108 matches found
Ubuntu 6.06 LTS / 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : postfix vulnerability (USN-1131-1)
Thomas Jarosch discovered that Postfix incorrectly handled authentication mechanisms other than PLAIN and LOGIN when the Cyrus SASL library is used. A remote attacker could use this to cause Postfix to crash, leading to a denial of service, or possibly execute arbitrary code as the postfix user...
CVE-2010-1131
CVE-2010-1131 describes a denial-of-service vulnerability in Apple Safari 4.0.5 for Windows XP SP3 caused by crafted HTML containing many successive tags. Multiple connected sources corroborate: the issue affects JavaScriptCore.dll used by Safari and leads to application crash under such input, ...
CVE-2010-1131
creationtimestamp| type| source ---|---|--- 2010-03-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11838...
Microsoft PowerPoint 2000 CurrentUserAtom buffer overflow
Added: 05/21/2009 CVE: CVE-2009-1131 BID: 34841 OSVDB: 54393 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in Microsoft PowerPoint allows command execution when a user opens a presentation containin...
Microsoft PowerPoint 2000 CurrentUserAtom buffer overflow
Added: 05/21/2009 CVE: CVE-2009-1131 BID: 34841 OSVDB: 54393 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in Microsoft PowerPoint allows command execution when a user opens a presentation containin...
Microsoft PowerPoint 2000 CurrentUserAtom buffer overflow
Added: 05/21/2009 CVE: CVE-2009-1131 BID: 34841 OSVDB: 54393 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in Microsoft PowerPoint allows command execution when a user opens a presentation containin...
CVE-2009-1131
CVE-2009-1131 covers a stack-based buffer overflow in Microsoft PowerPoint 2000 SP3, triggered by reading data from a specially crafted CurrentUserAtom record in a PowerPoint file, leading to memory corruption and remote code execution. Connected advisories confirm the flaw is exploited by openin...
Microsoft PowerPoint Data Out of Bounds Stack Buffer Overflow (MS09-017; CVE-2009-1128; CVE-2009-1131)
Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overflow vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading data that is too large from...
Secunia Research: Microsoft PowerPoint Atom Parsing Buffer Overflows
====================================================================== Secunia Research 12/05/2009 - Microsoft PowerPoint Atom Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...
HP-UX Update for Xserver HPSBUX02225
Check for the Version of Xserver OpenVAS Vulnerability Test HP-UX Update for Xserver HPSBUX02225 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
HP-UX Update for Xserver HPSBUX02225
Check for the Version of Xserver OpenVAS Vulnerability Test HP-UX Update for Xserver HPSBUX02225 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
CVE-2008-1131
CVE-2008-1131 describes a Cross-site Scripting (XSS) vulnerability in Drupal 6.0 where remote authenticated users can inject arbitrary web script or HTML via titles in content edit forms. The affected component is Drupal 6.0’s content editing title handling, with the vulnerability triggered by se...
Debian Security Advisory DSA 191-2 (squirrelmail)
The remote host is missing an update to squirrelmail announced via advisory DSA 191-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2006-1131
Cross-site scripting XSS vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the commenttitle parameter...
CVE-2006-1131
The CVE refers to a Cross-site Scripting (XSS) vulnerability in bitweaver CMS 1.2.1, specifically in read.php where the comment_title parameter is not properly sanitized, allowing injection of arbitrary web script or HTML. Documented impact is partial integrity impact with no confidentiality or a...
Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access Document ID: 68034 Revision 1.0 For Public Release 2005 November 02 1500 UTC GMT -...
CVE-2005-1131
CVE-2005-1131 affects Veritas i3 Focalpoint Server versions 7.1 and earlier. The vulnerability is described with unknown attack vectors and an impact described as 'critical' in the initial records, with NVD noting a network-attack vector (AV:N) and a base score of 10.0. The connected documents do...
CVE-2003-1131
PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to reference a URL on a remote web server that contains the code...
CVE-2004-1131
CVE-2004-1131 affects SCO OpenServer 5.0.6 and 5.0.7. The vulnerability involves multiple buffer overflows in the enable command, allowing local users to execute arbitrary code via long command line arguments. These details come from the description of the CVE entry and are corroborated by associ...