7430 matches found
w3m: Format string vulnerability
Background w3m is a multi-platform text-based web browser. Description w3m in -dump or -backend mode does not correctly handle printf format string specifiers in the Common Name CN field of an X.509 SSL certificate. Impact An attacker could entice a user to visit a malicious website that would lo...
Opera Web浏览器JPEG图形DHT标记堆溢出漏洞
Opera是一款流行的WEB浏览器，支持多种平台。 Opera没有正确地处理JPEG文件头中的DHT标记，远程攻击者可能利用此漏洞控制用户机器。 如果DHT标记中包含有无效的索引字节数的话，攻击者就可以触发堆溢出，导致执行任意指令。 Opera Software Opera 9.02 Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.opera.com...
OmniWeb Browser < 5.5.2 Javascript alert Function Format String
Binary data 3879.prm...
iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability
Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability iDefense Security Advisory 01.05.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 05, 2007 I. BACKGROUND Opera is a cross-platform web browser. More information is available at http://www.opera.com/ I...
iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser createSVGTransformFromMatrix Object Typecasting Vulnerability
Opera Software Opera Web Browser createSVGTransformFromMatrix Object Typecasting Vulnerability iDefense Security Advisory 01.05.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 05, 2007 I. BACKGROUND Opera is a cross-platform web browser. More information is available at...
JVN#65500885 Serene Bach cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. Also, session information or credential information kept in a cookie could be leaked. Solution Products Affected Serene Bach ver 2.05R and earlier Serene Bach ver 2.08D and earlier sb 1.13D and earlier sb 1.18R and earlier...
SoftArtisans SAFileUp 5.0.14 - viewsrc.asp Script Source Disclosure
SoftArtisans SAFileUp 5.0.14 - viewsrc.asp Script Source Disclosure SoftArtisans FileUp viewsrc.asp remote script source disclosure exploit Advisory Name: SoftArtisans FileUpTM viewsrc.asp remote script source disclosure exploit Tested and Confirmed Vulerable: SoftArtisans SAFileUpTM 5.0.14...
CentOS 4 : Firefox (CESA-2006:0758)
Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...
RHEL 4 : firefox (RHSA-2006:0758)
Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...
RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2006:0759)
Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...
JVN#45006961 Joomla! cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. If session information in a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected Joomla! 1.0.11 and earlier...
Mozilla Firefox未明JavaScript远程代码执行漏洞
Mozilla Firefox是一款开放源代码的web浏览器程序。 Mozilla Firefox在使用用户数据建立新的Javascript对象时不正确进行过滤，远程攻击者可以利用漏洞在目标用户浏览器上执行任意代码。 Mozilla Firefox 1.5 beta 2 Mozilla Firefox 1.5 beta 1 Mozilla Firefox 1.5 .8 Mozilla Firefox 1.5 .7 Mozilla Firefox 1.5 .6 Mozilla Firefox 1.5 .6 Mozilla Firefox 1.5 .5 Mozilla Firefox 1.5...
Internet Explorer Undisclosed Script Handler Buffer Overflow (MS06-072; CVE-2006-5579)
Microsoft Internet Explorer IE contains a remote code execution vulnerability. By convincing a user to visit a specially crafted Web page, a remote attacker may trigger this vulnerability to deny service from legitimate users by causing the victim's Web browser to crash or execute arbitrary code ...
JVN#02729869 pnamazu cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. Solution Products Affected pnamazu-2006.02.28 and earlier For more information, refer to the developer's website...
firefox security update
CentOS Errata and Security Advisory CESA-2006:0758 Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web...
[SECURITY] Fedora Core 5 Update: firefox-1.5.0.9-1.fc5
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora Core 6 Update: firefox-1.5.0.9-1.fc5
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
DSA-1240-1 links2
Bulletin has no description...
devhelp, seamonkey security update
CentOS Errata and Security Advisory CESA-2006:0759 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open sour...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...