CVE-2019-16647

The CVE-2019-16647 entry relates to an Unquoted Search Path vulnerability in Maxthon for Windows (versions 5.1.0–5.2.7). Affected component is the browser executable; root cause is an unquoted search path. CVSS data from NVD indicates a HIGH impact across confidentiality, integrity, and availabil...

CVE-2009-3006

The CVE-2009-3006 entry concerns Maxthon Browser 2.5.3.80 UNICODE. The vulnerability allows a remote attacker to spoof the address bar by using window.open with a relative URI, causing the browser to display an arbitrary URL on the site visited by the victim and potentially trigger a spoofed logi...

CVE-2008-3667

The CVE-2008-3667 issue affects Maxthon Browser 2.0 and earlier, where a stack-based overflow occurs in processing a long HTTP Content-Type header, enabling remote arbitrary code execution. Root cause: improper handling of the Content-Type header leading to a stack overflow. Affected products: Ma...

CVE-2009-3018

CVE-2009-3018 (Maxthon Browser 3.0.0.145 Alpha in Ultramode) is described in the initial record as an XSS flaw where javascript: and data: URIs are not properly blocked in Refresh headers, and where data: URIs in Location headers or javascript: data URIs in HTML links on 301/302 error documents c...

CVE-2010-5246

CVE-2010-5246 : Multiple untrusted search path vulnerabilities in Maxthon Browser versions 1.6.7.35 and 2.5.15 allow local users to gain privileges when a Trojan-horse DLL (RSRC32.dll or dwmapi.dll) exists in the current working directory. The issue is due to untrusted search paths and is demonst...