Microsoft Internet Explorer mshtml.dll Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the user's account and possibly the underlying computer...

JVN#90712589 Multiple Cybozu products vulnerable to cross-site scripting

Multiple Cybozu products are vulnerable to cross-site scripting. This vulnerability is different from JVN50342989. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest updates provided by the vendor. Products Affected Cybozu Office 6....

Opera Web Browser Bitmap文件RLE远程拒绝服务漏洞

Opera是一款开放源代码的WEB浏览器。 Opera处理BMP文件存在问题，远程攻击者可以利用漏洞使浏览器停止响应，造成拒绝服务攻击。 攻击者特殊构建一个包含最大宽度的，并且数据使用00 02 FF FF opcodes填充的BMP文件，并由一个包含多个img标签显示BMP文件的WEB页来诱使用户使用Opera来访问，可导致应用程序停止响应，造成拒绝服务攻击。 Opera Software Opera Web Browser 9.50 beta Opera Software Opera Web Browser 9.24 目前没有解决方案提供： http://www.opera.com/...

Opera Web浏览器位图文件RLE远程拒绝服务漏洞

BUGTRAQ ID: 26721 Opera是一款流行的WEB浏览器，支持多种平台。 Opera在处理畸形的BMP文件时存在漏洞，可能导致系统一定时间的性能大幅下降。 BMP文件允许游程长度编码4位和8位的位图。BMP格式中所使用的RLE有一些额外的功能，如移动到其他行和列的写指针（00 02 XX YY）。Opera实现00 02 XX YY功能的算法过于缓慢，正常解压算法是将XX和YY width添加到写指针，而Opera的实现要执行XX + YY width递增，每次递增都要执行自己的检查和其他计算。 攻击者可以创建最大宽度（约32000像素）的BMP文件，用00 02 FF F...

DSA-1424-1 iceweasel - several vulnerabilities

Bulletin has no description...

JVN#02854109 HttpLogger vulnerable to cross-site scripting

Klab HttpLogger is full-text search software for web browser histories. HttpLogger is vulnerable to cross-site scripting. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the developer. For more information, ref...

MS Internet Explorer 6 (Content-Type) Stack Overflow Crash

No description provided by source. !/usr/bin/perl Stack overflow in wininet.dll while parsing huge 1M Content-Type response ex.: Unhandled exception at 0x771c00ee in IEXPLORE.EXE: 0xC00000FD: Stack overflow. discovered by Firestorm Usage: 1 run this code 2 open http://127.0.0.1/ with IE...

Fedora Core 6 : firefox-1.5.0.12-7.fc6 (2007-756)

Updated firefox packages that fix several security issues are now available for Fedora Core 6. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. A cross-site scripting flaw was found in the way Firefo...

[SECURITY] Fedora Core 6 Update: firefox-1.5.0.12-7.fc6

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 8 Update: galeon-2.0.3-16.fc8

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 8 Update: epiphany-2.20.1-6.fc8

epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

[SECURITY] Fedora 8 Update: epiphany-extensions-2.20.1-4.fc8

Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...

[SECURITY] Fedora 8 Update: firefox-2.0.0.10-1.fc8

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 8 Update: kazehakase-0.5.0-1.fc8.2

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable...

[SECURITY] Fedora 7 Update: firefox-2.0.0.10-1.fc7

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 7 Update: epiphany-extensions-2.18.3-6

Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...

[SECURITY] Fedora 7 Update: galeon-2.0.3-14.fc7

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 7 Update: epiphany-2.18.3-5.fc7

epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

Apple QuickTime RTSP Content-Type header stack buffer overflow

Overview Apple QuickTime contains a stack buffer overflow vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Real Time Streaming Protocol RTSP is a protocol that is used by streaming media systems. The Appl...

Xunlei Thunder PPLAYER.DLL_1_WORK ActiveX Control Buffer Overflow Vulnerability

Description Xunlei Thunder PPlayer ActiveX Control is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the applicati...