CVE-2012-3456

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...

Heap overflow

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...

CVE-2012-3456

Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted ODF style in an ODF...

PT-2012-4729 · Kde +1 · Calligra +1

Name of the Vulnerable Software and Affected Versions: Calligra versions 2.4.3 and earlier Description: A heap-based buffer overflow issue exists in the read function in filters/words/msword-odf/wv2/src/styles.cpp, which is part of the Microsoft import filter. This allows remote attackers to caus...

Wordpress Plugins - Zingiri Web Shop Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress Zingiri Web Shop 2.4.3 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

fckeditor 2.4.3 upload.php PHP环境下任意文件上传漏洞

No description provided by source...

Shibboleth XML Security Signature Key Parsing Denial of Service Vulnerability (Windows)

This host is installed with Shibboleth and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbshibbolethxmldosvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Shibboleth XML Security Signature Key Parsing Denial of Service Vulnerability Windows Authors: Sooraj KS...

Shibboleth XML Security Signature Key Parsing Denial of Service Vulnerability - Windows

Shibboleth is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

python security, bug fix, and enhancement update

2.4.3-43 - add missing patch 206 Related: rhbz549372 2.4.3-42 - fix testpyclbr to match the urllib change in patch 204 patch 206 - allow the 'noproxy' environment variable to override 'ftpproxy' in urllib2 patch 207 - fix typos in names of patches 204 and 205 Related: rhbz549372 2.4.3-41 - backpo...

Buffer overflow

Buffer overflow in the ftvarreadpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TrueType GX font...

CVE-2010-3814

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

CVE-2010-3855

Buffer overflow in the ftvarreadpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TrueType GX font...

FCKeditor 2.4.3 Arbitrary File Upload

Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author: grabz Software Link: http://sourceforge.net/projects/fckeditor/ Version: FCKeditor 2.x = 2.4.3 Tested on: 2.0, 2.2, 2.3.2, 2.4.0, 2.4.3 for version 2.0 - 2.2: in file FCKeditor/editor/filemanager/upload/php/upload.php $sType = isset...

FCKeditor 2.x <= 2.4.3 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ========================================================== FCKeditor 2.x = 2.4.3 Arbitrary File Upload Vulnerability ========================================================== Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author:...

FCKEditor Core 2.x 2.4.3 - FileManager upload.php Arbitrary File Upload

FCKEditor Core 2.x 2.4.3 - FileManager upload.php Arbitrary File Upload Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author: grabz Software Link: http://sourceforge.net/projects/fckeditor/ Version: FCKeditor 2.x = 2.4.3 Tested on: 2.0, 2.2, 2.3.2, 2.4.0, 2.4.3 for version 2.0 - 2.2: i...

FCKEditor Core 2.x 2.4.3 - 'FileManager upload.php' Arbitrary File Upload

Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author: grabz Software Link: http://sourceforge.net/projects/fckeditor/ Version: FCKeditor 2.x input name="NewFile" type="file...

CVE-2010-3855

Buffer overflow in the ftvarreadpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TrueType GX font...

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise Linux WS 4 RedHat...

pidgin: NSS plugin doesn't verify SSL certificates

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...