< Back to JetLib.com

jetlib.sec » Tags » dom-tree

« Expand/Collapse

8 items tagged "dom tree"

Related tags: zero day [+], zero [+], dom [+], day [+], apple safari [+], initiative [+], application [+], mozilla [+], firefox [+], code execution [+], safer use [+], mozilla firefox [+], code [+], appendchild [+]

December 05, 2011
12:29
Mozilla Firefox appendChild DOM Tree Inconsistency Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code mozilla firefox dom-tree mozilla-firefox code-execution safer-use

August 17, 2011
14:00
Bugtraq: ZDI-11-271: Mozilla Firefox appendChild DOM Tree Inconsistency Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-11-271: Mozilla Firefox appendChild DOM Tree Inconsistency Remote Code Execution Vulnerability
Tags: appendchild mozilla firefox dom-tree code-execution

July 28, 2011
0:19
Zero Day Initiative Advisory 11-243
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-243 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Webkit as utilized by either Apple Safari, or Google's Chrome browser. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the library handles implicitly defined styles. When processing a specific case for a style, the application will dispatch an event. During this dispatch, code can be executed that can be used to manipulate the DOM tree causing a type-switch. This type-switch can lead to code execution under the context of the application.
Tags: day zero initiative apple-safari dom dom-tree zero-day

0:19
Zero Day Initiative Advisory 11-243
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-243 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Webkit as utilized by either Apple Safari, or Google's Chrome browser. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the library handles implicitly defined styles. When processing a specific case for a style, the application will dispatch an event. During this dispatch, code can be executed that can be used to manipulate the DOM tree causing a type-switch. This type-switch can lead to code execution under the context of the application.
Tags: day zero initiative apple-safari dom dom-tree zero-day

0:19
Zero Day Initiative Advisory 11-243
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-243 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Webkit as utilized by either Apple Safari, or Google's Chrome browser. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the library handles implicitly defined styles. When processing a specific case for a style, the application will dispatch an event. During this dispatch, code can be executed that can be used to manipulate the DOM tree causing a type-switch. This type-switch can lead to code execution under the context of the application.
Tags: day zero initiative apple-safari dom dom-tree zero-day

March 03, 2011
7:46
Zero Day Initiative Advisory 11-095
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-095 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the methodology the application takes to inform a user about an error while parsing a malformed document. When displaying the error message, the application will append the message to the current instance of the DOM tree causing another element to be removed which will lead to the styles being recalculated. When the styles are recalculated the application will access the initially freed element which can lead to code execution under the context of the application.
Tags: day zero application apple-safari dom dom-tree zero-day

7:46
Zero Day Initiative Advisory 11-095
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-095 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the methodology the application takes to inform a user about an error while parsing a malformed document. When displaying the error message, the application will append the message to the current instance of the DOM tree causing another element to be removed which will lead to the styles being recalculated. When the styles are recalculated the application will access the initially freed element which can lead to code execution under the context of the application.
Tags: day zero application apple-safari dom dom-tree zero-day

7:46
Zero Day Initiative Advisory 11-095
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-095 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the methodology the application takes to inform a user about an error while parsing a malformed document. When displaying the error message, the application will append the message to the current instance of the DOM tree causing another element to be removed which will lead to the styles being recalculated. When the styles are recalculated the application will access the initially freed element which can lead to code execution under the context of the application.
Tags: day zero application apple-safari dom dom-tree zero-day