CVE-2007-3901

CVE-2007-3901 describes a stack-based buffer overflow in the DirectShow SAMI parser (quartz.dll) affecting Microsoft DirectX 7.0–10.0. A crafted SAMI file can trigger a remote code execution as described in multiple sources, with exploitation tied to MS07-064 and related advisories. Public exploi...

CVE-2007-6314

BarracudaDrive Web Server before 3.8 is vulnerable to information disclosure: remote attackers can read the source code of web scripts by manipulating the file name in the URL (e.g., adding a +, a dot, or %80). Affected product: BarracudaDrive Web Server. Root cause is improper URL handling allow...

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-076.html December 11, 2007 -- CVE ID: CVE-2007-3039 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 SP4 Windows XP SP2 -- TippingPointTM IPS...

Unfixed XSS vulnerability at doebeln-fan.de

Security researcher SeeD, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting doebeln-fan.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/12/2007. It is currently unfixe...

CVE-2007-3039

CVE-2007-3039 describes a stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service RPC interface. A long string in an opnum 0x06 RPC call to port 2103 can allow remote code execution on affected systems. The vulnerable products and versions include Windows 2000 Server SP4, Wind...

CVE-2007-0064

Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format ASF file...

CVE-2007-6316

CVE-2007-6316 affects BarracudaDrive Web Server prior to 3.8. The vulnerability is an XSS in the URI path of an HTTP GET request, triggered when administrators view log files on the Trace page. Exploitation details indicate remote attackers could inject arbitrary web script/HTML via the request p...

CVE-2007-0064

The CVE-2007-0064 entry concerns a heap-based buffer overflow in the Windows Media Format Runtime (and Windows Media Services) ASF parsing code. A remote attacker could exploit this by delivering a specially crafted ASF file, potentially allowing arbitrary code execution on affected systems. Affe...

CVE-2007-6317

The CVE-2007-6317 entry describes multiple directory traversal vulnerabilities in BarracudaDrive Web Server prior to 3.8. The flaws allow remote attackers to read arbitrary files via certain ..\ sequences in the URL path, and remote authenticated users to delete arbitrary files or create arbitrar...

CVE-2007-5351

CVE-2007-5351 concerns an SMBv2 signing vulnerability in Microsoft Windows Vista. The flaw allows remote attackers to force signature re-computation and execute arbitrary code by sending crafted SMBv2 packets. Public sources and vulnerability engines tie this to MS07-063, Microsoft’s security bul...

CVE-2007-3895

CVE-2007-3895 describes a buffer overflow in Microsoft DirectShow (part of DirectX) across Windows DirectX 7.0–10.0. A remote attacker could trigger code execution by convincing a user to open a specially crafted WAV or AVI file. The issue arises from improper parsing within DirectX libraries han...

Microsoft Message Queuing queue name buffer overflow

Added: 12/12/2007 CVE: CVE-2007-3039 BID: 26797 OSVDB: 39123 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow vulnerability in the Microsoft Message Queuing service allows remote attackers t...

openSUSE 10 Security Update : cifs-mount (cifs-mount-4777)

This update of samba fixes a buffer overflow in function sendmailslot that allows to overwrite the stack with zero-bytes. CVE-2007-6015 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Debian DSA-1430-1 : libnss-ldap - denial of service

It was reported that a race condition exists in libnss-ldap, an NSS module for using LDAP as a naming service, which could cause denial of service attacks if applications use pthreads. This problem was spotted in the dovecot IMAP/POP server but potentially affects more programs. %NASLMINLEVEL 703...

Microsoft Windows Media Format Runtime ASF handling buffer overflow

Overview Microsoft Windows Media Format Runtime is vulnerable to a heap-based buffer overflow. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on an vulnerable system. Description Microsoft Windows Media Format Runtime is used by various Windows Media...

[SECURITY] [DSA 1431-1] New ruby-gnome2 packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1431-1 [email protected] http://www.debian.org/security/ Steve Kemp December 11, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1430-1] New libnss-ldap packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1430-1 [email protected] http://www.debian.org/security/ Steve Kemp December 11, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1429-1] New htdig packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1429-1 [email protected] http://www.debian.org/security/ Steve Kemp December 11, 2007 http://www.debian.org/security/faq -...

CVE-2007-6307

Multiple cross-site scripting XSS vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via 1 the link parameter or 2 the User-Agent HTTP header...

CVE-2007-6311

The CVE-2007-6311 entry describes an SQL injection in Falt4Extreme RC4 (version around 10.9.2007) exploitable via the nav_ID parameter in index.php (and possibly admin/index.php). The vulnerability allows remote attackers to execute arbitrary SQL commands and may impact data confidentiality, inte...