CVE-2002-1277

Buffer overflow in Window Maker wmaker 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer...

CVE-2003-0066

The CVE-2003-0066 issue affects rxvt 2.7.8 and earlier. A vulnerable escape sequence allows an attacker to modify the window title and have that title re-enter the shell as a command, enabling arbitrary command execution when a user views a file containing the malicious sequence. The root cause i...

CVE-2003-0068

The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker t...

CVE-2003-0066: Undefined Security Weakness

The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to...

CVE-2002-1277: Undefined Security Weakness

Buffer overflow in Window Maker wmaker 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer...

CVE-2003-0068: Undefined Security Weakness

The Eterm terminal emulator 0.9.1 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker t...

CVE-2003-0069: Undefined Security Weakness

The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute...

CVE-2003-0070: Undefined Security Weakness

VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...

CVE-2003-0063: Undefined Security Weakness

The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the...

CVE-2003-0067: Undefined Security Weakness

The aterm terminal emulator 0.42 allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute...

iCab Web Browser Remote Window Hijacking

Binary data 2530.prm...

MS Outlook Express Window Opener Vulnerability

Exploit for unknown platform in category remote exploits ============================================== MS Outlook Express Window Opener Vulnerability ============================================== Example: Alright microsoft. Get your act together. Seriously, this is the 3rd version of this...

MSOE Javascript Execution Vulnerability

Note: This vulnerability as well as several more can be found at http://www.greyhats.cjb.net Outlook Express Window Opener Script Execution Vulnerability Tested Microsoft Outlook Express version 6.0.2800.1123. Microsoft Windows XP sp2 Discussion Microsoft Outlook Express is prone to a vulnerabili...

RHEL 2.1 : WindowMaker (RHSA-2003:009)

Updated packages are available to fix a vulnerability in Window Maker. Updated 06 Feb 2003 Fixed packages for Advanced Workstation 2.1 have been added. Updated 31 Mar 2003 New erratum packages are available to fix a bug in the original security patch. Updated 18 Jun 2003 The last update did not...

CVE-2004-0479

The vulnerability CVE-2004-0479 affects Internet Explorer 6. JavaScript that creates a new popup window and disables the imagetoolbar via a META tag can trigger a null dereference, leading to a remote denial of service (crash). The description does not provide exploit status or concrete remediati...

CVE-2004-0230

Technical details beyond the public description are not provided in the supplied documents. CVE-2004-0230 describes a TCP sequence-number guessing/RST-injection denial-of-service under large window size; no remediation details are given here.

CVE-2003-1008

CVE-2003-1008 describes an unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 where a local user can bypass the screen saver login window and write a text clipping to the desktop or another application. The connected documents corroborate a local-attack scenario with partial confidentiality/inte...

CVE-2003-1008: Undefined Security Weakness

Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application...

NetScreen ScreenOS 4.0.14.0.3 - TCP Window Size Remote Denial of Service

NetScreen ScreenOS 4.0.14.0.3 - TCP Window Size Remote Denial of Service source: https://www.securityfocus.com/bid/8302/info NetScreen ScreenOS has been reported prone to a vulnerability that may allow a remote user to trigger a denial of service condition in an affected appliance. It has been...

NetScreen ScreenOS 4.0.1/4.0.3 - TCP Window Size Remote Denial of Service

source: https://www.securityfocus.com/bid/8302/info NetScreen ScreenOS has been reported prone to a vulnerability that may allow a remote user to trigger a denial of service condition in an affected appliance. It has been reported that by modifying system configuration values that control the TCP...