Browser Security News

The Site for Web Browser Security Information

Welcome to Browser Security News

Because Web Browser Security Matters!

 

Your news resource for Internet Explorer, Firefox, Opera and Safari security news vulnerabilities, virus and other important information.

Categories

Archives

Feeds

R-188: InterActual Player SyscheckObject ActiveX Vulnerability

A vulnerability exists in the IASystemInfo.dll library used by InterActual Player. The risk is MEDIUM. By convincing a
user to view a specially crafted HTML document (e.g., a web page or an HTML email message or attachment), an attacker may be able to
execute arbitrary code with the privileges of the user.

Read More…
Source: CIAC

Posted on March 24th, 2007 in ActiveX, CIAC | No Comments »

R-188: InterActual Player SyscheckObject ActiveX Vulnerability

A vulnerability exists in the IASystemInfo.dll library used by InterActual Player. The risk is MEDIUM. By convincing a
user to view a specially crafted HTML document (e.g., a web page or an HTML email message or attachment), an attacker may be able to
execute arbitrary code with the privileges of the user.

Read More…
Source: CIAC

Posted on March 22nd, 2007 in ActiveX, CIAC | No Comments »

R-130: Vulnerability in HTML Help ActiveX Control (928843)

A remote code execution vulnerability exists in the HTML Help ActiveX Control. The risk is MEDIUM. An intruder using
a specially crafted web page could run code in the security context of the logged-in user.

Read More…
Source: CIAC

Posted on March 22nd, 2007 in ActiveX, CIAC | No Comments »

Vuln: McAfee EPolicy Orchestrator SiteManager.DLL ActiveX Control Remote Buffer Overflow Vulnerabilities

McAfee EPolicy Orchestrator SiteManager.DLL ActiveX Control Remote Buffer Overflow Vulnerabilities

Read More…
Source: Security Focus

Posted on March 22nd, 2007 in ActiveX | No Comments »

Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow

Secunia Research 21/03/2007 - InterActual Player / CinePlayer - - IASystemInfo.dll ActiveX Control Buffer Overflow - Table of Contents Affected Software…………………………………………….1 Severity…………………………………………………….2 Vendor’s Description of Software……………………………….3 Description of Vulnerability…………………………………..4 Solution…………………………………………………….5 Time Table…………………………………………………..6 Credits……………………………………………………..7 References…………………………………………………..8 About Secunia………………………………………………..9 Verification………………………………………………..10 1) Affected Software * InterActual Player 2.60.12.0717 …

Read More…
Source: Full Disclosure

Posted on March 21st, 2007 in ActiveX | No Comments »

Vuln: IASystemInfo.DLL ActiveX Control Remote Buffer Overflow Vulnerabilities

IASystemInfo.DLL ActiveX Control Remote Buffer Overflow Vulnerabilities

Read More…
Source: Security Focus

Posted on March 21st, 2007 in ActiveX | No Comments »

Vuln: Rediff Toolbar ActiveX Control Remote Code Execution Vulnerability

Rediff Toolbar ActiveX Control Remote Code Execution Vulnerability

Read More…
Source: Security Focus

Posted on March 8th, 2007 in ActiveX | No Comments »

Vuln: WinZip ActiveX Control Remote Code Execution Vulnerability

WinZip ActiveX Control Remote Code Execution Vulnerability
>> Advertisement <<
ALERT: “How A Hacker Launches A Blind SQL Injection Attack Step-by-Step”!” - White Paper
Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection!
https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29

Read More…
Source: Security Focus

Posted on March 7th, 2007 in ActiveX | No Comments »

Bugtraq: iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilities

iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilities
>> Advertisement <<
ALERT: “How A Hacker Launches A Blind SQL Injection Attack Step-by-Step”!” - White Paper
Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection!
https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29

Read More…
Source: Security Focus

Posted on March 7th, 2007 in ActiveX | No Comments »

iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilities

Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilities iDefense Security Advisory 03.07.07 Mar 07, 2007 I. BACKGROUND Ipswitch Inc.’s IMail Server is an email server aimed at providing easy to configure and maintain email services for for small organizations. More …

Read More…
Source: Full Disclosure

Posted on March 7th, 2007 in ActiveX | No Comments »

« Previous Entries