121 matches found
CVE-2009-1201
creationtimestamp| type| source ---|---|--- 2009-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33055...
CVE-2008-1201
Affected software: Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 running on Windows. Component: FLA file parser. Root cause: parsing malformed FLA files in the FLA parser can lead to arbitrary code execution. Impact: remote code execution with user-assisted exploitation; e...
[Full-disclosure] Adobe Flash CS3 Professional FLA File Parsing Multiple Local Code Execute Vulnerabilities
Adobe Flash CS3 Professional FLA File Parsing Multiple Local Code Execute Vulnerabilities by [email protected] http://ruder.cdut.net Summary: More than three local code execute vulnerabilities exist in Adobe Flash CS3 Professional while it is parsing FLA files. An attacker who...
Microsoft Office Web组件ActiveX控件远程代码执行漏洞(MS08-017)
BUGTRAQ ID: 28135,28136 CVECAN ID: CVE-2006-4695,CVE-2007-1201 Microsoft Office Web组件是COM控件集合,用于向Web发布电子表格、图表和数据库,并查看所发布的组件。 Microsoft Office Web组件在解析特制的URL时管理内存资源的方式存在漏洞,如果用户受骗访问了恶意网页的话,就可能触发内存破坏,导致执行任意指令。 Microsoft Office Web Components 2000 临时解决方法: 禁止在Internet Explorer中运行Office Web组件库,为CLSID...
CVE-2007-1201
CVE-2007-1201 is a remote code execution vulnerability in Microsoft Office Web Components 2000 related to the DataSource handling that can trigger memory corruption. Multiple sources describe the DataSource Vulnerability as allowing an attacker to execute arbitrary code in the user’s context by v...
Debian DSA-1201-1 : ethereal - several vulnerabilities
Several remote vulnerabilities have been discovered in the Ethereal network scanner. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4574 It was discovered that the MIME multipart dissector is vulnerable to denial of service caused by an off-by-one...
CVE-2006-1201
CVE-2006-1201 affects eschew.net phpBannerExchange 2.0 and earlier (and other versions before 2.0 Update 5). The root cause is a template class that fails to sanitize user input used in PHP include(), enabling local file inclusion via an email parameter in recoverpw.php and resulting in a directo...
CVE-2003-1201
OpenLDAP prior to 2.1.13 is affected by a denial-of-service vulnerability in the back-ldbm backend. Specifically, ldbm_back_exop_passwd frees an uninitialized pointer when slap_passwd_parse does not return LDAP_SUCCESS, potentially causing a segmentation fault on remote attack. Affected versions ...
CVE-2005-1201
Summary: CVE-2005-1201 affects AZ Bulletin Board (AZBB) prior to version 1.0.08. The issue comprises two directory traversal flaws: (1) restricted to remote authenticated admin users who can delete arbitrary files via a “..” in the URL to admin_avatar.php or admin_attachment.php; (2) remote attac...
CVE-2004-1201
CVE-2004-1201 affects Opera 7.54 and describes a denial-of-service condition caused by a memory-exhaustion scenario triggered by JavaScript that repeatedly creates nested arrays and sorts them. The issue leads to an application crash. This summary reflects information from the NVD/NVD-family reco...
CVE-2004-1201
Opera 7.54 allows remote attackers to cause a denial of service application crash from memory exhaustion, as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays...
CVE-1999-1201
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service traffic amplification via a certain ICMP echo ping packet, which causes all stacks to send a ping response, aka TCP Chorusing...
CVE-2003-1201
ldbmbackexoppasswd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slappasswdparse function does not return LDAPSUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service segmentation fault...
CVE-2002-1201
IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service CPU consumption or crash via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers...
CVE-2001-1201
Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file...
CVE-2001-1201
CVE-2001-1201 : A buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file. Affected: wmcube-gdk component of WMCube/GDK 0.98. Root cause: unbounded input in object description handling leads to overflow. Impact: ...
CVE-2001-1201
Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file...
CVE-2000-1201
CVE-2000-1201 affects Check Point FireWall-1 and remote DoS is caused by a flood of packets to port 264. The available data shows a network-based vulnerability with a CVSS v2 base score of 5.0 (Medium) and no confidentiality/integrity impact, partial availability impact. No explicit exploitation ...
CVE-2000-1201
Check Point FireWall-1 allows remote attackers to cause a denial of service high CPU via a flood of packets to port 264...
CVE-2000-1201
Check Point FireWall-1 allows remote attackers to cause a denial of service high CPU via a flood of packets to port 264...