CVE-2005-2261

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...

CVE-2005-2261

CVE-2005-2261 affects multiple browsers: Firefox <1.0.5, Thunderbird <1.0.5, Mozilla

XBL scripts ran even when Javascript disabled — Mozilla

Scripts in XBL controls from web content continued to be run even when Javascript was disabled. By itself this causes no harm, but it could be combined with most script-based exploits to attack people running vulnerable versions who thought disabling javascript would protect them...

firefox & mozilla -- multiple vulnerabilities

The Mozilla Foundation reports of multiple security vulnerabilities in Firefox and Mozilla: MFSA 2005-56 Code execution through shared function objects MFSA 2005-55 XHTML node spoofing MFSA 2005-54 Javascript prompt origin spoofing MFSA 2005-53 Standalone applications can run arbitrary code throu...

Debian DSA-327-1 : xbl - buffer overflows

Steve Kemp discovered several buffer overflows in xbl, a game, which can be triggered by long command line arguments. This vulnerability could be exploited by a local attacker to gain gid 'games'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian DSA-345-1 : xbl - buffer overflow

Another buffer overflow was discovered in xbl, distinct from the one addressed in DSA-327 CAN-2003-0451, involving the-display command line option. This vulnerability could be exploited by a local attacker to gain gid 'games'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

CVE-2003-0535

Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option...

CVE-2003-0451

Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments...

CVE-2003-0535

CVE-2003-0535 is a local privilege-escalation vulnerability in the xbl package (version 1.0k and earlier) caused by a buffer overflow triggered by a long -display command line option. Reports (notably Debian DSA-345) describe local attackers gaining gid 'games' privileges. Debian fixed the issue ...

CVE-2003-0535

Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option...

[SECURITY] [DSA-345-1] New xbl packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 345-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0451

Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments...

CVE-2003-0451

CVE-2003-0451 involves multiple buffer overflows in the xbl game before version 1.0k that can be triggered by long command line arguments, enabling local privilege escalation to gid 'games'. The primary public details state the issue and the exploit target; Debian/Red Hat/SUSE advisories referenc...

[SECURITY] [DSA-327-1] New xbl packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 327-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 19th, 2003 http://www.debian.org/security/faq -...

DSA-327 xbl - buffer overflows

Bulletin has no description...