CVE-2003-1572

CVE-2003-1572 affects Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c. The vulnerability arises in the ReadEnv class, allowing unsigned applets to cause a denial of service (JVM crash) and to read or write unauthorized memory locations by manipulating .data/.size fields to read environment va...

CVE-2003-1573

The CVE-2003-1573 entry concerns the PointBase 4.6 database component used in the J2EE 1.4 reference implementation (J2EE/RI). The vulnerability allows remote attackers to execute arbitrary programs, cause a denial of service, and obtain sensitive information through a crafted SQL statement. Root...

Race condition

win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service system crash via vectors related to CreateWindow, TranslateMessage, and DispatchMessage, possibly a race condition between threads, a different vulnerability than CVE-2008-1084. NOTE: some of the...

CVE-2008-6819

The provided data identifies CVE-2008-6819 as related to win32k.sys in Microsoft Windows Server 2003 and Windows Vista, enabling local users to cause a denial of service (system crash) through vectors tied to CreateWindow, TranslateMessage, and DispatchMessage, potentially via a race condition be...

Design/Logic Flaw

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as...

CVE-2009-1537

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as...

Microsoft warns of dangerous DirectShow flaw, attacks

Microsoft today warned that hackers are using rigged QuickTime media files to exploit an unpatched vulnerability in DirectShow, the APIs used by Windows programs for multimedia support. The company has activated its security response process to deal with the zero-day attacks has issued a pre-patc...

JVN#02331156 HP System Management Homepage vulnerable to cross-site scripting

HP System Management Homepage SMH from Hewlett-Packard is a web-based interface that can manage HP servers. SMH contains a cross-site scripting vulnerability. This vulnerability is different from JVN19240523. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the...

DOC 0day-vulnerability warning-the black bar safety net

Author: wordexp This doc to use a certain difficulty: the poc are as follows: \rtf1\ansi\ansicpg409\deff0\deflang1033 \fonttbl\f0\fmodern\fprq6\fcharset0 DOTUM; \stylesheet\stylesheet\stylesheet\stylesheet\.........\ stylesheet................. hi.baidu.com/wordexp\par Error command: :u 30cffca0 ...

CVE-2009-2003

creationtimestamp| type| source ---|---|--- 2009-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8668 2009-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8675...

Microsoft PowerPoint多个安全漏洞

CVE-2009-0220 CVE-2009-0221 CVE-2009-0222 CVE-2009-0223 CVE-2009-0224 CVE-2009-0225 CVE-2009-0226 CVE-2009-0227 CVE-2009-1128 CVE-2009-1129 CVE-2009-1130 CVE-2009-1131 CVE-2009-1137 Microsoft PowerPoint存在多个安全漏洞，它可以被恶意利用。 1 ）两个边界错误处理某些原子可以被利用来造成基于堆栈的缓冲区溢出通过一个特制的PowerPoint文件。 2...

CVE-2009-1129

Multiple stack-based buffer overflows in the PowerPoint 95 importer PP7X32.DLL in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 PPT95 native file...

CVE-2009-0226

Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string in sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory...

Memory corruption

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than...

Format string

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka "Legacy File Format Vulnerability," a different vulnerability than...

Tivoli Storage Manager Client dsmagent.exe NodeName buffer overflow

Added: 05/11/2009 CVE: CVE-2008-4828 BID: 34803 OSVDB: 54232 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. It runs a Client Acceptor Daemon CAD on ports 1581/TCP and 1582/TCP. The Client Acceptor Daemon, upon receiving a...

Tivoli Storage Manager Client dsmagent.exe NodeName buffer overflow

Added: 05/11/2009 CVE: CVE-2008-4828 BID: 34803 OSVDB: 54232 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. It runs a Client Acceptor Daemon CAD on ports 1581/TCP and 1582/TCP. The Client Acceptor Daemon, upon receiving a...

Stack overflow

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long banner. NOTE: this might overlap CVE-2003-1368...

HP-UX Update for HP WEBM Services HPSBUX00288

Check for the Version of HP WEBM Services OpenVAS Vulnerability Test HP-UX Update for HP WEBM Services HPSBUX00288 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Symantec Alert Management System Intel Alert Originator Service msgsys.exe buffer overflow

Added: 05/05/2009 CVE: CVE-2009-1430 BID: 34674 OSVDB: 54159 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. The Intel Alert Originator IAO service is a component of AMS2. The msgsys.exe process is a preprocessor for the IAO service and listens on TCP...