872 matches found
Regression in IE: Accessing remote/local content in IE (GM#009-IE)
For further information on the regression itself see "Solution" section. GreyMagic Security Advisory GM009-IE ===================================== By GreyMagic Software, 23 Aug 2002, 12 Oct 2004. Available in HTML format at http://www.greymagic.com/security/advisories/gm009-ie/. Topic: Accessing...
JAVA XSLT processor XML sniffing
It's psosible to sniff XML data from different application domain...
Oracle Multiple Products SOAP Message Crafted DTD Remote DoS
According to its version, the remote Oracle Database is affected by a denial of service vulnerability. By sending specially crafted SOAP messages with carefully designed XML Data Type Definitions DTDs, it may be possible for a remote attacker to crash the remote database. %NASLMINLEVEL 70300 C...
CVE-2003-0809
Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page...
CVE-2003-0809
Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page...
CVE-2003-0809: Undefined Security Weakness
Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page...
Security Bulletin MS02-047: Cumulative Patch for Internet Explorer (Q323759)
---------------------------------------------------------------------- Title: Cumulative Patch for Internet Explorer Q323759 Date: 22 August 2002 Software: Internet Explorer Impact: Six new vulnerabilities, the most serious of which could enable an attacker to execute commands on a user's system...
CVE-2002-0792: Undefined Security Weakness
The web management interface for Cisco Content Service Switch CSS 11000 switches allows remote attackers to cause a denial of service soft reset via 1 an HTTPS POST request, or 2 malformed XML data...
CVE-2002-0057: Undefined Security Weakness
XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source...
Microsoft Internet Explorer 5 (Windows 95/98/2000/NT 4.0) - XML HTTP Redirect
MS IE 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 XML HTTP Redirect Vulnerability source: https://www.securityfocus.com/bid/815/info A vulnerability in the method IE5 uses to process XML data may allow a malicious web site owner to read files on a visiting user's computer. A web page...
