Berend-Jan Wever

**Name of the Vulnerable Software and Affected Versions** WebKit versions before r53525 Google Chrome versions before 4.0.249.89 **Description** The issue allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element. This can be demonstrated by a specific sequence, such as a `<ruby>><table><rt>` sequence. **Recommendations** For WebKit versions before r53525, update to version r53525 or later. For Google Chrome versions before 4.0.249.89, update to version 4.0.249.89 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 5.01 through 6 **Description** A race condition exists in the memory management routines of the DHTML object processor, allowing remote attackers to execute arbitrary code via a malicious web page or HTML e-mail. **Recommendations** For Microsoft Internet Explorer versions 5.01 through 6, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer version 6 **Description** The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved through the use of Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, triggering a null dereference. **Recommendations** For Internet Explorer version 6, consider disabling Javascript execution in popup windows as a temporary workaround until a patch is available. Restrict the use of META tags that modify imagetoolbar functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SETI@home client versions 3.03 and other versions **Description** The issue allows remote attackers to cause a denial of service, resulting in a client crash, and potentially execute arbitrary code. This is achieved by sending a spoofed server response containing a long string followed by a newline character. **Recommendations** For version 3.03 and other affected versions, at the moment, there is no information about a newer version that contains a fix for this vulnerability.