119 matches found
Mozilla Foundation Security Advisory 2009-20
Mozilla Foundation Security Advisory 2009-20 Title: Malicious search plugins can inject code into arbitrary sites Impact: Low Announced: April 21, 2009 Reporter: Prateek Saxena Products: Firefox Fixed in: Firefox 3.0.9 Description Security researcher Prateek Saxena reported that a malicious...
Fedora 9 : Miro-2.0.3-3.fc9 / blam-1.8.5-8.fc9.1 / chmsee-1.0.1-11.fc9 / devhelp-0.19.1-11.fc9 / etc (2009-3875)
http://www.mozilla.org/security/known- vulnerabilities/firefox30.htmlfirefox3.0.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
CVE-2009-1310
CVE-2009-1310 is a cross-site scripting (XSS) vulnerability in the MozSearch plugin interface of Mozilla Firefox, exploitable via a javascript: URI in the SearchForm element. Affected software: Mozilla Firefox (before 3.0.9). Root cause: MozSearch-related XSS in the browser’s search form. Impact:...
CVE-2009-1310
Cross-site scripting XSS vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element...
CVE-2008-1310
PacketTrap Networks pt360 Tool Suite includes a TFTP server component affected by a directory traversal vulnerability. The CVE-2008-1310 entry applies to pt360 Tool Suite 1.1.33.1.0 and other versions before 2.0.3900.0, where an attacker can read and overwrite arbitrary files via directory traver...
Debian DSA-1310-1 : libexif - integer overflow
A vulnerability has been discovered in libexif, a library to parse EXIF files, which allows denial of service and possible execution of arbitrary code via malformed EXIF data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...
CVE-2003-1310
The DeviceIoControl function in the Norton Device Driver NAVAP.sys in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes aka "Device Driver Attack"...
CVE-2003-1310
The CVE concerns Norton AntiVirus 2002 on Windows, specifically the DeviceIoControl path in the Norton Device Driver (NAVAP.sys). The vulnerability allows local privilege escalation by overwriting memory locations through certain IOCTL codes, enabling a non-privileged user to gain higher privileg...
D-Link Router UPNP Stack Overflow Denial of Service Exploit (PoC)
No description provided by source. / routers affected from eEye's advisory. /str0ke Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A EBR-2310 Rev A WBR-1310 Rev A WBR-2310 Rev A / / D-Link Router UPNP DOS PoC Written By: ub3rst4r aka...
D-Link Devices - UPNP Stack Overflow Denial of Service (PoC)
D-Link Devices - UPNP Stack Overflow Denial of Service PoC / routers affected from eEye's advisory. /str0ke Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A EBR-2310 Rev A WBR-1310 Rev A WBR-2310 Rev A / / D-Link Router UPNP DOS PoC...
CVE-2006-3687
The CVE-2006-3687 issue is a stack-based buffer overflow in the UPnP service of several D-Link routers (DI-524, DI-604, DI-624, DI-784, WBR-1310, WBR-2310, EBR-2310) triggered by an oversized M-SEARCH UDP 1900 request. The CERT document notes this could allow a remote attacker to execute arbitrar...
CVE-2004-1310
CVE-2004-1310 describes a stack-based buffer overflow in MPlayer 1.0pre5’s asf_mmst_streaming.c functionality. A malformed large MMST stream packet can overflow a stack buffer, allowing remote attackers to potentially execute arbitrary code. The vulnerability is tied to MPlayer’s MMST streaming c...
CVE-2003-1310
The DeviceIoControl function in the Norton Device Driver NAVAP.sys in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes aka "Device Driver Attack"...
CVE-2002-1310
Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name...
CVE-2002-1310
The CVE-2002-1310 entry affects the IIS ISAPI handler for Macromedia JRun 4.0 and earlier, where a heap-based buffer overflow in the error-handling path can be triggered by an HTTP GET with a long .jsp filename. This leads to potential remote arbitrary-code execution. The vulnerability is tied to...
CVE-2001-1310
IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite...
CVE-1999-1310
Technical details for CVE-1999-1310 are not publicly available in the provided documents. Monitor for updates.
CVE-2001-1310
IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite...