CVE-2007-6701

Multiple stack-based buffer overflows in the Spooler service nwspool.dll in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple unspecified RPC functions, aka Novell bug 287919, a different vulnerability than CVE-2007-2954...

CVE-2007-6148

CVE-2007-6148 describes a use-after-free in the Edge Server of Adobe Flash Media Server 2 (before 2.0.5) and Connect Enterprise Server 6 (before SP3) that allows remote code execution via a sequence of RTMP requests. Seebug aggregates describe multiple vulnerabilities (including integer overflows...

CVE-2007-6431

Technical details for CVE-2007-6431 are not provided in the supplied documents; no affected products, vectors, or fixes are specified. Monitor for updates.

CVE-2007-6431

Unspecified vulnerability in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to "take control of the affected system" via unspecified vectors, a different issue than CVE-2007-6148 and CVE-2007-6149...

CVE-2007-6701

CVE-2007-6701 covers multiple stack-based buffer overflows in the Spooler service (nwspool.dll) of Novell Client 4.91 SP4 for Windows, enabling remote code execution via long RPC arguments. The incident is described across multiple sources as a separate issue from CVE-2007-2954, with the vulnerab...

CVE-2007-6149

Adobe Flash Media Server 2 before 2.0.5 (and Connect Enterprise Server 6 before SP3) contains multiple integer overflow and memory-corruption flaws in the Edge Server that processes RTMP messages. The flaws allow remote attackers to trigger an integer-based allocation that can lead to heap overfl...

iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Multiple Integer Overflow Vulnerabilities

iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Adobe Flash Media Server is an application server for Flash based applications. It provides an environment to run interactive media applications, as well as audio and video...

CVE-2007-3676

IBM DB2 Universal Database UDB Administration Server DAS 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via modified pointer values in unspecified remote administration requests, which triggers memory...

iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability

iDefense Security Advisory 02.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 12, 2008 I. BACKGROUND Microsoft Works is a word processor created by Microsoft in the 1980s. Microsoft Office, a widely use productivity suite, is distributed with converters for various versions of th...

IBM Domino Web Access Upload Module - Overwrite (SEH)

IBM Domino Web Access Upload Module Universal BoF Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

iMesh IMWeb.IMWebControl ActiveX (IMWeb.dll) SetHandler Method Arbitrary Code Execution

The IMWeb.IMWebControl.1 ActiveX control, included with the IMesh peer-to-peer file sharing application, is installed on the remote host. It reportedly allows arbitrary command execution through its 'SetHandler' method. If a remote attacker can trick a user on the affected host into visiting a...

IBM Domino Web Access Upload Module SEH Overwrite Exploit

Exploit for unknown platform in category remote exploits ========================================================= IBM Domino Web Access Upload Module SEH Overwrite Exploit ========================================================= IBM Domino Web Access Upload Module Universal BoF Exploit function...

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability

OpenLDAP 2.3.39 MODRDN Remote Denial of Service Vulnerability. CVE-2008-0658. Dos exploit for linux platform source: http://www.securityfocus.com/bid/27778/info OpenLDAP is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users...

CVE-2007-3676

IBM DB2 Universal Database UDB Administration Server DAS 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via modified pointer values in unspecified remote administration requests, which triggers memory...

CVE-2007-5757

The CVE-2007-5757 issue concerns IBM DB2 UDB and specifically the db2pd component. A untrusted search path allows a local user to gain root privileges by manipulating the DB2INSTANCE environment variable to point to a malicious library. Affected versions are IBM DB2 UDB 8 before FixPak 16 and 9 b...

CVE-2007-3676

CVE-2007-3676 concerns IBM DB2 UDB DAS prior to Fix Pack 16 (DAS 8.x) and Fix Pack 4 (DAS 9.x). The vulnerability allows a remote attacker to crash the DAS service or potentially execute arbitrary code by sending specially crafted remote administration requests that modify pointer values, trigger...

[SECURITY] [DSA 1495-1] New nagios-plugins packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1495-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 12, 2008 http://www.debian.org/security/faq -...

CVE-2007-0065

CVE-2007-0065 is a remote code execution vulnerability described as an OLE Heap Overrun in Object Linking and Embedding (OLE) Automation. The flaw is a heap-based buffer overflow triggered by specially crafted script requests, affecting Windows 2000 SP4, Windows XP SP2, Windows Server 2003 SP1/SP...

CVE-2007-0216

CVE-2007-0216 is a remote code execution vulnerability in the Microsoft Works File Converter. It stems from improper validation of .wps section length headers in wkcvqd01.dll. A crafted .wps file could allow an attacker to take control of the affected system. Affected products include Microsoft O...

CVE-2007-5659

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655...