CVE-2007-6235

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

Information disclosure

Unspecified vulnerability in Apple QuickTime 7.2 on Windows XP allows remote attackers to execute arbitrary code via unknown attack vectors, probably a different vulnerability than CVE-2007-6166. NOTE: this information is based upon a vague advisory by a vulnerability information sales organizati...

Design/Logic Flaw

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service application crash via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904...

CVE-2007-6235

The CVE-2007-6235 issue concerns RealNetworks RealPlayer 11, specifically an ActiveX control that can be abused by a malformed .au file to trigger a divide-by-zero error, leading to an application crash (DoS). This is a remote-access vulnerability via a crafted multimedia file; the available conn...

CVE-2007-6227

CVE-2007-6227 affects QEMU 0.9.0, where a local user in a Windows XP SP2 guest can overwrite the TranslationBlock (code_gen_buffer) due to an overflow, with unspecified additional impacts. The issue is documented across multiple advisories (Mandriva MDVSA-2008:162; Gentoo GLSA 2014-08-17; RH Red ...

CVE-2007-6224

CVE-2007-6224 affects RealNetworks RealAudioObjects.RealAudio ActiveX control (rmoc3260.dll) shipped with RealPlayer 11. A crafted argument to GetSourceTransport can cause a denial of service resulting in a browser crash. The vulnerable component is the RealAudio ActiveX control; impact is a part...

CVE-2007-6231

Vulnerability: CVE-2007-6231 affects tellmatic 1.0.7 with multiple PHP remote file inclusion flaws that allow an attacker to execute arbitrary PHP code via a URL in tm_includepath for files under include/, including Classes.inc.php, statistic.inc.php, status.inc.php, status_top_x.inc.php, and lib...

CVE-2007-6229

CVE-2007-6229 describes a PHP remote file inclusion in Rayzz Script 2.0. The vulnerability affects the file common/classes/class_HeaderHandler.lib.php and permits remote attackers to execute arbitrary PHP code by supplying a URL in the CFG[site][project_path] parameter. The NVD entry cites a CVSS...

CVE-2007-6234

CVE-2007-6234 : The vulnerability in FTP Admin 0.1.0 allows remote attackers to bypass authentication and gain administrative access by supplying a loggedin=true parameter, demonstrated by adding a user account. The issue affects the login/authentication check in index.php and has a high impact (...

CVE-2007-6236

The vulnerability CVE-2007-6236 affects Microsoft Windows Media Player. Description: WMP can be remotely triggered by processing a specially crafted AIFF file (kr.aiff) to cause an application crash via a divide-by-zero error. Impact is a remote denial of service on affected WMP instances. No spe...

CVE-2007-6237

cp.php in DeluxeBB 1.09 fails to verify that the membercookie matches the authenticated member during profile updates, enabling remote authenticated users to change e-mails for arbitrary accounts via a modified membercookie parameter (a different vector than CVE-2006-4078). This can be leveraged ...

CVE-2007-6226

The CVE-2007-6226 entry concerns the APC AP7932 0u 30A Switched Rack PDU. Affected components are the RPDU firmware 3.5.5 and AOS 3.5.6. The root cause is an authentication bypass that allows remote attackers to gain login access by initiating a login while another client is already logged in, th...

CVE-2007-6230

CVE-2007-6230 describes a directory-traversal vulnerability in Rayzz Script 2.0, where an attacker can use ".." in CFG[site][project_path] to cause local file inclusion and execution via common/classes/class_HeaderHandler.lib.php. The CVSS metrics indicate network access with low complexity and n...

CVE-2007-6232

CVE-2007-6232 describes a cross-site scripting (XSS) vulnerability in the FTP Admin 0.1.0 web interface. The issue is in the file index.php , where an attacker can inject arbitrary web script or HTML by supplying a crafted value to the error parameter of an error page action. This is a remote-exe...

CVE-2007-6238

Technical details for CVE-2007-6238 are not publicly provided in the provided documents; the Initial Description is vague. Monitor for updates.

CVE-2007-6233

CVE-2007-6233 affects FTP Admin 0.1.0. The vulnerability is a directory traversal in index.php, where a .. in the page parameter can cause local file inclusion/execution. This could allow an authenticated remote user to include/execute arbitrary local files; in some environments, UNC share paths ...

CVE-2007-6233

Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an...

CVE-2007-6239

CVE-2007-6239 affects Squid 2.x up to 2.6.STABLE17 and Squid 3.0. A flaw in cache update reply processing can cause denial of service by exhausting memory (array/memory leak) during requests for cached objects, via remote attackers. The issue is triggered by HTTP header handling and related array...

CVE-2007-6228

The CVE-2007-6228 issue is a stack-based buffer overflow in the yt.ythelper.2 ActiveX control used by Yahoo! Toolbar 1.4.1. A long argument to the c() method can remotely trigger a denial of service (browser crash). Public documentation notes no patch from the vendor at the time of reports; users...

CVE-2007-6225

CVE-2007-6225 affects Sun Solaris 10 on x86 in 64-bit mode with a Linux lx branded zone, enabling local users to trigger a denial of service (panic) via unspecified vectors. Documents confirm the affected environment but do not provide a fix or remediation details. Related entries (e.g., CVE-2009...