CVE-2006-1725

Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1 causes certain windows to become translucent due to an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code...

CVE-2006-1740

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site...

CVE-2006-1741: Improper Neutralization of Input During Web Page Generation

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by 1 "using a modal alert to suspend an event handler while a new page is being loaded", 2 using eval, and using...

CVE-2006-1740: Undefined Security Weakness

Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site...

CVE-2006-1650

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...

[CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0

X.Org Security Advisory, March 20th 2006 Local privilege escalation in X.Org server 1.0.0 and later; X11R6.9.0 and X11R7.0 CVE-ID: CVE-2006-0745 Overview: During the analysis of results from the Coverity code review of X.Org, we discovered a flaw in the server that allows local users to execute...

X.Org X11 (X11R6.9.0/X11R7.0) - Local Privilege Escalation

From Daniel Stone's Advisory xorg-server 1.0.0, as shipped with X11R7.0, and all release candidates of X11R7.0, is vulnerable. X11R6.9.0, and all release candidates, are vulnerable. X11R6.8.2 and earlier versions are not vulnerable. The rest is H D Moore from metasploit Two second exploit, but if...

X.Org X11 (X11R6.9.0/X11R7.0) Local Root Privilege Escalation Exploit

Exploit for linux platform in category local exploits ===================================================================== X.Org X11 X11R6.9.0/X11R7.0 Local Root Privilege Escalation Exploit ===================================================================== From Daniel Stone's Advisory...

Moderate: Red Hat Security Advisory: ImageMagick security update

Updated ImageMagick packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System that can read and write multiple image...

Microsoft Internet Explorer Drag-and-Drop Redeux

Microsoft Internet Explorer Drag-and-Drop Redeux I. SYNOPSIS Affected Systems: Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0 - Windows 98 - Windows 98 Second Edition - Windows Millennium Edition - Windows 2000 - Windows XP - Windows Server 2003...

[NT] Microsoft Internet Explorer Drag-and-Drop Redeux

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

GLSA-200601-13 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-13 Gallery: XSS vulnerability Peter Schumacher discovered that Gallery fails to sanitize the fullname set by users, possibly leading to a cross-site scripting vulnerability. Impact : By setting a specially crafted fullname,...

CVE-2006-0081: Undefined Security Weakness

ialmnt5.sys in the ialmrnt5 display driver in Intel Graphics Accelerator Driver 6.14.10.4308 allows attackers to cause a denial of service crash or screen resolution change via a long text field, as demonstrated using a long window title...

CVE-2005-4581

Buffer overflow in Electric Sheep 2.6.3 client allows local users to execute arbitrary code via a long window-id parameter. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundarie...

CVE-2005-4581: Undefined Security Weakness

Buffer overflow in Electric Sheep 2.6.3 client allows local users to execute arbitrary code via a long window-id parameter. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundarie...

xpdf security update

CentOS Errata and Security Advisory CESA-2005:840-02 An updated xpdf package that fixes several security issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 20 Dec 2005 The initial fix for these issues was...

Internet Explorer onload window vulnerability

Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...

CVE-2005-3896

Mozilla allows remote attackers to cause a denial of service CPU consumption via a Javascript BODY onload event that calls the window function...

CVE-2005-3896: Undefined Security Weakness

Mozilla allows remote attackers to cause a denial of service CPU consumption via a Javascript BODY onload event that calls the window function...

CVE-2005-3897: Undefined Security Weakness

Apple Safari 2.0.2 allows remote attackers to cause a denial of service system slowdown via a Javascript BODY onload event that calls the window function...