Konqueror Remote Denial Of Service

Application: Konqueror = 3.5.6 Web Site: http://www.konqueror.org/ Platform: Unix Bug: Remote Denial of service ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Greets 5 Credits =========== 1 Introduction =========== "Konqueror is an Open Source we...

[48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow

48bits Advisory QuickTime Panorama Sample Atom Heap Overflow Abstract: QuickTime is prone to a heap overflow vulnerability when parsing malformed Panorama Sample Atoms, which are used in QuickTime Virtual Reality Movies. This Vulnerability allows attackers to execute code on vulnerable...

Debian DSA-1405-3 : zope-cmfplone - missing input sanitising

It was discovered that Plone, a web content management system, allows remote attackers to execute arbitrary code via specially crafted web browser cookies. The oldstable distribution sarge is not affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

[SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 11th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1405-1] New zope-cmfplone packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 9th, 2007 http://www.debian.org/security/faq -...

US-CERT Technical Cyber Security Alert TA07-310A -- Apple QuickTime Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-310A Apple QuickTime Updates for Multiple Vulnerabilities Original release date: November 06, 2007 Last revised: -- Source: US-CERT Systems Affected Vulnerabilities in Apple QuickTime...

Viewpoint Media Player for IE 3.2 Remote Stack Overflow PoC

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bViewpoint Media Player for IE 3.2 AxMetaStream.dll Remote Stack Overflow/b...

Fedora 7 : firefox-2.0.0.4-1.fc7 (2007-0001)

Updated firefox packages that fix several security bugs are now available for Fedora Core 7. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed...

Fedora 7 : seamonkey-1.1.3-1.fc7 (2007-1181)

SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the way SeaMonkey processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause SeaMonkey to crash or potentially...

Fedora 7 : seamonkey-1.1.5-1.fc7 (2007-2601)

SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. By leveraging browser flaws, users could be fooled into possibly surrendering sensitive information CVE-2007-1095, CVE-2007-3511, CVE-2007-3844, CVE-2007-5334. Malformed web content cou...

Fedora 7 : firefox-2.0.0.5-1.fc7 (2007-1142)

Mozilla Firefox is an open source web browser, designed for standards compliance, performance and portability. Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execu...

JVN#79295963 NetCommons cross-site scripting vulnerability

NetCommons from the NetCommons Project is an open source content management system which provides e-learning and groupware functions. NetCommons contains a cross-site scripting vulnerability. This vulnerability is different from JVN51301450. Impact An attacker could execute an arbitrary script on...

GLSA-200710-31 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200710-31 Opera: Multiple vulnerabilities Michael A. Puls II discovered an unspecified flaw when launching external email or newsgroup clients CVE-2007-5541. David Bloom discovered that when displaying frames from different...

Opera: Multiple vulnerabilities

Background Opera is a multi-platform web browser. Description Michael A. Puls II discovered an unspecified flaw when launching external email or newsgroup clients CVE-2007-5541. David Bloom discovered that when displaying frames from different websites, the same-origin policy is not correctly...

[ GLSA 200710-31 ] Opera: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200710-31 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[SECURITY] Fedora 7 Update: galeon-2.0.3-12.fc7

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

GlobalLink ConnectAndEnterRoom ActiveX Control Stack Buffer Overflow Vulnerability

Description GlobalLink is prone to a stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected...

SSReader Ultra Star Reader ActiveX Control Register Method Buffer Overflow Vulnerability

Description SSReader Ultra Star Reader is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An attacker can exploit this issue to execute arbitrary code within the context of t...

[SECURITY] Fedora 7 Update: epiphany-extensions-2.18.3-4

Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2007:0980)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...