8091 matches found
CVE-2004-2767
CVE-2004-2767 affects NWFTPD.nlm before 5.04.25 in the Novell NetWare FTP server. The flaw is that it does not promptly close DS sessions, allowing remote attackers to exhaust connection slots by opening many FTP sessions that persist for the lifetime of a DS session, causing a denial of service....
ZoneAlarm SMTP Buffer Overflow (CVE-2004-0309)
Zone Alarm and Integrity Client products provide application-level SMTP session processing. A vulnerability exists in the SMTP protocol processing function in ZoneLabs' ZoneAlarm 4.x and Integrity client 4.x products. The vulnerability can be triggered by sending specific malformed links to the...
Debian Security Advisory DSA 2004-1 (samba)
The remote host is missing an update to samba announced via advisory DSA 2004-1. OpenVAS Vulnerability Test $Id: deb20041.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2004-1 samba Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Format string
Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record...
CVE-2010-0262
CVE-2010-0262 describes a remote code execution vulnerability in Microsoft Office Excel stemming from an uninitialized memory access in the FNGROUPNAME record during parsing of Excel files. The issue could let an attacker execute arbitrary code with the privileges of the user who opens a crafted ...
Microsoft Excel FNGROUPNAME记录未初始化内存漏洞（MS10-017）
BUGTRAQ ID: 38553 CVE ID: CVE-2010-0262 Excel是微软Office套件中的电子表格工具。 Excel在解析XSL文件中畸形FnGroupName、BuiltInFnGroupCount和FnGrp12记录时存在未初始化内存漏洞，成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Excel 2007 SP2 Microsoft Excel 2007 SP1 Microsoft Office 2004 for Mac 临时解决方法： 使用Microsoft Office文件阻断策略以防止打开未知或不可信任来源的Office...
Microsoft Excel DbOrParamQry对象解析内存破坏漏洞（MS10-017）
BUGTRAQ ID: 38555 CVE ID: CVE-2010-0264 Excel是微软Office套件中的电子表格工具。 Excel在解析包含有畸形DbOrParamQry记录的.XLS文件时存在内存破坏漏洞，用户受骗打开了恶意的.XLS文件就可能导致执行任意代码。 DbOrParamQry记录指定了DbQuery或ParamQry记录，具体取决于之前的记录。记录查询参数（ParamQry）偏移DCh包含有有关ODBC参数化查询的记录，格式如下： /----- Offset Name Size Contents 4 wTypeSql 2 Used for ODBC querie...
Windows Media Player PNG Processing (CVE-2004-1244)
Windows Media Player supports rendering of the Portable Network Graphics PNG images. The PNG specification defines a file format that provides a lossless, portable, image compression. Windows Media Player 9 contains a core library wmp.dll for handling the decoding of PNG image files. A...
Microsoft WordPad Font Conversion Buffer Overflow (CVE-2004-0901)
There exists a vulnerability in the WordPad application shipped with the Microsoft Windows family of operating systems. A crafted Word 6.0 for Windows document could trigger a buffer overflow when it is opened with the affected software. A remote attacker could leverage this vulnerability to...
Microsoft WordPerfect 5.x Converter Buffer Overflow (CVE-2004-0573)
The Microsoft Office text editing tools support a number of foreign file formats for compatibility with third party software. The foreign file format support is based on import and export converters. When a text editor needs to read a foreign format file, a converter transforms the file to an...
AOL Instant Messenger Away Message Buffer Overflow (CVE-2004-0636)
AOL Instant Messenger AIM is an instant messaging and presence computer program which allows registered users to communicate in real time. AOL Instant Messenger AIM registers itself as the handler of URL scheme aim. There exists a vulnerability in the way AOL Instant Messenger AIM parses an away...
TWiki Search Function Arbitrary Command Execution
This module exploits a vulnerability in the search component of TWiki. By passing a 'search' parameter containing shell metacharacters to the 'WebSearch' script, an attacker can execute arbitrary OS commands. This module requires Metasploit: https://metasploit.com/download Current source:...
Microsoft PowerPoint OEPlaceholderAtom记录无效数组索引漏洞（MS10-004）
BUGTRAQ ID: 38103 CVE ID: CVE-2010-0031 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件OEPlaceholderAtom记录中的placementId字段值时存在数组索引漏洞，成功利用此漏洞的攻击者可完全控制受影响的系统。 OEPlaceholderAtom记录类型用于为幻灯片的图片、文本等对象创建占位符。如果用户提供的值大于数组大小，就可以用固定的值破坏数组边界外的栈内存。通过覆盖关键结构（如保存的返回地址），就可以导致执行任意代码。 Microsoft Office 20...
Microsoft ISAPI W3Who Library Buffer Overflow (CVE-2004-1134)
The W3Who dynamically linked library DLL, when used in the context of an IIS HTTP server, provides various information about the current HTTP client, as well as the current running environment. It is included with the Internet Services Application Programming Interface ISAPI and is meant to be us...
Ipswitch WhatsUp Gold Web Server Buffer Overflow (CVE-2004-0798)
WhatsUp is a network management and monitoring application developedby Ipswitch Inc. It has a built-in web server to enable remote accessto the application. A vulnerability exists in the way the web server component of Ipswitch WhatsUp Gold parses HTTP requests. A buffer overflow occurs due to...
Sambar 6 Search Results Buffer Overflow
This module exploits a buffer overflow found in the /search/results.stm application that comes with Sambar 6. This code is a direct port of Andrew Griffiths's SMUDGE exploit, the only changes made were to the nops and payload. This exploit causes the service to die, whether you provided the corre...
Sambar Server 6 - Search Results Buffer Overflow (Metasploit)
$Id: sambar6searchresults.rb 8480 2010-02-13 20:15:19Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2004-2086
creationtimestamp| type| source ---|---|--- 2010-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16756 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sambar6searchresults.rb 2025-02-06 03:13:38+00:00|...
