151 matches found
CVE-2007-1492
CVE-2007-1492 affects winmm.dll on Windows XP. The vulnerable component is mmioRead, triggered by a crafted WAV file with a large cch argument value, enabling user-assisted remote attackers to cause a denial-of-service (infinite loop). Exploitation context and specific versions beyond Windows XP ...
Cross site scripting
Cross-site scripting XSS vulnerability in dir.php in Explorer XP allows remote attackers to inject arbitrary web script or HTML via the chemin parameter. NOTE: it is possible that this issue is resultant from CVE-2006-1492...
CVE-2001-1492
CVE-2001-1492 is a refinement duplicate of CVE-2001-1460 and has been removed from active use; the connected records show that CVE-2001-1460 documents a SQL injection vulnerability in PostNuke 0.62–0.64 (article.php) that allows remote bypass of authentication via the user parameter. No additiona...
CVE-2005-1492
The vulnerability CVE-2005-1492 affects Gossamer Threads’ Gossamer Links web links manager (Links SQL 2.x and 3.0) where the url parameter of user.cgi is not properly sanitized. The underlying issue is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary web script or HTM...
CVE-2004-1492
CVE-2004-1492 concerns the game Master of Orion III (versions up to 1.2.5 and earlier). The vulnerability arises in how the game processes an incoming data packet that contains a large size specifier, triggering a large memory allocation that can fail and cause a remote denial of service (the gam...
CVE-2004-1492
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...
CVE-2004-1492
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...
CVE-2003-1492
Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . dot at the end...
CVE-2002-1492
Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via 1 closetunnel and 2 opentunnel...
CVE-2002-1492
Cisco VPN 5000 Client for Linux (pre-5.2.7) and VPN 5000 Client for Solaris (pre-5.2.8) are affected by buffer overflows that allow a local user to gain root privileges via the close_tunnel and open_tunnel operations. Root access impact is stated; no exploit details or in-wild status are provided...