163 matches found
CVE-2011-0143
WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...
CVE-2011-0143
The CVE-2011-0143 issue affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability stems from WebKit-related browsing vectors in iTunes Store access, enabling a man-in-the-middle attacker to execute arbitrary code or cause a denial of service via memory corruption and applic...
Apple iTunes < 10.2 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is older than 10.2. As such, it is affected by numerous issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52534; scriptversion"1.21";...
CVE-2010-0143
Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPo...
CVE-2010-0143
CVE-2010-0143 affects Cisco IronPort Encryption Appliance and IronPort PostX MAP prior to versions 6.2.9.1/6.5.2 (and MAP before 6.2.9.1). The vulnerability is an unspecified information-disclosure in the embedded HTTPS server’s administrative interface, allowing remote attackers to read arbitrar...
CVE-2009-0143
Apple iTunes
Apple iTunes < 8.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is older than 8.1. Such versions may be affected by multiple vulnerabilities : - It may be possible to cause a denial of service by sending a maliciously crafted DAAP header to the application. CVE-2009-0016 - When subscribing to a...
CVE-2008-0143
PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM Broadcaster, allows remote attackers to execute arbitrary PHP code via a URL in the commonpath parameter...
CVE-2008-0143
PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM Broadcaster, allows remote attackers to execute arbitrary PHP code via a URL in the commonpath parameter...
CVE-2008-0143
CVE-2008-0143 describes a PHP remote file inclusion vulnerability in samPHPweb’s common/db.php (potentially version 4.2.2 and later) as packaged with SAM Broadcaster. An attacker can supply a URL via the commonpath parameter to cause arbitrary PHP code execution. Public CVSS v2 data in the record...
CVE-2007-0143
CVE-2007-0143 affects NUNE News Script 2.0pre2. The vulnerability is a PHP remote file inclusion triggered via a URL in the custom_admin_path parameter to (1) index.php or (2) archives.php, enabling remote attackers to execute arbitrary PHP code. The description and connected records confirm this...
CVE-2007-0143
Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a URL in the customadminpath parameter to 1 index.php or 2 archives.php...
RHEL 4 : mozilla (RHSA-2005:335)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:335 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A buffer overflow bug was found...
CVE-2005-0143
Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks...
CVE-2005-0143
CVE-2005-0143 affects Firefox before 1.0 and Mozilla before 1.7.5. The issue is that the SSL lock icon can be displayed when an insecure page loads a binary file from a trusted site, which could aid phishing. Connected advisories confirm Mozilla security updates were issued (e.g., RHSA-2005:335; ...
CVE-2003-0143
CVE-2003-0143 affects qpopper 4.0.x prior to 4.0.5fc2. The pop_msg function fails to null-terminate the message buffer after Qvsnprintf, enabling an authenticated user to trigger a buffer overflow in a mdef command with a long macro name and execute arbitrary code. The CVE is associated with remo...
CVE-2003-0143
The popmsg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name...
Qpopper pop_msg() Macroname Remote Overflow
The remote Qpopper server, according to its banner, is vulnerable to a one-byte overflow ih its popmsg function after a call to Qvsnprintf. An attacker may use this flaw to execute code with the privileges of the Qpopper service usually non-root, provided that he has a valid POP account to log in...
CVE-2002-0143
The CVE-2002-0143 issue is a local buffer overflow in Eterm of Enlightenment Imlib2 (versions ≤ 1.0.4) caused by a long HOME environment variable. Exploit details and mitigations are not provided in the connected documents; no further remediation is specified.