CVE-2005-1262

CVE-2005-1262 affects Gaim 1.2.1 and earlier. The issue allows remote attackers to cause a denial of service (application crash) by sending a malformed MSN message. Connected sources corroborate a separate but related buffer/URL handling flaw (CVE-2005-1261) and indicate updated packages to fix b...

RHEL 3 / 4 : gaim (RHSA-2005:429)

An updated gaim package that fixes two security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overflow bug was found in the way...

CVE-2004-1262

Buffer overflow in the bsbopenheader function in libbsb for bsb2ppm 0.0.6 allows remote attackers to execute arbitrary code via crafted BSB pictures...

CVE-2003-1262

Buffer overflow in the httpfetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a URL request via a long 1 host, 2 referer, or 3 userAgent value...

CVE-2002-1262

The CVE-2002-1262 entry concerns Internet Explorer 5.5 and 6.0 failing to enforce security checks on external caching, allowing a remote attacker to read arbitrary files. OpenVAS entries (8910xxxx patches) and CERT details indicate the issue involves caching/reference validation, with potential a...

CVE-2001-1262

Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string...

CVE-2001-1262

CVE-2001-1262 affects Avaya Argent Office 2.1, where a user-provided SNMP community string is compared only up to its length, allowing remote attackers to bypass authentication with a 0-length string. The documents do not provide any remediation or patch details. No exploitation status or in-the-...

CVE-2001-1262

Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string...