CVE-2008-2250

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafte...

Design/Logic Flaw

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a parent window to a child window during creation of a new window, which allows local users to gain privileges via a crafte...

Z-Blog infinite loop vulnerability attack caused by blog with frequent pop-vulnerability warning-the black bar safety net

Writing a blog is now a lot of people part of every day life, many users like to record diary-like intentions in a blog to record their life and thoughts, but the blog as a personal Journal seems to be on the safe side by a lot of users ignore, personal blog security really can be ignored? A lot ...

Advisory : Opera Window Object Suppressing Remote Denial of Service

Opera Window Object Suppressing Remote Denial of Service. Version Affected: Opera 9.52 Severity: High Description: The opera browser is vulnerable to window object based denial of service attack. The opera fails to sanitize a check when window.close function is called in number of dynamically...

Google Chrome 0.2.149.30 Window Object Suppressing DoS Exploit

No description provided by source. Google Chrome Window Object Suppressing Remote Denial of Service. Version Affected: Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Severity: High Description: The Google chrome browser is vulnerable to window object based denial of service attack. The...

Opera 9.52 Window Object Suppressing Remote Denial of Service Exploit

No description provided by source. Opera Window Object Suppressing Remote Denial of Service. Version Affected: Opera 9.52 Severity: High Description: The opera browser is vulnerable to window object based denial of service attack. The opera fails to sanitize a check when window.close function is...

Opera 9.52 Window Object Suppressing Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================================== Opera 9.52 Window Object Suppressing Remote Denial of Service Exploit ===================================================================== Opera Window Object Suppressing Remo...

Google Chrome 0.2.149.30 Window Object Suppressing DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================== Google Chrome 0.2.149.30 Window Object Suppressing DoS Exploit ============================================================== Google Chrome Window Object Suppressing Remote Denial of...

Opera 9.52 - Window Object Suppressing Remote Denial of Service

Opera 9.52 - Window Object Suppressing Remote Denial of Service Opera Window Object Suppressing Remote Denial of Service. Version Affected: Opera 9.52 Severity: High Description: The opera browser is vulnerable to window object based denial of service attack. The opera fails to sanitize a check...

Google Chrome 0.2.149.30 - Window Object Suppressing Denial of Service

Google Chrome 0.2.149.30 - Window Object Suppressing Denial of Service Google Chrome Window Object Suppressing Remote Denial of Service. Version Affected: Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Severity: High Description: The Google chrome browser is vulnerable to window object bas...

Opera 9.52 - Window Object Suppressing Remote Denial of Service

Opera Window Object Suppressing Remote Denial of Service. Version Affected: Opera 9.52 Severity: High Description: The opera browser is vulnerable to window object based denial of service attack. The opera fails to sanitize a check when window.close function is called in number of dynamically...

Google Chrome 0.2.149.30 - Window Object Suppressing Denial of Service

Google Chrome Window Object Suppressing Remote Denial of Service. Version Affected: Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Severity: High Description: The Google chrome browser is vulnerable to window object based denial of service attack. The Google Chrome fails to sanitize a chec...

CVE-2008-3837

CVE-2008-3837 affects Mozilla Firefox (before 2.0.0.17 and 3.x before 3.0.2) and SeaMonkey (before 1.1.12). A crafted onmousedown action that calls window.moveBy can allow a user‑assisted remote attacker to move a window during a mouse click, potentially triggering a drag‑and‑drop–related action ...

mozilla: Forced mouse drag

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a...

mozilla: Forced mouse drag

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a...

CVE-2008-3837

Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a...

Mozilla Firefox < 3.0.2 Multiple Vulnerabilities

Binary data 4691.prm...

Gentoo Security Advisory GLSA 200409-34 (X)

The remote host is missing updates announced in advisory GLSA 200409-34. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firefox 3.0.x < 3.0.2 Multiple Vulnerabilities

The installed version of Firefox 3.0 is earlier than 3.0.2. Such versions are potentially affected by the following security issues : - An attacker can cause the content window to move while the mouse is being clicked, causing an item to be dragged rather than clicked-on MFSA 2008-40. - Privilege...

Forced mouse drag — Mozilla

Mozilla developer Paul Nickerson reported a variant of a click-hijacking vulnerability discovered in Internet Explorer by Liu Die Yu. The vulnerability allowed an attacker to move the content window while the mouse was being clicked, causing an item to be dragged rather than clicked-on. This issu...