CVE-2005-0976

AppleWebKit-based browsers (WebCore/WebKit) are affected by CVE-2005-0976, which allows remote attackers to read local files via the XMLHttpRequest component. The vulnerability affects Safari 1.2+ and OmniWeb 5.1+ (and other WebKit-based apps using file: URLs), triggered by attacker‑supplied cont...

CVE-2005-0233

The CVE-2005-0233 entry describes an IDN spoofing vulnerability in Mozilla/Firefox-related products: IDN support in Firefox 1.0, Camino 0.8.5, and Mozilla before 1.7.6 decodes punycode-encoded domain names in URLs and SSL certificates in a way that can render homograph characters from other scrip...

CVE-2007-0342

CVE-2007-0342 concerns WebCore in Apple WebKit build 18794. The vulnerability enables remote DoS via a TD element with an excessively large ROWSPAN value, causing a null dereference and application crash, as demonstrated by OmniWeb 5.5.3 on Mac OS X 10.4.8. Reports consistently reference this as ...

CVE-2005-0238

CVE-2005-0238 concerns the International Domain Name (IDN) support in Epiphany, where punycode-encoded domain names decoded in URLs and SSL certificates can be interpreted using homograph characters from other scripts. This enables remote attackers to spoof legitimate domain names and facilitates...

CVE-2010-1102

The CVE-2010-1102 entry concerns OmniWeb. The root cause is an integer overflow in outbound TCP port handling, allowing remote attackers to bypass port restrictions by using an out-of-range port (e.g., 65561 for TCP port 25). Documented impact is bypass of intended port restrictions; no explicit ...

CVE-2005-0236

This CVE (CVE-2005-0236) applies to Omniweb 5’s International Domain Name (IDN) support. The vulnerability arises from how punycode-encoded domain names are decoded in URLs and SSL certificates, allowing homograph characters from other character sets to be used and potentially spoof trusted domai...

CVE-2007-0148

CVE-2007-0148 affects OmniGroup OmniWeb 5.5.1. Root cause: a format string vulnerability in the Javascript alert function that can be exploited by remote attackers to cause a crash or to execute arbitrary code. Impact includes denial of service and potential code execution with network-based acce...