Lotus Notes Attachment Viewer UUE file buffer overflow

Added: 02/21/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23065 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the attachment viewer in the Lotus Notes e-mail client allows command execution when a user opens a specially crafted UUE file. Resolution Upgra...

CVE-2005-4725

This entry concerns Geeklog prior to version 1.3.11sr3. The vulnerability allows remote attackers to bypass intended access controls and post a comment on an arbitrary story or topic by guessing the story ID. Evidence from connected sources confirms the affected software is Geeklog and the proble...

CVE-2005-4724

PhpTagCool 1.0.3 contains an SQL injection in post.php, exploitable via the X-Forwarded-For HTTP header, allowing remote SQL command execution. The vulnerability’s impact is described as partial confidentiality, integrity, and availability loss. No explicit exploit code or in-the-wild details are...

CVE-2005-1919

CVE-2005-1919 is rejected/not used; it does not represent an active vulnerability entry.

CVE-2005-1919

...

Lotus Notes HTML Speed Reader URL buffer overflow

Added: 02/17/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23068 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the HTML Speed Reader component of the Lotus Notes e-mail client allows command execution by a specially crafted e-mail message containing a lon...

ImageMagick security update

CentOS Errata and Security Advisory CESA-2006:178-2 Updated ImageMagick packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X...

Buffer overflow

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

CVE-2005-2712

CVE-2005-2712 affects IBM Lotus Domino LDAP server (nldap.exe) before version 7.0.1, and 6.5.5 and 6.5.4 FP2. A long LDAP bind request can trigger a NULL dereference, causing the service to crash (DoS). Vendor-patched versions include Domino 6.5.5 and 7.0.1 / 6.5.4 FP2; a workaround was described...

CVE-2005-4718

CVE-2005-4718 affects Opera 8.02 and earlier. The issue allows remote denial of service (client crash) via two vectors: (1) a crafted HTML file containing a content: url(0); style attribute, a bodyA tag, a long string, and a long attribute on a u tag (oper a.html demonstrated); and (2) a BGSOUND ...

CVE-2005-4721

CVE-2005-4721 describes a cross-site scripting (XSS) vulnerability in the tmsPUBLISHER 3.3 product, specifically in the search.cfm component. The issue arises when constructing the query via the q parameter, allowing remote attackers to inject arbitrary web script or HTML. The provided sources co...

CVE-2005-4717

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1/SP2, and Windows Server 2003 SP1 is affected. A vulnerability in the rendering path (DIV containing a malformed IMG tag) combined with a malformed CSS/HTML file can trigger a null dereference, causing a remot...

CVE-2005-4716

Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX are affected. The CVE describes remote attackers causing denial of service: (1) OpenTP1 system outage via invalid data to a port used by a system-server process, and (2) process failure via invalid data to a port used by certain other proce...

CVE-2005-4720

The CVE-2005-4720 entry affects Mozilla Firefox 1.0.7 and earlier on Linux. The issue is triggered by an IFRAME element with a very large WIDTH value, which exposes a bug in floating-point number representation that can cause an infinite loop of widget resizes and an excessive number of function ...

CVE-2006-0708

Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via 1 an m3u file containing a long URL ending in .wma, 2 a pls file containing a File1 field with a long URL ending in .wma, or 3 an m3u file with a long filename, variants of...

CVE-2005-4722

RequestMessage.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argument to pagename.cfm, which reveals the installation path in an error message...

CVE-2005-4723

CVE-2005-4723 affects D-Link DI-524, DI-624, and DI-784 routers. The root cause is a vulnerability where a sequence of crafted fragmented UDP packets (potentially involving a missing fragment) can be used to trigger a denial of service, causing the device to reboot. Public descriptions consistent...

CVE-2005-4722

CVE-2005-4722 affects tmsPUBLISHER 3.3. The issue arises from _Request_Message.cfm handling an invalid id argument to pagename.cfm, which causes an error message that reveals the installation path. This constitutes an information disclosure vulnerability enabling remote attackers to obtain sensit...

CVE-2005-4717

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service client crash via a certain combination of a malformed HTML file and a CSS file that triggers a null dereferenc...

CVE-2005-4719

Sysbotz Systems Panel 1.0.6 and earlier exposes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. Exploitable via six parameters across PHP scripts: knowledgebase/index.php (cid), knowledgebase/view.php (aid), contact/update.php (cid), links/ind...