221 matches found
CVE-2009-0221
Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration information for different slides" that contains a field that specifies a large number of records, which...
CVE-2009-0221
Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration information for different slides" that contains a field that specifies a large number of records, which...
CVE-2009-0221
CVE-2009-0221 affects Microsoft Office PowerPoint 2002 SP3 and PowerPoint 2003 SP3. The issue is an integer overflow while parsing a PowerPoint record type (collaboration information for slides), which can trigger a heap-based buffer overflow and allow remote code execution when a user opens a ma...
FreeBSD Ports: gallery
The remote host is missing an update to the system as announced in the referenced advisory. VID 5752a0df-60c5-4876-a872-f12f9a02fa05 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0221
The CVE-2008-0221 entry describes a Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 (Gateway Weblaunch). The underlying issue is that an attacker can supply a ..\ (dot dot backslash) as the second argument to the DoWebLaun...
iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability
Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability iDefense Security Advisory 05.08.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 08, 2007 I. BACKGROUND Microsoft Exchange Server 2000 is a messaging product developed by Microsoft, part of the Windows Server...
CVE-2007-0221
CVE-2007-0221 is the IMAP Literal Processing Vulnerability in Microsoft Exchange Server 2000 SP3. The issue is an integer overflow in the IMAP4 service when processing literals in IMAP commands, allowing remote attackers to cause a denial of service (service hang). Connected advisories confirm th...
CVE-2006-0221
CVE-2006-0221 describes an SQL injection in the Admin Panel of Dragon Design Services Network (DDSN) cm3 content manager (CM3CMS), exploitable via the (1) username or (2) password fields on index.asp. The underlying issue is unsafely constructed SQL statements that allow remote attackers to execu...
CVE-2005-0221
Cross-site scripting XSS vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2formsubject field...
CVE-2005-0221
Affected software: Gallery 2.0 Alpha (Gallery login.php). Vulnerability: Cross-site scripting (XSS) via g2_form[subject]. Root cause: user-supplied input in login form is not properly sanitized, allowing injection of arbitrary HTML/script. Impact: remote attacker could exploit to run script in a ...
CVE-2004-0221
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service crash via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite...
CVE-2004-0221
Affected software / component: OpenBSD isakmpd (OpenBSD 3.4 and earlier). Root cause / weakness: Multiple payload handling flaws in isakmpd’s ISAKMP packet processing allow out-of-bounds reads when processing a Delete payload with a large number of SPIs, leading to a remote denial of service (cra...
CVE-2003-0221
The 1 dupatch and 2 setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlink attack...
CVE-2003-0221
The CVE-2003-0221 entry concerns HP Tru64 UNIX 5.1B PK1 and earlier, where the (1) dupatch and (2) setld utilities are vulnerable to a local symlink attack that allows overwriting files and could lead to root privilege gain. Affected components are dupatch and setld; root-priority impact is state...
CVE-2002-0221
CVE-2002-0221 affects Etype Eserv 2.97. The issue is caused by remote attackers sending a large number of PASV commands, exhausting ports 1024–5000 and preventing the server from accepting valid PASV connections, resulting in a denial of service. Exploit details and mitigation are not provided in...
CVE-2002-0221
Etype Eserv 2.97 allows remote attackers to cause a denial of service resource exhaustion via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV...
CVE-2001-0221
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges...
CVE-2001-0221
CVE-2001-0221 describes a buffer overflow in ja-xklock version 2.7.1 and earlier that can allow local users to gain root privileges. The affected component is ja-xklock (no vendor/version context beyond the versioning in the CVE). The connected documents confirm the generic impact (local privileg...