Microsoft Internet Explorer 5 - Dialog Same Origin Policy Bypass Variant (MS02-047)

source: https://www.securityfocus.com/bid/5561/info Microsoft Internet Explorer includes support for dialog windows through script calls to the two functions showModalDialog and showModelessDialog. These functions accept a URL location for the dialog content, and an option argument parameter to...

CVE-2001-0551

Buffer overflow in CDE Print Viewer dtprintinfo allows local users to execute arbitrary code by copying text from the clipboard into the Help window...

Возможное переполнение буфера в XFree86 (buffer overflow)

Возможно переполнение буфера при длинном заголовке окна...

CVE-1999-1562

The CVE-1999-1562 entry concerns gFTP, affected versions 1.13 and all before 2.0.0, which may log a user password in plaintext either in the GUI log window or in a log file. This is a plaintext credential exposure vulnerability in the logging path. Debian’s advisory (DSA-084-1) notes a fix in ver...

CVE-2001-1027

Buffer overflow in WindowMaker aka wmaker 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title...

[SECURITY] [DSA-074-1] buffer overflow in Window Maker

Package : wmaker Problem type : buffer overflow Debian-specific: no Alban Hertroys found a buffer overflow in Window Maker a popular window manager for X. The code that handles titles in the window list menu did not check the length of the title when copying it to a buffer. Since applications wil...

CVE-2001-0551

Buffer overflow in CDE Print Viewer dtprintinfo allows local users to execute arbitrary code by copying text from the clipboard into the Help window...

SCO OpenServer 5.0.x - StartX Weak XHost Permissions

SCO OpenServer 5.0.x - StartX Weak XHost Permissions source: https://www.securityfocus.com/bid/2731/info OpenServer is a Unix based operating system distributed by Santa Cruz Operations. A problem in access control of the X server could allow a local user to gain elevated privileges. When the X...

SCO OpenServer 5.0.x - StartX Weak XHost Permissions

source: https://www.securityfocus.com/bid/2731/info OpenServer is a Unix based operating system distributed by Santa Cruz Operations. A problem in access control of the X server could allow a local user to gain elevated privileges. When the X Window System is started via the xhost script,...

[SECURITY] [DSA 030-2] New m68k packages of XFree86 released

---------------------------------------------------------------------------- Debian Security Advisory DSA 030-2 [email protected] http://www.debian.org/security/ Martin Schulze February 12, 2001 - ---------------------------------------------------------------------------- Package : xfree86-1...

[SECURITY] [DSA-030-1] Multiple security problems in X

Package : xfree86-1 Vulnerability : buffer overflow, insecure tempfile handling, denial-of-service attack Debian-specific: no Chris Evans, Joseph S. Myers, Michal Zalewski, Alan Cox, and others have noted a number of problems in several components of the X Window System sample implementation from...

Linux news 18.12.00

Ядро 2.2.19-pre2 Alan Cox в новом тестовом патче ядра 2.2.19 внес изменения в VM, предложенные Andrea Arcangeli. Подробнее: ftp://ftp.kernel.org Linus Torvalds: Linux 2.4.0-test13-pre3 Третий пререлиз 13-го тестового ядра Linux 2.4. Подробнее:...

XFree86 3.3.5/3.3.6 - Xlib Display Buffer Overflow

source: https://www.securityfocus.com/bid/1805/info A vulnerability exists in xlib, the C language interface to the X Window System protocol. When applications linked to the xlib library are run, user-supplied values for the DISPLAY environment variable and the command-line argument -display are...

IE5.5 window.externalNavigateAndFind security vulnerability....

Multiple security vulnerabilities found in window.external.NavigateAndFind function in IE5.5... After the most recent patches applied the vulnerabilities seem to persist.. Actually there is no current issues discussed at microsft website... Microsoft has been notified about the problem via email...

CVE-2000-0476

xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized...

CVE-2000-0476

GNOME VTE before 0.76.3 allows a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476. Connected sources show this affects vte291 (TencentOS TencentOS Server 4 advisory) and is mirrored in Amazon Linux 2 advisories (ALAS2-2024-2610, ALAS-202...

CVE-2000-0476

xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized...

Локальный DoS против RH Linux

Команда kill -9 -1 pid приводит к полному зависанию оконного менеджера...

Local DoS : RedHat 6.0

Hello, I'm not sure if this problem has ever been addressed or not, but considering that I just spent a day recovering from a corrupted root partition and this can be done by any user with window manager access, I thought this might be worth mentioning anyway. While killing yet another zombie...

CVE-1999-0469

CVE-1999-0469 affects Internet Explorer 5.0. The vulnerability is a window spoofing flaw that allows a remote attacker to spoof a legitimate website and capture information from the client. Per the sources, exploitation is remote and the issue has a CVSSv2 base score of 5.0 (Medium) with network ...