weblog system. Blosxom contains a cross-site scripting vulnerability. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest udpate provided by the developer. Products Affected Blosxom 2.1.1 and earlier...
Nokia Web浏览器数组排序拒绝服务漏洞
BUGTRAQ ID: 31703 Nokia Web浏览器之前被称为Nokia Mini Map浏览器，是为S60手机平台所开发的web浏览器。 Nokia Web浏览器基于S60WebKit，而S60WebKit的JavaScript核心对递归数组调用了sort函数。如果用户受骗访问了恶意的HTML页面的话，就会导致浏览器崩溃。 Nokia Web Browser for S60 Nokia ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.nokia.com foo = new Array;...
Microsoft Office CDO Protocol Cross Site Scripting Vulnerability
Description Microsoft Office is prone to a cross-site scripting vulnerability that arises because the software fails to handle specially crafted CDO protocol URIs in a proper manner. Successfully exploiting this issue may allow an attacker to execute arbitrary script code in the browser of an...
Microsoft Internet Explorer HTML Objects Uninitialized Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer...
iSEC Partners Security Advisory - 2008-002-lenovornr - Lenovo Rescue and Recovery 4.20
iSEC Partners Security Advisory - 2008-002-lenovornr https://www.isecpartners.com -------------------------------------------- Lenovo Rescue and Recovery Local Kernel Overflow Vendor: Lenovo Vendor URL: http://www.lenovo.com Versions affected: 4.20 Systems Affected: Windows XP, Windows Vista...
Nokia Web Browser for S60 - Infinite Array Sort Denial of Service
source: https://www.securityfocus.com/bid/31703/info Nokia Web Browser for S60 is prone to a denial-of-service vulnerability when handling malicious HTML files. A successful exploit of this issue allows remote attackers to consume excessive system resources in the affected browser, which will cau...
Nokia Web Browser for S60 - Infinite Array Sort Denial of Service
Nokia Web Browser for S60 - Infinite Array Sort Denial of Service source: https://www.securityfocus.com/bid/31703/info Nokia Web Browser for S60 is prone to a denial-of-service vulnerability when handling malicious HTML files. A successful exploit of this issue allows remote attackers to consume...
Opera Web Browser URI重定向远程代码执行漏洞
BUGTRAQ ID: 31631 CNCAN ID：CNCAN-2008100914 Opera是一款开放源代码的WEB浏览器。 Opera存在设计问题，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 如果恶意页面重定向Opera到一个特殊构建的URL地址，可导致Opera崩溃，给定足够的地址内容，可能导致任意代码执行。 Opera Software Opera Web Browser 8.51 Opera Software Opera Web Browser 8.50 Opera Software Opera Web Browser 8.0.2 Opera Software...
Opera Web Browser 8.51 - URI redirection Remote Code Execution
source: https://www.securityfocus.com/bid/31631/info Opera Web Browser is prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application or cause a denial-of-service condition. NOTE:...
Opera Web Browser 8.51 - URI redirection Remote Code Execution
Opera Web Browser 8.51 - URI redirection Remote Code Execution source: https://www.securityfocus.com/bid/31631/info Opera Web Browser is prone to a remote code-execution vulnerability. Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the...
DoS vulnerability in Internet Explorer
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Denial of Service уязвимости в браузере Microsoft Internet Explorer. DoS: Эксплоит: http://websecurity.com.ua/uploads/2008/IE20DoS20Exploit5.html При запуске эксплоита открывается большое количество окон, что усложняет и замедляет работу компьютер...
JVN#92651529 Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting
Nucleus is an open source content management system provided by The Nucleus Group. Nucleus EUC-JP Japanese Edition contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the specific web browser. Solution Update the Software Apply the latest update provided b...
JVN#26621646 EC-CUBE cross-site scripting vulnerability
EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different from JVN61543834, JVN36085487, and JVN99916563. Impact An arbitrary script could be executed on the user's web browser...
JVN#99916563 EC-CUBE cross-site scripting vulnerability
EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. This vulnerability is different from JVN61543834, JVN26621646, and JVN36085487. Impact An arbitrary script could be executed on the user's web browser...
Fedora 8 : Miro-1.2.3-4.fc8 / blam-1.8.3-18.fc8 / cairo-dock-1.6.2.3-1.fc8.1 / chmsee-1.0.0-4.31.fc8 / etc (2008-8399)
Mozilla Firefox is an open source Web browser. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. CVE-2008-4058, CVE-2008-4060, CVE-2008-4061...
Fedora 8 : seamonkey-1.1.12-1.fc8 (2008-8401)
Updated seamonkey packages that fix several security issues are now available for Fedora 8 and Fedora 9. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat...
Fedora 9 : Miro-1.2.4-3.fc9 / blam-1.8.5-2.fc9 / cairo-dock-1.6.2.3-1.fc9.1 / chmsee-1.0.1-5.fc9 / etc (2008-8425)
Mozilla Firefox is an open source Web browser. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. CVE-2008-4058, CVE-2008-4060, CVE-2008-4061...
