TPTI-07-15: Automated Solutions Modbus TCP Slave ActiveX Control Heap Corruption Vulnerability

TPTI-07-15: Automated Solutions Modbus TCP Slave ActiveX Control Heap Corruption Vulnerability http://www.zerodayinitiative.com/advisories/TPTI-07-15.html September 17, 2007 -- CVE ID: CVE-2007-4827 -- Affected Vendor: Automated Solutions -- Affected Products: Modbus RTU/ASCII/TCP Slave ActiveX...

SYMSA-2007-009: RemoteDocs R-Viewer Code Execution and Sensitive Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-009 Advisory Title: RemoteDocs R-Viewer Code Execution and Sensitive Information Disclosure Author: Adam Baldiwn / [email protected]...

Alcatel-Lucent OmniPCX Remote Command Execution

Advisory: Alcatel-Lucent OmniPCX Remote Command Execution RedTeam Pentesting discovered a remote command execution in the Alcatel-Lucent OmniPCX during a penetration test. The masterCGI script of the OmniPXC integrated communication solution web interface is vulnerable to a remote command...

[SECURITY] [DSA 1375-1] New OpenOffice.org packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1375-1 [email protected] http://www.debian.org/security/ Martin Schulze September 17th, 2007 http://www.debian.org/security/faq -...

CVE-2007-4959

CVE-2007-4959 : Cross-site scripting (XSS) in osCMax 2.0.0-RC3-0-1, specifically in catalog_products_with_images.php, allows remote attackers to inject arbitrary web script or HTML via the URI. The description and connected sources confirm the vulnerable component and vector but do not provide re...

CVE-2007-4965

CVE-2007-4965 affects Python’s imageop module in Python 2.5.1 and earlier. The issue is multiple integer overflows that enable context-dependent attackers to cause a denial of service (application crash) and potentially read memory contents via crafted arguments to the tovideo method and related ...

CVE-2007-4966

CVE-2007-4966 affects GForge 4.6b2 and earlier. The flaw is a SQL injection in www/people/editprofile.php via the skill_delete[] parameter, allowing remote attackers to execute arbitrary SQL commands. Documented impacts include potential data exposure and modification; CVSS v2 base score 6.8 (MED...

CVE-2007-4966

SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...

CVE-2007-4962

The CVE-2007-4962 entry affects WinImage up to version 8.10. A directory traversal flaw lets an attacker place or overwrite files by crafting a filename containing .. within a .IMG or .ISO image, potentially enabling code execution by writing to a Startup folder. The NVD entry and related records...

CVE-2007-4964

CVE-2007-4964 affects WinImage 8.10 and earlier. A malformed BPB_BytsPerSec field in the header of a .IMG file can allow remote attackers to cause a denial of service via an infinite loop. The available connected documents confirm the affected product and the underlying cause, but do not provide ...

CVE-2007-4958

CVE-2007-4958 affects TinyWebGallery (TWG) 1.6.3.4. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the URI for index.php, i_frames/i_login.php, and i_frames/i_top_tags.php. The underlying cause is ...

CVE-2007-4963

The CVE concerns WinImage 8.10 and earlier, which has a visual truncation vulnerability in filenames inside .IMG or .ISO files. A long sequence of space characters in a destination filename can be used to spoof the target name, and this can be combined with a separate directory traversal vulnerab...

CVE-2007-4961

The CVE-2007-4961 description documents an authentication flaw in Linden Lab Second Life: the login_to_simulator method (used by the secondlife:// protocol handler) transmits an MD5 hash in cleartext in the passwd field, enabling an attacker who can sniff network traffic to login to an account by...

CVE-2007-4750

Affected product: RemoteDocs R-Viewer (Windows) prior to 1.6.3768. Issue: design flaw in RDZ handling can execute code when opening a crafted RDZ archive, with the first file’s extension triggering execution; also exists potential leakage of unencrypted document copies from temporary directories....

CVE-2007-3010

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action...

CVE-2007-4751

CVE-2007-4751 affects RemoteDocs R-Viewer prior to 1.6.3768. The vulnerability arises from storing encrypted RDZ data in unencrypted temporary files, enabling local users to read sensitive information from leftover copies. The associated Symantec advisory also indicates a design flaw that can all...

CVE-2007-2834

The CVE describes a heap-based buffer overflow in the TIFF parser of OpenOffice.org (and StarOffice/StarSuite) caused by an integer overflow when processing TIFF files, enabling remote arbitrary code execution. The issue affects OpenOffice.org-based suites prior to version 2.3 and StarOffice/Star...

CVE-2007-3010

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action...

Immunity Canvas: JOOMLA12PIC_INCLUDE

Name| joomla12picinclude ---|--- CVE| CVE-2007-4954 Exploit Pack| CANVAS Description| Joomla 12pic Component Remote File Inclusion Notes| CVE Name: CVE-2007-4954 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.pl/exploitalert/2780 CVE Url:...

CVE-2007-0326

Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX control before 2.0.0.10, as used by multiple retailers, allow remote attackers to execute arbitrary code via unspecified vectors...