14488 matches found
CVE-2006-6101
CVE-2006-6101 is an integer overflow in the X.Org Render extension (ProcRenderAddGlyphs) that can allow a local attacker to cause memory corruption and potentially execute arbitrary code. Affected components include X.Org releases 6.8.2, 6.9.0, 7.0, and 7.1, and the XFree86 X server. Public refer...
CVE-2006-1305
CVE-2006-1305 affects Microsoft Outlook 2000, 2002, and 2003. The vulnerability is a denial-of-service caused by how Outlook processes malformed e-mail header information (e.g., long subject lines or many recipients in To/CC), leading to memory exhaustion and interrupted mail recovery. CERT/NVD e...
CVE-2006-3432
CVE-2007-0028 (not CVE-2006-3432) describes a remote code execution vulnerability in Microsoft Excel involving malformed opcodes/records that could be exploited when parsing XLS files. Affected products include Excel 2000, 2002, 2003, Excel Viewer 2003, and Office for Mac (Excel 2004 for Mac and ...
CVE-2006-5574
The CVE-2006-5574 entry concerns Office 2003 Brazilian Portuguese Grammar Checker vulnerability. A remote code execution flaw exists when the Office 2003 Brazilian Portuguese Grammar Checker parses text inside a file opened by the user, enabling an attacker to gain complete control if the user is...
CVE-2006-6911
CVE-2006-6911 describes an SQL injection vulnerability in search.asp of Digitizing Quote And Ordering System 1.0. The underlying issue is improper sanitization of the ordernum parameter, allowing authenticated remote users to manipulate SQL queries. Impact per sources: potential arbitrary SQL exe...
CVE-2006-6912
phpMyFAQ is affected by SQL injection in versions up to 1.6.7 (and advisories also reference
CVE-2006-6913
CVE-2006-6913 affects phpMyFAQ 1.6.7 and earlier. An unspecified vulnerability allows remote attackers to upload arbitrary PHP scripts via unspecified vectors. Multiple reports reference this entry and describe the ability to upload executable files, but the exact vectors, affected components, an...
Moderate: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes a security issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe Flash Player browser plug-in. A flaw was found in t...
CVE-2006-6910
Analysis of CVE-2006-6910 (Fersch Formbankserver 1.9) shows that formbankcgi.exe is vulnerable when PATH_INFO begins with Abfrage. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending multiple requests containing many /../ sequences in the Name paramete...
CVE-2006-6909
Karl Dahlke Edbrowse 3.1.3 is affected by a stack-based buffer overflow in http.c that can be triggered by an FTP server sending directory listings with overly long user names or group names. This may allow remote code execution. The vulnerability is tied to the handling of directory listing fiel...
CVE-2006-5755
CVE-2006-5755 affects the Linux kernel on x86_64 where, during a context switch, EFLAGS were not properly saved/restored. This can allow a local user to trigger a denial-of-service crash by causing SYSENTER to set an NT flag, which may crash on the IRET of the next task. The vulnerability is docu...
FileCOPA FTP Server <= 1.01 (LIST) Remote BoF Exploit (meta)
Exploit for unknown platform in category remote exploits ============================================================ FileCOPA FTP Server 'FileCopa FTP Server pre 18 Jul Version', 'Version' = '$Revision: 0.1 $', 'Authors' = 'Jacopo Cervini ' , 'Arch' = 'x86' , 'OS' = 'win32', 'win2000', 'winxp',...
Taobao password guessing-vulnerability warning-the black bar safety net
| The following is quoted fragment: % 'Test Taobao landing 'Coded '2006-4-17 Response. Buffer = False Dim myUser,myPass myUser = "username" myPass = "password" Response. Write CheckPassmyUser,myPass '-----------------Package to determine the function begin---------------- Function...
CVE-2006-6336
CVE-2006-6336 – Eudora WorldMail Mail Management Server (MAILMA.exe) affects Eudora WorldMail 3.1.x. The flaw is a heap-based buffer overflow in the Mail Management Server’s parsing of successive delimiters, enabling an unauthenticated, remote attacker to execute arbitrary code by sending a craft...
MITKRB5-SA-2006-002: kadmind (via RPC lib) calls uninitialized function pointer
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MIT krb5 Security Advisory 2006-002 Original release: 2007-01-09 Last update: 2007-01-09 Topic: kadmind via RPC library calls uninitialized function pointer Severity: CRITICAL CVE: CVE-2006-6143 CERT: VU481564 SUMMARY ======= The Kerberos administrati...
CVE-2006-5974
The CVE-2006-5974 issue affects fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, where refusing a message via the mda option can trigger a NULL pointer dereference in ferror or fflush, causing remote denial of service (crash). The root cause is a NULL pointer dereference in the handling path. Affected...
CVE-2006-5867
CVE-2006-5867 affects fetchmail prior to 6.3.6-rc4, where TLS enforcement was inadequate and could transmit cleartext passwords over unsecured links, enabling password disclosure via MITM. Connected advisories confirm updated fetchmail packages with TLS enforcement (e.g., enabling TLS1) to fix th...
Sun Java JRE vulnerable to arbitrary code execution via an undetermined error
Overview A vulnerability in the Sun Java Runtime Environment may allow an attacker to execute arbitrary code on a vulnerable system. Description The Sun Java Runtime Environment JRE allows users to run Java applications in a browser or as standalone programs. Sun has made the JRE available for...
CVE-2006-4098
CVE-2006-4098 describes a stack-based buffer overflow in the CSRadius service of Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine prior to 4.1. A remote attacker who can craft a RADIUS Accounting-Request packet may execute arbitrary code or crash the CSRadius service, ...