[NT] Buffer Overflow in Avant Web Browser

• Previous message: SecuriTeam: "[UNIX] Buffer Overflow in Whois Client"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: list@securiteam.com
Date: 24 Aug 2003 17:17:49 +0200

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -

  Buffer Overflow in Avant Web Browser
------------------------------------------------------------------------

SUMMARY

 <http://www.avantbrowser.com/> Avant Browser is "a standalone application
designed to expand services provided by Microsoft Internet Explorer". Due
to an internal buffer, overflow it possible for a remote attacker to cause
the browser to crash.

DETAILS

Vulnerable systems:
 * Avant Browser version 8.02

By causing a user to click on a URL that is longer than 780 characters, it
is possible to cause the web browser to crash.

ADDITIONAL INFORMATION

The information has been provided by <mailto:nimber@mail.ru> nimber.

========================================

This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

• Previous message: SecuriTeam: "[UNIX] Buffer Overflow in Whois Client"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

• [EXPL] TinyWeb Server DoS Exploit
  ... The following security advisory is sent to the securiteam mailing list, and can be
  found at the SecuriTeam web site: http://www.securiteam.com ... The information in this
  bulletin is provided "AS IS" without warranty of any kind. ... In no event shall we be
  liable for any damages whatsoever including direct, indirect, incidental, consequential, loss
  of business profits or special damages. ... (Securiteam)
• [UNIX] SquirrelMail Cross Site Scripting in Encoded Text
  ... The following security advisory is sent to the securiteam mailing list, and can be
  found at the SecuriTeam web site: http://www.securiteam.com ... SquirrelMail has
  all the functionality you would want from an email ... In no event shall we be liable for any
  damages whatsoever including direct, indirect, incidental, consequential, loss of business profits
  or special damages. ... (Securiteam)
• [EXPL] VLC Media Player DoS (Exploit)
  ... The following security advisory is sent to the securiteam mailing list, and can be
  found at the SecuriTeam web site: http://www.securiteam.com ... VLC Media Player DoS
  ... In no event shall we be liable for any damages whatsoever including direct, indirect,
  incidental, consequential, loss of business profits or special damages. ... (Securiteam)
• [NEWS] WzdFTPD hash DoS
  ... The following security advisory is sent to the securiteam mailing list, and can be
  found at the SecuriTeam web site: http://www.securiteam.com ... WzdFTPD project
  also supports bandwidth limitation (per user, per group, ... In no event shall we be liable for
  any damages whatsoever including direct, indirect, incidental, consequential, loss of business
  profits or special damages. ... (Securiteam)
• [UNIX] Online Store Kit SQL Injection Vulnerability
  ... The following security advisory is sent to the securiteam mailing list, and can be
  found at the SecuriTeam web site: http://www.securiteam.com ... SQL Injection: ...
  In no event shall we be liable for any damages whatsoever including direct, indirect, incidental,
  consequential, loss of business profits or special damages. ... (Securiteam)