< Back to JetLib.com

jetlib.sec » Tags » text-element

« Expand/Collapse

9 items tagged "text element"

Related tags: webkit [+], vulnerability [+], code execution [+], apple webkit [+], zero day [+], zero [+], day [+], code [+], application [+], apple safari [+], style [+], library [+], letter style [+], zdi [+], svg [+], shockwave [+], safer use [+], element code [+], adobe shockwave player [+], adobe [+]

September 18, 2011
17:54
Adobe Shockwave TextXtra Text Element Parsing Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code shockwave adobe adobe-shockwave-player text-element code-execution
June 05, 2011
19:54
Webkit CSS Text Element Count Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Webkit.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability webkit text-element code-execution safer-use

November 23, 2010
8:46
Zero Day Initiative Advisory 10-257
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-257 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the wholeText method of the Text element. When calculating the total size of all the text containing it, the application will wrap a 32-bit integer. The application will use this in an allocation and then later use a different value for populating the buffer. This can lead to code execution under the context of the application.
Tags: day zero application apple-webkit text-element zero-day webkit

8:46
Zero Day Initiative Advisory 10-257
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-257 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the wholeText method of the Text element. When calculating the total size of all the text containing it, the application will wrap a 32-bit integer. The application will use this in an allocation and then later use a different value for populating the buffer. This can lead to code execution under the context of the application.
Tags: day zero application apple-webkit text-element zero-day webkit

8:46
Zero Day Initiative Advisory 10-257
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 10-257 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the wholeText method of the Text element. When calculating the total size of all the text containing it, the application will wrap a 32-bit integer. The application will use this in an allocation and then later use a different value for populating the buffer. This can lead to code execution under the context of the application.
Tags: day zero application apple-webkit text-element zero-day webkit

September 30, 2010
23:53
Apple Webkit SVG Floating Text Element Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code vulnerability svg apple-safari apple-webkit element-code text-element code-execution

August 12, 2010
8:00
Bugtraq: ZDI-10-153: Apple Webkit SVG Floating Text Element Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-10-153: Apple Webkit SVG Floating Text Element Remote Code Execution Vulnerability
Tags: text-element code-execution zdi

August 06, 2010
12:01
ZDI-10-142.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-142 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the library's implementation of the first-letter style in the context of an SVG text element. Upon applying the style to this element, the library will calculate the height for determining the overflow for an inline box. While traversing the elements for the height, the library will utilize data from a non-existent linebox. Successful exploitation will lead to code execution under the context of the application.
Tags: vulnerability library style apple-safari text-element letter-style

12:00
ZDI-10-142.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-142 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the library's implementation of the first-letter style in the context of an SVG text element. Upon applying the style to this element, the library will calculate the height for determining the overflow for an inline box. While traversing the elements for the height, the library will utilize data from a non-existent linebox. Successful exploitation will lead to code execution under the context of the application.
Tags: vulnerability library style apple-safari text-element letter-style