ZDI-09-026: Apple QuickTime Packed-bit Decoding Heap Overflow Vulnerability

ZDI-09-026: Apple QuickTime Packed-bit Decoding Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-026 June 2, 2009 -- CVE ID: CVE-2009-0952 -- Affected Vendors: Apple -- Affected Products: Apple Quicktime -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

QuickTime < 7.6.2 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6.2. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of MS ADPCM encoded audio data may lead to an application crash or arbitrary code execution. CVE-2009-0185 - A memor...

HP-UX Update for Ignite-UX HPSBUX01219

Check for the Version of Ignite-UX OpenVAS Vulnerability Test HP-UX Update for Ignite-UX HPSBUX01219 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

CVE-2008-0952

CVE-2008-0952 concerns the HP Instant Support HPISDataManager.dll ActiveX control. The vulnerability resides in the insecure function AppendStringToFile() , which can allow a remote, unauthenticated attacker to create files with arbitrary content by passing a full pathname as the first argument a...

CVE-2008-0952

creationtimestamp| type| source ---|---|--- 2008-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31878...

TFTP Weak Directory Permissions (HP Ignite-UX) - Active Check

The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes a world-writeable directory to anonymous TFTP access. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2004-0952

Affected software : HP-UX B.11.00–B.11.23 running Ignite-UX. Vulnerability : the add_new_client operation in Ignite-UX causes the TFTP server to grant world-writable permissions to part of the directory tree. Impact : remote attackers could modify data or trigger disk consumption via unauthorized...

CVE-2005-0952

CVE-2005-0952 describes a cross-site scripting vulnerability in the PaFileDB 3.1 web application, specifically in pafiledb.php where the attacker can inject arbitrary script via the id parameter. The vulnerability is documented across multiple sources (NVD/Nessus/NVD CVE record). Exploitation cou...

CVE-2004-0952

HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the addnewclient command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption...

CVE-2002-0952

Affected product/versions: Cisco ONS15454 optical transport platform running ONS 3.1.0–3.2.0. Vulnerability: Remote attackers can cause a denial of service (reset) by sending IP packets with non‑zero TOS bits to the Timing Control Card (TCC) LAN interface. Root cause (as stated): Improper handlin...

CVE-2002-0952

Cisco ONS15454 optical transport platform running ONS 3.1.0 to 3.2.0 allows remote attackers to cause a denial of service reset by sending IP packets with non-zero Type of Service TOS bits to the Timing Control Card TCC LAN interface...

CVE-2001-0952

The vulnerability CVE-2001-0952 affects THQ Volition Red Faction game. It allows remote attackers to cause a denial of service (hang) on a client or server by sending crafted UDP packets to port 7755. According to the records, the issue is documented with a CVSS v2 base score of 5.0 (Medium sever...

CVE-2001-0952

THQ Volition Red Faction Game allows remote attackers to cause a denial of service hang of a client or server via packets to UDP port 7755...

CVE-2000-0952

CVE-2000-0952 affects the Global CGI program, specifically global.cgi, in Global 3.55 and earlier on NetBSD. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in input handled by the CGI. Root cause: improper handling of shell input leading to comman...

CVE-1999-0952

CVE-1999-0952 describes a buffer overflow in Solaris lpstat when using the class argument, enabling local users to gain root access. The description specifies the vulnerable component and impact but does not provide concrete exploit details, affected Solaris versions, or remediation in the suppli...