199 matches found
Critical: Red Hat Security Advisory: seamonkey security update
Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup...
CVE-2008-1236
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors related to the layout engine...
CVE-2008-1236
CVE-2008-1236 affects Mozilla Firefox (before 2.0.0.13), Mozilla Thunderbird (before 2.0.0.13), and SeaMonkey (before 1.1.9). The issue stems from memory-related vulnerabilities in the layout/web content processing, described as memory corruption via layout-engine interactions, allowing a remote ...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the...
Mozilla Foundation Security Advisory 2008-15
Mozilla Foundation Security Advisory 2008-15 Title: Crashes with evidence of memory corruption rv:1.8.1.13 Impact: Critical Announced: March 25, 2008 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.13 Thunderbird 2.0.0.13 SeaMonkey 1.1....
CVE-2007-1236
CVE-2007-1236 affects sitex applications and concerns information disclosure through error messages produced by calendar.php (parameters sxMonth[] or sxYear[]) and calendar_events.php (parameter page[]). An attacker can craft requests with numerical values that cause error responses revealing the...
[SECURITY] [DSA 1009-1] New crossfire packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1009-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1009-1] New crossfire packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1009-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2006 http://www.debian.org/security/faq -...
CVE-2006-1236
Crossfire 1.9.0 is affected by a remote code execution vulnerability in SetUp() (socket/request.c) where a long setup sound command can overflow and allow arbitrary code execution. ExploitDB details illustrate a remote-buffer overflow against crossfire-server 1.9.0. OpenVAS and Debian advisories ...
CVE-2003-1236
CVE-2003-1236 involves multiple format-string vulnerabilities in the logger function of netzio.c for the Tanne 0.6.17 release, allowing remote attackers to execute arbitrary code via format specifiers in syslog. The entry is supported by multiple sources (NVD/CVE records, CVE List, Nessus/NSM fin...
CVE-2000-1236
Oracle IAS 3.0.7 and earlier are affected by a SQL injection in the mod_sql component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the URL’s query string. The connected Nessus entry confirms this CVE-2000-1236 detail as part of Oracle Application Server multi-v...
CVE-2005-1236
CVE-2005-1236 affects DUportal DUportal 3.1.2 (and related 3.1.2 SQL) with multiple SQL injection vectors (iChannel to channel.asp/search.asp; iData to detail.asp/inc_rating.asp; iCat to detail.asp/type.asp; DAT_PARENT to inc_poll_voting.asp; iRate to inc_rating.asp). Root cause: improper input h...
CVE-2004-1236
Buffer overflow in the LDAP component for Netscape Directory Server NDS 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code...
CVE-2004-1236
The CVE-2004-1236 entry describes a buffer overflow in the LDAP component of Netscape Directory Server (NDS) 3.6 on HP-UX and other OSes, leading to remote code execution. Connected sources confirm a broader class of LDAP buffer-overflow issues across multiple vendors (e.g., HP, Netscape, Hitachi...
CVE-2004-1236
Buffer overflow in the LDAP component for Netscape Directory Server NDS 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code...
CVE-2002-1236
The CVE-2002-1236 issue affects Linksys BEFSR41 EtherFast Cable/DSL Router. Affected component: the remote web management CGI script Gozila.cgi. Root cause: when Gozila.cgi is accessed with no arguments, the router crashes, causing a denial of service. Impact: partial availability loss of the dev...
CVE-2001-1236
The CVE-2001-1236 issue affects the myphpPagetool PHP script (versions up to 0.4.3-1). The vulnerability allows remote code execution by including files from remote web sites, triggered by an HTTP request that modifies the includedir variable. The available records corroborate this single vector ...
CVE-2001-1236
myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable...