Adobe Reader和Acrobat TIFF图像处理缓冲区溢出漏洞

BUGTRAQ ID: 38195 CVE ID: CVE-2010-0188,CVE-2006-3459 Adobe Reader和Acrobat都是非常流行的PDF文件阅读器。 Adobe Reader和Acrobat采用的开源TIFF图像解析库libtiff实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户打开处理包含恶意TIFF图像的PDF文档在用户系统上执行任意指令，从而控制用户系统。 此安全问题其实是一个老漏洞（CVE-2006-3459）在Adobe产品中的重现。 Adobe Acrobat 9.3.1 Adobe Acrobat 8.2.1 Adobe...

Qbik WinGate WWW Proxy Server URL Processing Overflow

$Id: qbikwingatewwwproxy.rb 8547 2010-02-18 15:58:26Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

OpenOffice < 3.2 Multiple Vulnerabilities

Binary data 5339.prm...

CVE-2006-3747

creationtimestamp| type| source ---|---|--- 2010-02-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16752 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apachemodrewriteldap.rb 2025-02-06 03:13:38+00:00|...

Microsoft Internet Explorer MHTML URI Buffer Overflow (CVE-2006-2766)

There exists a buffer overflow vulnerability in the Microsoft Internet Explorer product. The flaw is caused by an improper check of the MHTML URI string. An attacker may exploit this vulnerability to cause a denial of service condition. A code execution attack is not possible as a stack integrity...

Microsoft Word Smart Tags Code Execution (MS06-027; CVE-2006-2492)

A code execution vulnerability exists in Microsoft Office Word software. The vulnerability is due to insufficient validation of certain fields related to the Smart Tags in a Word document. An attacker may exploit this vulnerability by enticing a user to open a crafted Word file, which may result ...

Debian: Security Advisory (DSA-1974-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The huftbuild function in inflate.c in gzip before 1.3.13 creates a hufts aka huffman table that is too small, which allows remote attackers to cause a denial of service application crash or infinite loop or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a...

Microsoft Internet Explorer Cross Domain Information Disclosure (MS06-042; CVE-2006-3280)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. Internet Explorer has numerous built-in mechanisms that enforce security policies which are...

TikiWiki jhot.php Script File Upload Security Bypass (CVE-2006-4602)

TikiWiki, also known as Tiki CMS/Groupware or simply Tiki, is a powerful wiki-based Content Management System CMS which allows users and/or groups of users to manage their data on-line via a web browser. TikiWiki provides numerous features, including Wiki-based Documentation, Groupware, Blogging...

CentOS 5 : kernel (CESA-2010:0046)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Microsoft Windows itss.dll CHM File Handling Heap Corruption (CVE-2006-2297)

Microsoft Windows operating systems contain numerous libraries that facilitate the processing of the many file formats that are recognized by standard Windows installations. One such file format is the Microsoft compiled help files, known as CHM. A vulnerability exists in the Microsoft Windows...

RHEL 4 : Solaris client in Satellite Server (RHSA-2008:0264)

Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server Solaris client components. This update has been rated as having moderate security impact by the Red Hat Security Response Team. This...

RHEL 3 / 4 : tomcat in Satellite Server (RHSA-2007:1069)

Updated tomcat packages that fix multiple security issues are now available for Red Hat Network Satellite Server. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Java Servlet and JavaServer Pages technologies. ...

RHEL 4 : Satellite Server (RHSA-2008:0630)

Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. During an internal security...

HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow Exploit

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HTML Help Worksho...

lineaCMS - Cross-Site Scripting

lineaCMS Cross Site Scripting Vulnerability Author : Phenom vendor : http://www.lineaphp.net language : PHP Dork : Powered by lineaCMS © 2006 lineaPHP Group Exploit : 1- http://server/path/search.php 2- type here your XSS...

lineaCMS Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications =========================================== lineaCMS Cross Site Scripting Vulnerability =========================================== lineaCMS Cross Site Scripting Vulnerability Author : Phenom vendor : http://www.lineaphp.net language : PHP...

file upload Ar Version Upload Shell Vulnerability

No description provided by source. ======================================================================================== | Title : file upload Ar Version Upload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Alger...