Category Archives: advisory

Advisory: Certain domain names could allow execution of arbitrary code in Opera

Posted on November 18, 2009 by Chris Weber

Opera released 10.01 recently, which fixed a memory corruption issue found with Casaba’s IDN/URI fuzzer. http://www.opera.com/support/kb/view/938/

Posted in advisory | Tagged , , | Leave a comment

Advisory: Webkit – Visiting a maliciously crafted website may lead to a cross-site scripting attack

Posted on June 8, 2009 by Chris Weber

More from: http://support.apple.com/kb/HT3613 CVE-ID: CVE-2006-2783 Available for: Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.7, Mac OS X Server v10.5.7, Windows XP or Vista Impact: Visiting a maliciously crafted website may lead to a cross-site … Continue reading →

Posted in advisory | Tagged | Leave a comment

Advisory: International Components for Unicode – Maliciously crafted content may bypass website filters and result in cross-site scripting

Posted on June 8, 2009 by Chris Weber

Update from: http://support.apple.com/kb/HT3613 CVE-ID: CVE-2009-0153 Available for: Windows XP or Vista Impact: Maliciously crafted content may bypass website filters and result in cross-site scripting Description: An implementation issue exists in ICU’s handling of certain character encodings. Using ICU to convert … Continue reading →

Posted in advisory | Tagged | Leave a comment

Advisory: International Components for Unicode CVE-2009-0153

Posted on May 15, 2009 by Chris Weber

Big ones from Apple today: http://support.apple.com/kb/HT3549 CVE-ID: CVE-2009-0153 Available for: Mac OS X v10.5 through v10.5.6, Mac OS X Server v10.5 through v10.5.6 Impact: Maliciously crafted content may bypass website filters and result in cross-site scripting Description: An implementation issue … Continue reading →

Posted in advisory | Tagged | Leave a comment

Advisory: Lenovo/IBM ActiveX buffer overflow

Posted on March 27, 2009 by Chris Weber

CERT released the advisory for this, which I believe is not being fixed by Lenovo/IBM. http://www.kb.cert.org/vuls/id/340420 This ActiveX control comes preinstalled on many Lenovo systems, and is also downloaded from the main page of their support site. It’s a nasty … Continue reading →

Posted in advisory | Tagged | Leave a comment

Advisory: Adobe Air 1.1 JavaScript execution security vulnerability

Posted on November 18, 2008 by Chris Weber

Adobe released a patch and bulletin for an issue I reported back in May.  The issue is really in WebKit, and many products seem to be affected. A vulnerability has been identified in Adobe AIR 1.1 and earlier that could … Continue reading →

Posted in JavaScript, Unicode, advisory, cross site scripting, testing | Tagged , , | Leave a comment

Advisory: BOM’ing Firefox’s Javascript Interpreter

Posted on October 1, 2008 by Chris Weber

Damage: Filter evasion, cross-site scripting Exploit: Insert Unicode byte order mark (BOM) U+FEFF into javascript statements to bypass filters. Root Cause: character absorption/swallowing Product version: Firefox 3.01 and earlier Link to Mozilla advisory: http://www.mozilla.org/security/announce/2008/mfsa2008-43.html Well admittedly this one seems to … Continue reading →

Posted in advisory, cross site scripting | Tagged , , | Leave a comment

Protected: Advisory: Browser BOM’ing for XSS

Posted on August 26, 2008 by Chris Weber

There is no excerpt because this is a protected post.

Posted in Unicode, advisory, browser, cross site scripting | Tagged , , | Enter your password to view comments.

Advisory: Attack of the Mongolian space evaders! (and other Medieval XSS vectors)

Posted on August 26, 2008 by Chris Weber

Damage: Filter evasion, cross-site scripting Exploit: Bypass XSS filters, IPS/IDS, AV, or WAF’s with specially crafted white_space characters to execute XSS attacks. Root Cause: Interpreting syntax replacements Product Version: Opera 9.51 and earlier Or should we call this “Druidic magical … Continue reading →

Posted in Unicode, advisory, browser, cross site scripting | Tagged , , | 8 Comments