121 matches found
CVE-2011-0487
The CVE-2011-0487 issue affects ICQ 7 where the update mechanism does not verify update authenticity, enabling a man-in-the-middle attacker to deliver a crafted file via the automatic-update channel and achieve arbitrary code execution. Public sources in the connected documents consistently descr...
CVE-2010-0487
CVE-2010-0487 describes a remote code execution vulnerability in Windows Cabinet File Viewer (cabview.dll) where the Authenticode signature verification omits certain fields from the digest for cabinet files. Affected: Cabinet File Viewer Shell Extension (cabview.dll) versions 5.1, 6.0, 6.1 on Wi...
Microsoft Windows Cabinet File Viewer Cabview验证远程代码执行漏洞（MS10-019）
BUGTRAQ ID: 39332 CVE ID: CVE-2010-0487 Windows Cabinet File Viewer（cabview.dll）用于查看、打开、浏览和解压cabinet文件和档案。 Windows Cabinet File Viewer在签名和验证cabinet文件时忽略了文件digest的一些字段。匿名攻击者可以通过修改已有的签名cabinet文件以便将签名文件的未验证部分指向恶意代码然后诱骗用户打开或查看特制的cabinet文件来利用此漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Cabinet File Viewer...
Microsoft Windows Authentication Verification Remote Code Execution Vulnerability (981210)
This host is missing a critical security update according to Microsoft Bulletin MS10-019. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2009-0487
Cross-site scripting XSS vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post...
CVE-2009-0487
CVE-2009-0487 concerns Mahara prior to 1.0.9. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted forum post. Multiple sources in connected documents corroborate that this is an XSS issue affecting Mahara versions befo...
CVE-2008-0487
CVE-2008-0487 involves multiple SQL injection vulnerabilities in login.asp of ASPired2Protect. The vulnerability allows remote attackers to append or modify SQL commands via the (1) username and (2) password parameters, potentially exposing or altering data. The primary affected component is the ...
CVE-2007-0487
The CVE-2007-0487 issue is a PHP remote file inclusion in FreeForum 0.9.0 (index.php) exploitable via the fpath parameter, allowing remote code execution. This vulnerability is associated with FreeForum 0.9.0’s index.php and the fpath parameter, and descriptions note that third-party researchers ...
CVE-2006-0487
Technical details for CVE-2006-0487 are not publicly available in the provided documents. No concrete information on affected components, root cause, or remediation is supplied here; monitor for updates.
CVE-2005-0487
CVE-2005-0487 affects Kayako ESupport 2.3.1 (and possibly other versions). The vulnerability is a cross-site scripting (XSS) flaw in index.php exposed via the nav parameter, allowing remote attackers to inject arbitrary HTML/script. The NVD entry lists a base CVSS v2 score of 6.8 (MEDIUM) with ne...
CVE-2005-0487
Cross-site scripting XSS vulnerability in index.php for Kayako ESupport 2.3.1, and possibly other versions, allows remote attackers to inject arbitrary HTML and web script via the nav parameter...
CVE-2004-0487
A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary programs...
CVE-2004-0487
A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary programs...
CVE-2004-0487
Summary: CVE-2004-0487 corresponds to a vulnerability in Symantec Norton AntiVirus 2004 involving a vulnerable ActiveX control. The connected advisory confirms a remote attacker could trigger a denial-of-service condition by calling a specific method of this ActiveX control, with potential for ar...
CVE-2003-0487
Kerio MailServer 5.6.3 is affected by multiple buffer-overflow flaws that can be triggered by overly long parameters in specific modules (showuser in do_subscribe; folder in add_acl and list; user in do_map). These vulnerabilities allow remote authenticated users to cause a denial of service and,...
CVE-2002-0487
CVE-2002-0487 affects Intellisol Xpede 4.1, where passwords are stored in plaintext within a Javascript “session timeout” re-authentication capability. The underlying issue is plaintext password storage in a source file/cache accessible to the local user, enabling a local attacker to read credent...
CVE-2001-0487
CVE-2001-0487 affects the AIX SNMP server (snmpd) and allows remote attackers to cause a denial of service by sending a RST during the TCP connection. The provided documents do not specify the exact vulnerable component version range, affected product family beyond “AIX SNMP server snmpd,” or any...
CVE-2001-0487
AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection...
CVE-2000-0487
CVE-2000-0487 : The Protected Store in Windows 2000 does not properly select the strongest available encryption, defaulting to 40-bit instead of 56-bit DES. The description confirms a weak encryption fallback, with referenced advisory MS00-032. No exploitation details are provided in the initial ...