BaoFeng Storm MPS.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities

Description BaoFeng Storm ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application using...

Broderbund Expressit 3DGreetings Player ActiveX control buffer overflows

Overview The Broderbund Expressit 3DGreetings Player ActiveX control contains multiple buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The 3DGreetings Player is an ActiveX control that displays 3D greeting cards...

PPStream PowerPlayer.DLL ActiveX Control Buffer Overflow Vulnerability

Description PPStream PowerPlayer ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the...

JVN#82276964 Tuigwaa cross-site scripting vulnerability

Tuigwaa from the Tuigwaa Project is open source software to develop web applications. Tuigwaa contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the developer. For mo...

Opera: Multiple vulnerabilities

Background Opera is a multi-platform web browser. Description An error known as "a virtual function call on an invalid pointer" has been discovered in the JavaScript engine CVE-2007-4367. Furthermore, iDefense Labs reported that an already-freed pointer may be still used under unspecified...

Microsoft IE CSS字符串内存破坏漏洞（MS07-045）

BUGTRAQ ID: 25288 CVECAN ID: CVE-2007-0943 Internet Explorer是微软发布的非常流行的WEB浏览器。 IE 5.0在解析样式表CSS文件时存在安全漏洞，远程攻击者可能利用此漏洞控制用户系统。 由于没有对数据指针进行必要的检查，当处理特殊格式的CSS文件时，会造成指针越界，并改写内存数据。通过精心构造数据，攻击着可能远程执行任意指令。攻击者可以创建恶意WEB页面诱使用户访问，从而以该用户身份执行任意任意命令。如果该用户是管理员，则攻击者可以完全控制用户所在系统。即使将IE的安全级别设置为高，用户仍然会受此漏洞影响。 Microsoft...

Opera Web浏览器非法指针远程代码执行漏洞

Opera Web Browser是一款流行开放源代码的WEB浏览器。 Opera Web Browser处理恶意Javascript存在NULL指针引用问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 虚拟函数调用非法指针可导致应用攻击者构建的数据，导致任意代码执行，目前没有详细漏洞细节提供。 Opera Software Opera Web Browser 9.22 Opera Software Opera Web Browser 9.21 Opera Software Opera Web Browser 9.20 beta1 Opera Software Opera Web...

Opera < 9.23 Crafted Javascript Arbitrary Code Execution

The version of Opera installed on the remote host reportedly allows for execution of arbitrary code via specially crafted JavaScript if a user can be tricked into visiting a malicious site. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25900; scriptversion"1.17";...

Microsoft Internet Explorer CSS Strings Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because the application fails to properly handle certain CSS data. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits may allow an...

MS07-050: Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127)

The remote host is running a version of Internet Explorer or Outlook Express with a bug in the Vector Markup Language VML handling routine that may allow an attacker execute arbitrary code on the remote host by sending a specially crafted email or by luring a user on the remote host into visiting...

IBM and Lenovo Access Support acpRunner ActiveX control format string vulnerability

Overview The IBM Lenovo Access Support acpRunner ActiveX control contains a format string vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Access Support software package for IBM and Lenovo systems includes several...

JVN#66303599 WebCart cross-site scripting vulnerability

WebCart provided by CGI's is shopping cart software. WebCart's management interface contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version provided by the vendor. For more...

CVE-2007-4240

The checklogout function in class/auth.php in Help Center Live hcl 2.1.3a sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to delete administrative users and have other unspecified impact via certain requests to 1...

Firefox/Thunderbird/SeaMonkey Chrome加载about:blank窗口权限提升漏洞

BUGTRAQ ID: 25142 CVECAN ID: CVE-2007-3844 Firefox/Thunderbird/SeaMonkey是Mozilla所发布的WEB浏览器和邮件/新闻组客户端。 Firefox/Thunderbird/SeaMonkey在处理about:blank页面时存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意命令。 window.open"about:blank"; content.location = "about:blank";...

CVE-2007-2408

The CVE-2007-2408 issue affects WebKit/Safari: WebKit in Apple Safari 3 Beta (before Update 3.0.3) does not properly honor an unchecked Enable Java setting, allowing remote attackers to execute Java applets via a crafted page. Vulnerability lies in how the Java preference is processed, enabling p...

[SECURITY] [DSA 1344-1] New iceweasel packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1344-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 3rd, 2007 http://www.debian.org/security/faq -...

DSA-1344-1 iceweasel

Bulletin has no description...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2007:0722)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

CentOS 4 / 5 : firefox (CESA-2007:0724)

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way...

Fedora Core 6 : firefox-1.5.0.12-4.fc6 (2007-642)

Mozilla Firefox is an open source web browser, designed for standards compliance, performance and portability. Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execu...