1909 matches found
DjVu Browser Plug-in < 6.1.1 Multiple Buffer Overflows
The DjVu Browser Plug-in is installed on the remote Windows host. This plugin provides the primary means of viewing DjVu documents, which are used for publishing scanned books, catalogs, historical documents, research papers, manuals, etc. The version of the DjVu Browser Plug-in installed on the...
EasyMail Objects IMAP4 Component Connect Method Remote Overflow
EasyMail Objects, a set of COM objects for supporting email protocols, is installed on the remote Windows host. The IMAP4 component of the version of the DjVu Browser Plug-in installed on the remote host reportedly is affected by a stack buffer overflow in the 'Connect' method that can be trigger...
Buffer overflow
Multiple buffer overflows in the LizardTech DjVu Browser Plug-in before 6.1.1 allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-0324
CVE-2007-0324 involves multiple buffer-overflow vulnerabilities in the LizardTech DjVu Browser Plug-in prior to version 6.1.1, allowing remote attackers to execute arbitrary code. The issue affects the DjVu Browser Plug-in (ActiveX control for IE and plug-in for other browsers) and is triggered w...
Authentication flaw
MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...
CVE-2007-0954
CVE-2007-0954 affects MOHA Chat 0.1b7 and earlier; the plug-in API can be used without authentication. The available sources state the impact and attack vectors are unknown, with no concrete remediation or exploitation details provided in the documents.
[Full-disclosure] Lizardtech DjVu Browser Plug-in - Multiple Vulnerabilities
======================================================================== = Lizardtech DjVu Browser Plug-in - Multiple Vulnerabilities = = Vendor Website: = http://www.lizardtech.com/ = = Affected Version: = Windows DjVu Browser Plug-in 6.1.1 = = Public disclosure on February 15th 2007...
CVE-2007-0324: Undefined Security Weakness
Multiple buffer overflows in the LizardTech DjVu Browser Plug-in before 6.1.1 allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2007-0954: Undefined Security Weakness
MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...
LizardTech DjVu Browser Plug-in buffer overflow vulnerabilities
Overview The LizardTech DjVu Browser Plug-in contains multiple buffer overflows, which could allow an attacker to execute arbitrary code on a vulnerable system. Description The LizardTech DjVu Browser Plug-in is an application that allows the user to view DjVu documents in a web browser. It is...
MD5Crack 4.0-vulnerability warning-the black bar safety net
I always prefer MD5Crack, today to see the author publish a new version, with a relatively large update. MD5Crack 4.0 in the retention MD5Crack features on the basis of the re-modified the entire framework. All the code are rewritten. The rewrite is mainly a logic portion and a UI portion for the...
Denial of service
The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service server outage...
CVE-2007-0424
Unspecified vulnerability in the BEA WebLogic Server proxy plug-in for Netscape Enterprise Server before September 2006 for Netscape Enterprise Server allow remote attackers to cause a denial of service via certain requests that trigger errors that lead to a server being marked as unavailable,...
CVE-2007-0419
The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service server outage...
CVE-2007-0419
The CVE-2007-0419 issue affects the BEA WebLogic Server proxy plug-in for the Apache HTTP Server (pre June 2006). The root cause is improper handling of protocol errors in the plug-in, which can allow remote attackers to cause a denial of service (server outage). The vulnerability description not...
CVE-2007-0419
The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service server outage...
CVE-2007-0419: Undefined Security Weakness
The BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service server outage...
CVE-2007-0424: Undefined Security Weakness
Unspecified vulnerability in the BEA WebLogic Server proxy plug-in for Netscape Enterprise Server before September 2006 for Netscape Enterprise Server allow remote attackers to cause a denial of service via certain requests that trigger errors that lead to a server being marked as unavailable,...
Adobe Acrobat Reader Plugin <= 7.0.x (acroreader) XSS Vulnerability
No description provided by source. Stefano Di Paola http://www.wisec.it/ From Secunia: Input passed to a hosted PDF file is not properly sanitised by the browser plug-in before being returned to users. This can be exploited to execute arbitrary script code in a user's browser session in context o...
Adobe Acrobat Reader Plugin 7.0.x - acroreader Cross-Site Scripting
Adobe Acrobat Reader Plugin 7.0.x - acroreader Cross-Site Scripting Stefano Di Paola http://www.wisec.it/ From Secunia: Input passed to a hosted PDF file is not properly sanitised by the browser plug-in before being returned to users. This can be exploited to execute arbitrary script code in a...