123 matches found
Mandriva Update for mandriva-release MDVA-2010:058 (mandriva-release)
Check for the Version of mandriva-release OpenVAS Vulnerability Test Mandriva Update for mandriva-release MDVA-2010:058 mandriva-release Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...
CVE-2009-1128
Microsoft Office PowerPoint PP7 memory corruption (CVE-2009-1128) affects PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 via the PPT95 importer. Root cause: memory corruption in PP7X32.DLL when parsing sound data from specially crafted PowerPoint 95 files, enabling remote code execution when a user ...
Microsoft PowerPoint Data Out of Bounds Stack Buffer Overflow (MS09-017; CVE-2009-1128; CVE-2009-1131)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overflow vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading data that is too large from...
CVE-2008-1128
PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2008-1128
CVE-2008-1128 involves a PHP remote file inclusion in the PHPMyTourney 2 package, specifically in tourney/index.php. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a crafted value in the page parameter, leading to remote code execution via a network-accessible end...
Debian: Security Advisory (DSA-1128)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1128-1 (heartbeat)
The remote host is missing an update to heartbeat announced via advisory DSA 1128-1. Yan Rong Ge discovered that wrong permissions on a shared memory page in heartbeat, the subsystem for High-Availability Linux could be exploited by a local attacker to cause a denial of service. OpenVAS...
CVE-2007-1128
CVE-2007-1128 affects shopkitplus. The issue is an information disclosure where requests to (1) events.php with curmonth[]=01 or (2) enc/stylecss.php with changetheme[]= reveal the installation path in error messages. The affected component is PHP-based endpoints; root cause is improper handling ...
CVE-2007-1128
shopkitplus allows remote attackers to obtain sensitive information via a request to 1 events.php with a curmonth=01 query string or 2 enc/stylecss.php with a changetheme= query string, which reveals the path in various error messages...
Debian DSA-1128-1 : heartbeat - permission error
Yan Rong Ge discovered that wrong permissions on a shared memory page in heartbeat, the subsystem for High-Availability Linux could be exploited by a local attacker to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2006-1128
CVE-2006-1128 is a directory traversal vulnerability in Gallery 2 (up to 2.0.2) where the session value from a cookie is used to build file paths before sanitization, allowing remote attackers to access and delete files. Connected sources confirm the affected component is GallerySession.class and...
CVE-2003-1128
XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086...
CVE-2003-1128
CVE-2003-1128 describes a remote command execution vulnerability in XMMS.pm used by X2 XMMS Remote. An attacker can pass shell metacharacters in a request to TCP port 8086, enabling arbitrary commands execution on the affected system. The public records explicitly identify the vulnerable componen...
CVE-2004-1128
CVE-2004-1128 is a buffer overflow in CMailCOM.dll of YoungZSoft CMailServer 5.2 that allows remote code execution via an attachment with a long filename. The connected data confirms the vulnerable component and impact (remote arbitrary code execution) but does not provide specific exploit detail...
CVE-2003-1128
XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086...
CVE-2002-1128
Technical details about CVE-2002-1128 are not publicly available in the provided connected documents; available sources reiterate a buffer overflow in the inc mail utility for Compaq Tru64/OSF1 3.x via a long MH environment variable.
CVE-2001-1128
The CVE-2001-1128 vulnerability affects Progress database versions 8.3D and 9.1C. A buffer overflow is triggered by long entries in files specified via the PROMSGS or PROTERMCAP environment variables, allowing local code execution. The available documents confirm the vulnerable component and the ...
CVE-2001-1128
Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files that are specified by the 1 PROMSGS or 2 PROTERMCAP environment variables...
CVE-1999-1128
The CVE-1999-1128 entry describes Internet Explorer 3.01 on Windows 95 as vulnerable. A .isp file is automatically downloaded and executed from remote malicious sites without user prompts, allowing remote arbitrary command execution. The available documents do not specify a remediation or patch, ...