Aditya K Sood

**Name of the Vulnerable Software and Affected Versions** D-Link DGS-1510 series versions prior to 1.31.B003 **Description** The issue allows attackers to conduct Unauthenticated Command Bypass attacks. The exact vectors used for the attack are not specified. **Recommendations** For D-Link DGS-1510 series versions prior to 1.31.B003, update the firmware to version 1.31.B003 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Google Chrome version 1.0.154.53 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This can be achieved via a throw statement with a long exception value. Recommendations: For Google Chrome version 1.0.154.53, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Google Chrome versions 0.2.149.29 through 0.2.149.30 Description: The issue allows remote attackers to cause a denial of service due to memory consumption. This can be achieved by using an HTML document that contains a carriage return (`r r `) argument to the `window.open` function. Recommendations: For Google Chrome versions 0.2.149.29 and 0.2.149.30, consider avoiding the use of the `window.open` function with carriage return arguments until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 3.0.2 through 3.0.3 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events. Recommendations: For Mozilla Firefox versions 3.0.2 through 3.0.3, consider disabling the user interface event dispatcher as a temporary workaround until a patch is available. Restrict access to the affected event handlers to minimize the risk of exploitation. Avoid triggering the series of keypress, click, onkeydown, onkeyup, onmousedown, and onmouseup events in the affected versions.