958 matches found
CVE-2010-4008
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service application crash via a...
SuSE 10 Security Update : pyxml (ZYPP Patch Number 6715)
Specially crafted XML documents could make pyxml run into an enless loop, therefore locking up applications using pyxml. CVE-2009-3720 / CVE-2009-3560 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
firefox security update
CentOS Errata and Security Advisory CESA-2010:0500 An updated firefox package that addresses security issues, fixes bugs, adds numerous enhancements, and upgrades Firefox to version 3.6.4, is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as...
devhelp, esc, firefox, gnome, totem, xulrunner, yelp security update
CentOS Errata and Security Advisory CESA-2010:0501 Updated firefox packages that address several security issues, fix bugs, add numerous enhancements, and upgrade Firefox to version 3.6.4, are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update a...
Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability
No description provided by source. -- CVE ID: CVE-2010-1199 -- Affected Vendors: Mozilla Firefox -- Affected Products: Mozilla Firefox 3.6.x -- Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User...
Mozilla Firefox XSLT Sort Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or otherwise render a malicious file. The specific flaw exists within a...
RHEL 5 : firefox (RHSA-2010:0501)
Updated firefox packages that address several security issues, fix bugs, add numerous enhancements, and upgrade Firefox to version 3.6.4, are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common...
mozilla: XMLDocument:: load() doesn't check nsIContentPolicy (MFSA 2010-24)
The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictio...
mozilla: XMLDocument:: load() doesn't check nsIContentPolicy (MFSA 2010-24)
The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictio...
Microsoft Internet Explorer Unspecified vulnerability
This host is installed with Microsoft Internet Explorer and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbmsieunspecifiedvuln.nasl 5656 2017-03-21 11:03:12Z cfi $ Microsoft Internet Explorer Unspecified vulnerability Authors: Madhuri D Copyright: Copyright c 2010...
Microsoft Internet Explorer Unspecified vulnerability
Microsoft Internet Explorer is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-1175
Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."...
CVE-2010-1175
Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 is affected by CVE-2010-1175. The vulnerability is described as an unspecified impact triggered when processing a crafted XML document that references a specific web site in the SRC attribute of an image element. Affected produ...
CVE-2010-0048
Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted XML document...
Design/Logic Flaw
Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted XML document...
CVE-2010-0048
Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted XML document...
CVE-2010-0048
Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted XML document...
CVE-2010-0048
CVE-2010-0048: A use-after-free vulnerability in WebKit used by Apple Safari prior to 4.0.5 allows a remote attacker to cause a crash or execute arbitrary code through a crafted XML document. Affected product: Safari with WebKit before version 4.0.5. Root cause: use-after-free in WebKit when proc...
