CVE-2011-0237

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1...

CVE-2011-0237

CVE-2011-0237 affects WebKit as used in Apple Safari before 5.0.6. The issue permits remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. Root cause, as described in the sources, is memory corruption within WebKit...

Microsoft Windows Kernel Could Allow Elevation of Privilege (979683)

This host is missing an important security update according to Microsoft Bulletin MS10-021. OpenVAS Vulnerability Test $Id: secpodms10-021.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Kernel Could Allow Elevation of Privilege 979683 Authors: Veerendra G Updated By: Madhuri D on...

CVE-2009-0237

Cross-site scripting XSS vulnerability in cookieauth.dll in the HTML forms authentication component in Microsoft Forefront Threat Management Gateway, Medium Business Edition TMG MBE; and Internet Security and Acceleration ISA Server 2006, 2006 Supportability Update, and 2006 SP1; allows remote...

CVE-2009-0237

CVE-2009-0237 is a non-persistent cross-site scripting (XSS) vulnerability in the HTML forms authentication component cookieauth.dll used by ISA Server and Forefront TMG MBE and affected 2006/2006 SP1, as described in the MS09-016 bulletin. The root cause is improper input validation of HTTP form...

MS09-016: Vulnerabilities in Microsoft ISA Server and Forefront Threat Management Gateway Could Cause Denial of Service (961759)

The version of Microsoft ISA Server or Forefront Threat Management Gateway installed on the remote host is affected by one or both of the following vulnerabilities : - By sending a series of specially crafted packets, an anonymous remote attacker can create orphaned open sessions in the firewall...

Microsoft Rich Textbox ActiveX control SaveFile vulnerability

Added: 10/07/2008 CVE: CVE-2008-0237 BID: 27201 OSVDB: 40234 Background Microsoft Rich Textbox is an ActiveX control which comes with Visual Basic and allows creation of formatted text in RTF files. It is located in the Richtx32.ocx file. Problem The SaveFile method in the Rich Textbox ActiveX...

Gentoo Security Advisory GLSA 200712-07 (lookup)

The remote host is missing updates announced in advisory GLSA 200712-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200712-07 (lookup)

The remote host is missing updates announced in advisory GLSA 200712-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0237

The CVE-2008-0237 entry involves the Microsoft Rich Textbox ActiveX control (Richtx32.ocx, v6.1.97.82). The vulnerability lies in the SaveFile method, which can be abused to create or overwrite arbitrary files via a web page, enabling remote access to write files on the target system. Exploitatio...

CVE-2008-0237

The Microsoft Rich Textbox ActiveX Control RICHTX32.OCX 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method...

CVE-2007-0237

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-0237

CVE-2007-0237 affects the ndeb-binary feature of Lookup (lookup-el). The vulnerability arises from insecure temporary file handling, allowing a local attacker to perform a symlink attack to overwrite arbitrary files. Affected advisories/documentation: Gentoo GLSA 200712-07, GLSA 200712-07 (Gentoo...

Debian DSA-1269-1 : lookup-el - insecure temporary file

Tatsuya Kinoshita discovered that Lookup, a search interface to electronic dictionaries on emacsen, creates a temporary file in an insecure fashion when the ndeb-binary feature is used, which allows a local attacker to craft a symlink attack to overwrite arbitrary files. %NASLMINLEVEL 70300 C...

[SECURITY] [DSA 1269-1] New lookup-el packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 1269-1 [email protected] http://www.debian.org/security/ Martin Schulze March 18th, 2007 http://www.debian.org/security/faq -...

CVE-2006-0237

CVE-2006-0237 concerns a cross-site scripting (XSS) vulnerability in index.php of GTP iCommerce. The flaw allows remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) subcat parameters due to inadequate input handling. They can influence the content rendered in a victim’...

BlackIce DoS (ping flood)

It was possible to crash the remote machine by flooding it with 10 KB ping packets. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only TBD : eEyes...

Fedora Core 3 : kdelibs-3.3.1-2.9.FC3 (2005-245)

Wed Mar 23 2005 Than Ngo 6:3.3.1-2.9.FC3 - Applied patch to fix konqueror international domain name spoofing, CVE-2005-0237, 147405 - get rid of broken AltiVec instructions on ppc - Wed Mar 2 2005 Than Ngo 6:3.3.1-2.8.FC3 - Applied patch to fix DCOP DoS, CVE-2005-0396, 150092 thanks KDE security...

CVE-2005-0237

The International Domain Name IDN support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing...

[Full-disclosure] SUSE Security Announcement: various KDE security problems (SUSE-SA:2005:022)

-----BEGIN PGP SIGNED MESSAGE----- SUSE Security Announcement Package: kdelibs3 Announcement-ID: SUSE-SA:2005:022 Date: Mon, 11 Apr 2005 15:00:00 +0000 Affected products: 9.1, 9.2, 9.3 SUSE Linux Enterprise Server 9 Novell Linux Desktop 9 Vulnerability Type: remote code execution local denial of...