CVE-2011-1471

CVE-2011-1471 : Integer signedness error in zip_stream.c of PHP’s Zip extension (pre-5.3.6) allows context-dependent attackers to cause a denial of service via malformed ZIP archives that trigger errors in zip_fread. Affected product/version: PHP before 5.3.6 (Zip extension). Impact: CPU consumpt...

CVE-2011-1471

Integer signedness error in zipstream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service CPU consumption via a malformed archive file that triggers errors in zipfread function calls...

CVE-2011-1471

creationtimestamp| type| source ---|---|--- 2011-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35485...

RSA Authentication Agent for Web Buffer Overflow (CVE-2005-1471)

The RSA Authentication Agent for Web for Internet Information Services IIS provides protection for selected web pages by securing them with the RSA SecurID authentication mechanism. When a user attempts to access a resource that is secured with the RSA SecurID, the RSA Agent authenticates the use...

CVE-2010-1471

CVE-2010-1471 affects Joomla! component AddressBook (com_addressbook) 1.5.0. A directory traversal (Local File Inclusion) flaw allows an attacker to read arbitrary files by supplying .. in the controller parameter to index.php. The Nuclei template and related records corroborate this LFI, specify...

CVE-2010-1471

creationtimestamp| type| source ---|---|--- 2010-04-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12170...

CVE-2008-1471

The CVE-2008-1471 issue affects Panda Security products using the cpoint.sys kernel driver (Panda Internet Security 2008 and Antivirus+ Firewall 2008). A crafted IOCTL request can trigger an out-of-bounds write in kernel memory, enabling a local attacker to cause a denial of service (system crash...

Panda Security cpoint.sys Kernel Memory Corruption

A vulnerability in the 'Cpoint.sys' kernel driver shipped with Panda Antivirus+ Firewall 2008 and Panda Internet Security 2008 fails to sufficiently validate IOCTL requests before processing them. A local attacker may be able to leverage this issue to execute arbitrary code with kernel privileges...

CVE-2008-1471

creationtimestamp| type| source ---|---|--- 2008-03-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31363...

Debian Security Advisory DSA 1471-1 (libvorbis)

The remote host is missing an update to libvorbis announced via advisory DSA 1471-1. OpenVAS Vulnerability Test $Id: deb14711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1471-1 libvorbis Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1471-1 : libvorbis - several vulnerabilities

Several vulnerabilities were found in the Vorbis General Audio Compression Codec, which may lead to denial of service or the execution of arbitrary code, if a user is tricked into opening a malformed Ogg Audio file with an application linked against libvorbis. %NASLMINLEVEL 70300 C Tenable Networ...

RSA Authentication Agent for Web for IIS chunked encoding overflow

Added: 07/13/2007 CVE: CVE-2005-1471 BID: 13524 OSVDB: 16164 Background RSA Authentication Agent For Web for IIS provides access control for applications on IIS web servers. Problem A heap overflow vulnerability when using chunked transfer-encoding allows remote attackers to execute arbitrary...

RSA Authentication Agent for Web for IIS chunked encoding overflow

Added: 07/13/2007 CVE: CVE-2005-1471 BID: 13524 OSVDB: 16164 Background RSA Authentication Agent For Web for IIS provides access control for applications on IIS web servers. Problem A heap overflow vulnerability when using chunked transfer-encoding allows remote attackers to execute arbitrary...

RSA Authentication Agent for Web for IIS chunked encoding overflow

Added: 07/13/2007 CVE: CVE-2005-1471 BID: 13524 OSVDB: 16164 Background RSA Authentication Agent For Web for IIS provides access control for applications on IIS web servers. Problem A heap overflow vulnerability when using chunked transfer-encoding allows remote attackers to execute arbitrary...

CVE-2006-1471

Format string vulnerability in the CFsyslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file...

CVE-2006-1471

CVE-2006-1471 : In Apple Mac OS X, up to 10.4.6, the CF_syslog function in launchd is vulnerable to a format-string vulnerability in syslog calls, allowing local users to execute arbitrary code via crafted plist files. Affected: Mac OS X 10.4.x before 10.4.7 follows the vulnerability. Mitigation:...

CVE-2005-1471

The CVE-2005-1471 issue is a heap overflow in RSA Authentication Agent for Web for IIS (RSA SecurID Web Agent) when processing chunked transfer-encoding data. This vulnerability could allow a remote attacker to execute arbitrary code on the server, typically with LocalSystem privileges on the IIS...

CVE-2001-1471

CVE-2001-1471 affects phpBB versions 1.4.0 and earlier. The root cause is an invalid language value in prefs.php (and related auth.php handling) that can let a remote authenticated user modify variables (e.g., $l_statsblock, $l_privnotify) and later use them in an eval, enabling arbitrary PHP cod...

CVE-2004-1471

CVE-2004-1471 affects CVS: formats-string vulnerability in wrapper.c remote-code path exploited by wrappers, with CVSROOT commit access allowing DoS (crash) and potential code execution. Affected ranges are CVS 1.12.x up to 1.12.8 and 1.11.x up to 1.11.16. OpenVAS/Nessus entries corroborate multi...

CVE-2004-1471

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service application crash and possibly execute arbitrary code via format string specifiers in a wrapper line...