Buffer overflow

Buffer overflow in the Cisco WebEx Recording Format WRF player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1336 and...

Ubuntu Update for linux USN-1336-1

Ubuntu Update for Linux kernel vulnerabilities USN-1336-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13361.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1336-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1336-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ESTsoft ALZip MIM File Buffer Overflow (CVE-2011-1336)

A remote code execution vulnerability has been reported in ESTsoft's ALZip. The vulnerability is due to an error while parsing MIME files. A remote attacker may exploit this vulnerability by sending a specially crafted .mim file to an affected user. Successful exploitation of this vulnerability...

ESTsoft ALZip MIM File Handling Buffer Overflow

Added: 08/09/2011 CVE: CVE-2011-1336 BID: 48493 OSVDB: 73684 Background ESTsoft ALZip is a Windows-based file compression program that can unzip 40 different zip file archives. ALZip can zip files into 8 different archives such as ZIP, EGG, TAR and others. Problem ESTsoft ALZip 8.21 and earlier i...

ALZip MIM File Processing Buffer Overflow Vulnerability

This host has ALZip installed and is prone to buffer overflow vulnerability. Vulnerabilities Insight: The flaw is due to an error in libETC.dll when processing the 'filename' field within MIM files. OpenVAS Vulnerabilities Test $Id: gbalzipmimbofvuln.nasl 6969 2017-08-21 05:56:59Z asteins $ ALZip...

CVE-2011-1336

CVE-2011-1336 affects ESTsoft ALZip ≤ 8.21. The vulnerability is a stack buffer overflow in the libETC.dll caused by parsing the filename/name fields in MIM headers. A remote attacker can trigger arbitrary code execution by convincing a user to open a crafted MIM file. Remediation: upgrade to ALZ...

CVE-2003-1336

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16530 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mircircurl.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2010-1336

INVOhost 3.4 is affected by multiple SQL injection vulnerabilities. The CVE-2010-1336 entry states remote attackers can execute arbitrary SQL via (1) id and (2) newlanguage parameters to site.php, (3) search parameter to manuals.php, and (4) unspecified vectors to faq.php. The OpenVAS/Duplicate e...

CVE-2010-1336

creationtimestamp| type| source ---|---|--- 2010-03-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11874...

RedHat Security Advisory RHSA-2009:1077

The remote host is missing updates to the kernel announced in advisory RHSA-2009:1077. This update includes backported fixes for two approved security issues. These issues only affected users of Red Hat Enterprise Linux 4.7 Extended Update Support, as they have already been addressed for users of...

RedHat Security Advisory RHSA-2009:1024

The remote host is missing updates to the kernel announced in advisory RHSA-2009:1024. Security Fixes: the exitnotify function in the Linux kernel did not properly reset the exit signal if a process executed a set user ID setuid application before exiting. This could allow a local, unprivileged...

CentOS Security Advisory CESA-2009:0473 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:0473. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

CVE-2009-1336

fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service OOPS via a long filename, related to the encodelookup function...

CVE-2009-1336

CVE-2009-1336 affects the Linux kernel (before 2.6.23) in the NFS client path. The issue is that a structure member that stores the maximum NFS filename length is not properly initialized, related to the encode_lookup function. This allows local users to trigger a denial of service (OOPS) by usin...

FileZilla FTP Server Admin Interface Denial of Service

This module triggers a Denial of Service condition in the FileZilla FTP Server Administration Interface in versions 0.9.4d and earlier. By sending a procession of excessively long USER commands to the FTP Server, the Administration Interface FileZilla Server Interface.exe when running, will...

CVE-2008-1336

CVE-2008-1336 is a SQL injection vulnerability in Koobi CMS 4.2.3–4.3.0 where an attacker can pass malicious input via the categ parameter in a links action to index.php, enabling arbitrary SQL execution. This is a different vector from CVE-2008-1122. Public references include Exploit-DB entries ...

CVE-2008-1336

creationtimestamp| type| source ---|---|--- 2008-02-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5206...

Debian Security Advisory DSA 1336-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 1336-1. OpenVAS Vulnerability Test $Id: deb13361.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1336-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1336-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...