Internet Explorer HTML Help Control ActiveX crossite scripting
Published:		02.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		4150
Type:		client
Level:		7/10
Description:		By clicking control element, it's possible to activate script in context of different site or local system.

Affected:

MICROSOFT : Internet Explorer 6.0

Original document

roozbeh afrasiabi, Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities (02.11.2004)

Discuss:

Read or add your comments to this news (0 comments)

Cherokee formatstring bug updated since 21.04.2004
Published:		02.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		3631
Type:		remote
Level:		5/10
Description:		Format string bug on syslog() call and gile logging in NCSA format, cherokee_logger_ncsa_write_string().

Affected:

0X50 : Cherokee 0.4

Original document		GENTOO, [ GLSA 200411-02 ] Cherokee: Format string vulnerability (02.11.2004)
		CoKi, Format String in Cherokee (21.04.2004)

Discuss:

Read or add your comments to this news (0 comments)