98 matches found
Apple iTunes m3u Playlist Multiple Buffer Overflows - High Confidence (CVE-2012-0677)
Multiple buffer overflow vulnerabilities have been reported in Apple iTunes. The vulnerabilities are due to a bounds checking error in iTunes while handling specially crafted .m3u files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted .m3u file with ...
Apple iTunes m3u Playlist Multiple Buffer Overflows (CVE-2012-0677)
Multiple buffer overflow vulnerabilities have been reported in Apple iTunes...
iTunes < 10.6.3 Multiple Vulnerabilities
Binary data 6500.prm...
Apple iTunes < 10.6.3 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is older than 10.6.3 and is, therefore, affected by the following issues : - A memory corruption issue exists in WebKit that can allow malicious websites to crash the application and possibly to execute arbitrary code. CVE-2012-0672...
Apple iTunes 10.6.1.7 - .m3u Walking Heap Buffer Overflow (PoC)
Apple iTunes 10.6.1.7 - .m3u Walking Heap Buffer Overflow PoC !/usr/bin/perl Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow Vendor: Apple Inc. Product web page: http://www.apple.com Affected version: 10.6.1.7 and 10.6.0.40 Summary: iTunes is a free application for your Mac o...
Apple iTunes 10.6.1.7 - '.m3u' Walking Heap Buffer Overflow (PoC)
!/usr/bin/perl Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow Vendor: Apple Inc. Product web page: http://www.apple.com Affected version: 10.6.1.7 and 10.6.0.40 Summary: iTunes is a free application for your Mac or PC. It lets you organize and play digital music and video on...
CVE-2012-0677
creationtimestamp| type| source ---|---|--- 2012-06-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19098 2012-06-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19387...
Immunity Canvas: ITUNES_10_6_1
Name| Itunes1061 ---|--- CVE| CVE-2012-0677 Exploit Pack| CANVAS Description| Itunes 10.4 to 10.6.1 Buffer Overflow Notes| CVE Name: CVE-2012-0677 VENDOR: Apple Notes: Buffer overflow SEH based for Itunes 10.4 to 10.6.1 on Windows XP SP2 VersionsAffected: Itunes 10.4 to 10.6.1 Repeatability:...
CVE-2012-0677
Apple iTunes
Apple iTunes '.m3u' Playlist Code Execution Vulnerability (Mac OS X)
This host is installed with Apple iTunes and is prone to code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbappleitunesplaylistcodeexecvulnmacosx.nasl 5956 2017-04-14 09:02:12Z teissa $ Apple iTunes '.m3u' Playlist Code Execution Vulnerability Mac OS X Authors: Rachana Shetty...
RedHat Update for postgresql RHSA-2012:0677-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
postgresql security update
CentOS Errata and Security Advisory CESA-2012:0677 Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...
CVE-2011-0677
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...
CVE-2011-0677
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...
CVE-2011-0677
CVE-2011-0677 targets win32k.sys in Windows kernel-mode drivers, enabling local privilege escalation via a NULL pointer de-reference. A crafted application can trigger the vulnerability on affected Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, Windows 7 Go...
CVE-2010-0677
CVE-2010-0677 affects the PHP-based system component “index.php” in the Katalog Stron Hurricane version 1.3.5 (and possibly earlier). The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands through the HTTP GET parameter, enabling potential data disclos...
CVE-2010-0677
creationtimestamp| type| source ---|---|--- 2010-02-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11452...
CVE-2009-0677
avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated users to execute arbitrary code via PHP sequences in an element of the replacements array, which is processed by the pregreplace function with the eval switch, ...
CVE-2009-0677
The CVE-2009-0677 issue affects RavenNuke 2.30 (Your Account module, avatarlist.php, reachable via modules.php). It allows remote authenticated users to execute arbitrary code through PHP sequences in an element of the replacements array, which is processed by preg_replace with the eval switch as...