CVE-2007-1665

CVE-2007-1665 concerns ekg (Eksperymentalny Klient Gadu-Gadu) prior to the Debian Etch package 1:1.7~rc2-1etch1, where a memory leak in the token OCR functionality can be exploited remotely to cause a denial of service. The issue is documented across multiple feeds (including Debian security advi...

Debian DSA-1318-1 : ekg - several vulnerabilities

Several remote vulnerabilities have been discovered in ekg, a console Gadu Gadu client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-2370 It was discovered that memory alignment errors may allow remote attackers to cause a denial of service on...

CVE-2006-1665

CVE-2006-1665: Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable. The flaws allow remote attackers to inject arbitrary web script or HTML via specific input parameters: adminJump and forum_middle in forum.php; the form parameter in members.php, pm.php, and mail.php. ...

CVE-2002-1665

CVE-2002-1665 describes a buffer overflow in Yahoo! Messenger prior to February 2002, exploitable via a long set_buddygrp field that could cause a crash and potentially allow arbitrary code execution. The affected component is Yahoo! Messenger, with the root cause being an overflow in handling th...

CVE-2005-1665

CVE-2005-1665 affects Microsoft ASP.NET 1.x ViewState when not cryptographically signed; parsing crafted web session state information can lead to high CPU usage and a Denial of Service. The CPAI advisory describes it as an input sanitization/resource consumption vulnerability in ASP.NET on IIS, ...

CVE-2005-1665

The VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service CPU consumption via deeply nested markup...

CVE-2004-1665

Cross-site scripting XSS vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter...

CVE-2004-1665

PsNews is affected by cross-site scripting (XSS) flaws in index.php for version 1.1 (and older than 1.2). The OpenVAS/Nessus entries describe multiple parameter XSS allowing the attacker to steal cookies from legitimate users. The root cause is described as XSS in index.php via the no parameter, ...

CVE-2004-1665

Cross-site scripting XSS vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter...