Microsoft Visual Studio ATL 'VariantClear()'远程代码执行漏洞

Bugraq ID: 35832 CVE ID：CVE-2009-0901 CNCVE ID：CNCVE-20090901 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft活动模版库ATL处理ATL头字段存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 ATL头字段存在的一个错误允许攻击者对未正确初始化的VARIANT进行VariantClear调用，基于此攻击者可以提供破坏的流触发错误处理过程中来调用VariantClear而控制整个流程。此漏洞只影响安装了使用Visual Studio...

Microsoft Visual Studio ATL 'VariantClear()' Remote Code Execution Vulnerability

Description Microsoft Visual Studio is prone to a remote code-execution vulnerability in the Active Template Library ATL. Remote attackers can exploit this issue to execute arbitrary code with the privileges of the user running an application built with the affected library. Technologies Affected...

VMSA-2008-0002 : Low severity security update for VirtualCenter and ESX

Updated VirtualCenter fixes the following application vulnerabilities a. Tomcat Server Security Update This release of VirtualCenter Server updates the Tomcat Server package from 5.5.17 to 5.5.25, which addresses multiple security issues that existed in the earlier releases of Tomcat Server. The...

Mozilla Suite/Firefox compareTo() Code Execution

This module exploits a code execution vulnerability in the Mozilla Suite, Mozilla Firefox, and Mozilla Thunderbird applications. This exploit module is a direct port of Aviv Raff's HTML PoC. This module requires Metasploit: https://metasploit.com/download Current source:...

Fedora Core 10 FEDORA-2009-4848 (giflib)

The remote host is missing an update to giflib announced via advisory FEDORA-2009-4848. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2009-2005

Cross-site request forgery CSRF vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors...

CVE-2009-1947

SQL injection vulnerability in the UnbDbEncode function in unblib/database.lib.php in Unclassified NewsBoard UNB 1.6.4 allows remote attackers to execute arbitrary SQL commands via the Query parameter in a search action to forum.php, a different vector than CVE-2005-3686...

Solaris Update for OpenWindows 3.6.2 111626-04

Check for the Version of OpenWindows 3.6.2 OpenVAS Vulnerability Test Solaris Update for OpenWindows 3.6.2 111626-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116808-02

Check for the Version of /usr/sadm/lib/smc/lib/preload/jsdk21.jar OpenVAS Vulnerability Test Solaris Update for /usr/sadm/lib/smc/lib/preload/jsdk21.jar 116808-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Solaris Update for telnet 119434-01

Check for the Version of telnet OpenVAS Vulnerability Test Solaris Update for telnet 119434-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for telnet 119433-01

Check for the Version of telnet OpenVAS Vulnerability Test Solaris Update for telnet 119433-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for OpenWindows 3.6.2 111626-04

Check for the Version of OpenWindows 3.6.2 OpenVAS Vulnerability Test Solaris Update for OpenWindows 3.6.2 111626-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Solaris Update for ImageMagick 137038-01

Check for the Version of ImageMagick OpenVAS Vulnerability Test Solaris Update for ImageMagick 137038-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Solaris Update for kernel 120011-14

Check for the Version of kernel OpenVAS Vulnerability Test Solaris Update for kernel 120011-14 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Core 9 FEDORA-2009-5118 (giflib)

The remote host is missing an update to giflib announced via advisory FEDORA-2009-5118. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-5118 (giflib)

The remote host is missing an update to giflib announced via advisory FEDORA-2009-5118. OpenVAS Vulnerability Test $Id: fcore20095118.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5118 giflib Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora 9 : giflib-4.1.3-10.fc9 (2009-5118)

CVE-2005-2974: NULL pointer dereference crash 494826 - CVE-2005-3350: Memory corruption via a crafted GIF 494823 - Solved multilib problems with documentation 465208, 474538 - Removed static library from giflib-devel package 225796 c1 Note that Tenable Network Security has extracted the preceding...

HP-UX Update for Apache HPSBUX01232

Check for the Version of Apache OpenVAS Vulnerability Test HP-UX Update for Apache HPSBUX01232 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

HP-UX Update for Trusted Mode remshd HPSBUX02072

Check for the Version of Trusted Mode remshd OpenVAS Vulnerability Test HP-UX Update for Trusted Mode remshd HPSBUX02072 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

HP-UX Update for envd HPSBUX02073

Check for the Version of envd OpenVAS Vulnerability Test HP-UX Update for envd HPSBUX02073 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...