ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability

ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-045.html December 12, 2006 -- CVE ID: CVE-2006-6335 -- Affected Vendor: Sophos -- Affected Products: All versions of Sophos Anti-Virus v2.40 scanning engine --...

[Full-disclosure] ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability

ZDI-06-048: Microsoft Internet Explorer normalize Function Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-048.html December 12, 2006 -- CVE ID: CVE-2006-5581 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 -- TippingPointTM IPS Customer...

[Full-disclosure] Secunia Research: Internet Explorer Script Error Handling Memory Corruption

====================================================================== Secunia Research 12/12/2006 - Internet Explorer Script Error Handling Memory Corruption - ====================================================================== Table of Contents Affected...

CVE-2006-6493

CVE-2006-6493 reports a buffer overflow in the krbv4_ldap_auth function of OpenLDAP prior to 2.4.4 (i.e., 2.4.3 and earlier) when built with --enable-kbind (Kerberos KBIND). The flaw allows remote attackers to execute arbitrary code via an LDAP bind request using LDAP_AUTH_KRBV41 with long creden...

ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability

ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-046.html December 12, 2006 -- CVE ID: CVE-2006-6335 -- Affected Vendor: Sophos -- Affected Products: All versions of Sophos Anti-Virus v2.40 scanning engine --...

CVE-2006-6484

The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through 1.40 allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a null pointer dereference, as...

CVE-2006-6335

Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via 1 a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and 2 a CPIO...

Immunity Canvas: MS06_074

Name| ms06074 ---|--- CVE| CVE-2006-5583 Exploit Pack| CANVAS Description| Microsoft SNMP Service Remote Arbitrary GlobalFree Notes| CVE Name: CVE-2006-5583 VENDOR: Microsoft Notes: SNMP service can be configured to restart automatically allowing more attempts VersionsAffected: Repeatability: One...

CVE-2006-5583

CVE-2006-5583 is a remote code execution vulnerability in the Windows SNMP Service caused by an unchecked buffer when processing crafted SNMP GetBulk requests. Affected products include Windows 2000 SP4, Windows XP SP2, and Windows Server 2003 (including SP1 for some editions). Successful exploit...

CVE-2006-6484

CVE-2006-6484 affects MailEnable’s IMAP service in Professional/Enterprise Editions (versions 2.0–2.34; 1.1–1.40 ranges as listed) and causes a crash (DoS) via vectors that trigger a null pointer dereference. A hotfix ME-10023 addresses this issue; it is noted to be a separate issue from CVE-2006...

CVE-2006-6335

Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via 1 a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and 2 a CPIO...

CVE-2006-5578

CVE-2006-5578 affects Microsoft Internet Explorer 6 and earlier. It is a TIF folder information disclosure vulnerability exploited via drag-and-drop operations, allowing remote attackers to read files from the Temporary Internet Files (TIF) folder. Microsoft released MS06-072 (Cumulative Security...

CVE-2006-6335

Sophos Anti-Virus (scanning engine) before 2.40 is affected. In veex.dll, two parsing flaws cause remote code execution: (1) parsing SIT archives with long, non-terminated filenames leads to a heap overflow; (2) parsing CPIO archives with long, non-terminated filenames leads to a stack overflow. ...

CVE-2006-6486

SQL injection vulnerability in EasyPage allows remote attackers to execute arbitrary SQL commands via sptrees/default.aspx, possibly involving the docId parameter. Affects EasyPage (component/context not fully specified); root cause is an injection flaw in the handling of inputs to the page. CVSS...

CVE-2006-5581

CVE-2006-5581 concerns Microsoft Internet Explorer 6, where parsing certain DHTML script function calls leads to memory corruption via incorrectly created elements. Exploitation requires the user to view a malicious page, enabling remote code execution on vulnerable IE 6 clients. The vulnerabilit...

CVE-2006-5577

CVE-2006-5577 affects Microsoft Internet Explorer 6 and earlier, enabling information disclosure of the TIF (Temporary Internet Files) folder path when certain uses of the OBJECT tag occur. Connected sources confirm this is part of a family of TIF-folder vulnerabilities (CVE-2006-5577, -5578) tie...

CVE-2006-5579

CVE-2006-5579 is a remote-code-execution vulnerability in Microsoft Internet Explorer 6. IE 6 can execute arbitrary code by JavaScript causing certain errors that access previously freed memory (Script Error Handling Memory Corruption). Several related issues (CVE-2006-5581, CVE-2006-5578, CVE-20...

CVE-2006-6485

CVE-2006-6485 describes multiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the prevlocation parameter in shopper/sc/registration.cgi and other unspecified vectors. The NVD metrics rate a bas...

CVE-2006-6423

MailEnable IMAPD vulnerable in Enterprise/Professional editions (2.0–2.35 for Pro; 1.1–1.41/1.84 for various branches; 2.0–2.35), with a stack-based buffer overflow in the IMAP Login command that allows remote code execution via a crafted parameter and a long string in a pre-authenticated request...

CVE-2006-6481

Clam AntiVirus ClamAV 0.88.6 allows remote attackers to cause a denial of service stack overflow and application crash by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406...