openSUSE 10 Security Update : seamonkey (seamonkey-6310)

The Mozilla SeaMonkey browser suite was updated to version 1.1.16, fixing various bugs and security issues : - Security update to 1.1.16 - MFSA 2009-12/CVE-2009-1169 bmo460090,485217 Crash and remote code execution in XSL transformation - MFSA 2009-14/CVE-2009-1303/CVE-2009-1305 Crashes with...

Design/Logic Flaw

The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a...

CVE-2009-1699

The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a...

Immunity Canvas: SAFARI_FILE_STEALING2

Name| safarifilestealing2 ---|--- CVE| CVE-2009-1699 Exploit Pack| CANVAS Description| Safari 3.2 XSL File Stealing Notes| CVE Name: CVE-2009-1699 VENDOR: Apple Reference: http://scary.beasts.org/security/CESA-2009-006.html Arugments: After you have placed your single file in the correct...

CVE-2009-1699

Removed by vendor...

CVE-2009-1699

The CVE-2009-1699 entry is confirmed in connected documents as a WebKit XXE vulnerability: qt4-x11 uses WebKit’s XSL stylesheet processing and does not properly handle XML external entities, enabling remote file disclosure via a crafted DTD (e.g., file:///… paths). Affected product/kit: Qt4-x11 w...

CVE-2009-1699

The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a...

Apple Safari local file theft vulnerability

Hi, Safari prior to version 4 may permit an evil web page to steal files from the local system. This is accomplished by mounting an XXE attack against the parsing of the XSL XML. This is best explained with a sample evil XSL file which includes a DTD that attempts the XXE attack: !DOCTYPE doc...

Apple Safari 3.2.x - XML External Entity Local File Theft

Apple Safari 3.2.x - XML External Entity Local File Theft Safari prior to version 4 may permit an evil web page to steal files from the local system. This is accomplished by mounting an XXE attack against the parsing of the XSL XML. This is best explained with a sample evil XSL file which include...

Apple Safari XXE Local File Theft

Hi, Safari prior to version 4 may permit an evil web page to steal files from the local system. This is accomplished by mounting an XXE attack against the parsing of the XSL XML. This is best explained with a sample evil XSL file which includes a DTD that attempts the XXE attack: Below you should...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-6194)

The Mozilla Firefox Browser was refreshed to the current MOZILLA18 branch state around fix level 2.0.0.22. Security issues identified as being fixed are: MFSA 2009-01 / CVE-2009-0352 / CVE-2009-0353: Mozilla developers identified and fixed several stability bugs in the browser engine used in...

SUSE: Security Advisory for MozillaFirefox (SUSE-SA:2009:022)

The remote host is missing updates announced in advisory SUSE-SA:2009:022. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

SuSE Security Advisory SUSE-SA:2009:022 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:022. OpenVAS Vulnerability Test $Id: susesa2009022.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:022 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

SuSE Security Advisory SUSE-SA:2009:023 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:023. OpenVAS Vulnerability Test $Id: susesa2009023.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:023 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

SeaMonkey < 1.1.16 XSL Transformation Overflow DoS

Binary data 4988.prm...

SeaMonkey < 1.1.16 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.16. Such versions are potentially affected by the following security issues : - An XSL transformation vulnerability can be leveraged with a specially crafted stylesheet to crash the browser or to execute arbitrary code. MFSA 2009-12 - Multipl...

Mandriva Update for libxslt MDVSA-2008:151 (libxslt)

Check for the Version of libxslt OpenVAS Vulnerability Test Mandriva Update for libxslt MDVSA-2008:151 libxslt Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mozilla Seamonkey < 1.1.16 XSL Parsing Vulnerability - Windows

Mozilla Seamonkey is prone to an XSL file parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firefox XSL Parsing Vulnerability (mfsa2009-12) - Windows

Mozilla Firefox browser is prone to an XSL file parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Firefox XSL Parsing Vulnerability (Windows)

The host is installed with Mozilla Firefox browser and is prone to XSL File Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxxslparsingvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Firefox XSL Parsing Vulnerability Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone...