LinkScanner Knowledge Base

04.10.2007

Roger Thompson - CTO

Research

In July of 2006, H.D. Moore introduced a "Month of Browser Bugs" where by he introduced a bug a day for the major browsers.

These are the named vulnerabilities, most of which have never been exploited in the wild. However, we do protect against them and if you are "hit", you can be assured that you are protected.

• 1 - ADODB.Recordset
• 2 - HHCtrlImage
• 3 - OE Address book
• 4 - Mozilla Firefox DesignMode
• 5 - DHTML setAttributeNode()
• 6 - StructuredGraphicsControl
• 7 - Table.Frameset
• 8 - RDS.DataControl URL
• 9 - DirectAnimation.DAUserData Data
• 10 - Object.Microsoft.DXTFilter Enabled
• 11 - HtmlDlgSafeHelper fonts
• 12 - TriEditDocument URL
• 13 - RevealTrans Transition
• 14 - Konqueror replaceChild()
• 15 - FolderItem Access
• 16 - MHTMLFile Location
• 17 - DXImageTransform.Microsoft ColorStr Properties
• 18 - WebViewFolderIcon setSlice
• 19 - DataSourceControl getDataMemberName
• 20 - OVCtl NewDefaultItem
• 21 - CEnroll stringToBinary
• 22 - Internet.HHCtrl Click
• 23 - NMSA.ASFSourceMediaDescription dispValue
• 24 - Forms.ListBox.1 ListWidth
• 25 - Native Function Iterator
• 26 - Opera CSS Background
• 27 - NDFXArtEffects RGBExtraColor
• 28 - Mozilla Navigator Object
• 29 - ADODB.Recordset NextRecordset
• 30 - Orphan Object Properties
• 31 - Safari KHTMLParser::popOneBlock