Electronic Arts SnoopyCtrl ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Electronic Arts SnoopyCtrl ActiveX Control NPSnpy.dll 1.1.0.36. When sending an overly long string to the CheckRequirements method, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/browser/ea/checkrequirement...

Moderate: kdelibs security update

3.5.4-13.el5.0.1 - Remove Version branding - Maximum rpm trademark logos removed pics/crystalsvg/-mime-rpm 3.5.4-13.el5 - Resolves: 293571 CVE-2007-0537 Konqueror improper HTML comment rendering CVE-2007-1564 FTP protocol PASV design flaw affects konqueror 3.5.4-12.el5 - resolves: 293421,...

[SECURITY] [DSA 1362-2] New lighttpd packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory 1362-2 [email protected] http://www.debian.org/security/ Steve Kemp October 7th, 2007 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

WzdFTPD 0.8.0 - 'USER' Remote Denial of Service

Indonesian Newhack Security Advisory ------------------------------------ wzdftpd new Proto = "tcp", PeerAddr = "$ip", PeerPort = "$port" || die "\n- K...

CVE-2007-5252

Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...

CVE-2007-5243

Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0.257, allow remote attackers to execute arbitrary code via 1 a long service attach request on TCP port 3050 to the a SVCattach or b INETconnect function, 2 a long create request...

CVE-2007-5253

Cart32 (shopping cart app) vulnerability CVE-2007-5253 affects the GetImage function in c32web.exe prior to Cart32 6.4. An attacker can read arbitrary files by supplying an ImageName parameter that appends a NULL byte then a file extension (e.g., ".txt%00.gif"), potentially enabling directory tra...

CVE-2007-5249

CVE-2007-5249 describes multiple buffer overflows in the Unreal Engine logging function (used by America’s Army and America’s Army Special Forces 2.8.2 and earlier) that occur when PunkBuster is enabled, allowing remote DoS via long PB_Y (to YPG on UDP 1716) or PB_U (to UCON on UDP 1716) packets....

CVE-2007-5251

CVE-2007-5251: Multiple cross-site scripting (XSS) vulnerabilities in Helm 3.2.16. The XSS vectors affect the web interface via the showOption parameter to domain.asp and the Folder or StartPath parameters to FileManager.asp. Affected component: Helm 3.2.16 web UI. Exploitation details/impact are...

CVE-2007-5255

CVE-2007-5255 describes an XSS vulnerability in Google Mini Search Appliance 3.4.14. The flaw allows remote attackers to inject arbitrary web script or HTML by supplying content to the ie parameter of the /search URI. The issue is evidenced in multiple sources (NVD/NVD-affiliates, Nessus plugin) ...

CVE-2007-5244

CVE-2007-5244 is a stack-based buffer overflow in Borland InterBase LI (Linux, 8.0.0.53–8.1.0.253; possibly Solaris) triggered by a long attach request to TCP port 3050, via the open_marker_file function. Publicly observed references include Metasploit module ib_open_marker_file.rb (Exploitation ...

CVE-2007-5243

CVE-2007-5243 covers multiple stack-based buffer overflows in Borland InterBase/Firebird components (LI 8.0.0.53–8.1.0.253 and WI 5.1.1.680–8.1.0.257) that enable remote code execution via crafted requests over TCP port 3050. Affected entry points include long service attach or create requests ta...

CVE-2007-5252

CVE-2007-5252 is a buffer overflow in NetSupport Manager (NSM) Client 10.00/10.20 and NetSupport School Student (NSS) 9.00. The flaw allows an unauthenticated, remote attacker to cause a denial of service or possibly execute arbitrary code through crafted data in the configuration exchange phase ...

CVE-2007-5257

CVE-2007-5257 affects the EDraw Office Viewer Component (officeviewer.ocx) in the EDraw.OfficeViewer ActiveX control. The vulnerability is a stack-based/buffer overflow in the FtpDownloadFile method that can be triggered by long values in the first and second arguments, affecting versions up to 5...

CVE-2007-5248

CVE-2007-5248 affects the ID Software Doom 3 engine (Doom 3 1.3.1 and earlier; Quake 4 1.4.2 and earlier; Prey 1.3 and earlier) when Punkbuster (PB) is enabled. The vulnerability arises from format string handling in two PB packets (PB_Y to YPG server; PB_U to UCON), enabling remote attackers to ...

CVE-2007-5245

CVE-2007-5245 affects Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910. The issue comprises multiple stack-based buffer overflows in the SVC_attach path (TCP port 3050) and in vectors involving INET_connect, enabling remote code execution. Evidence across sources (NVD/OpenV...

CVE-2007-5258

CVE-2007-5258 affects phpFreeLog v0.2.0 (log.php) with a remote file inclusion vulnerability that allows an attacker to include and execute arbitrary files via unspecified vectors. The underlying cause is not detailed in the provided sources beyond RFI in log.php. No concrete exploitation details...

CVE-2007-5246

CVE-2007-5246 describes multiple stack-based buffer overflows in Firebird LI 2.0.0.12748/2.0.1.12855 and Firebird WI 2.0.0.12748/2.0.1.12855 that allow a remote attacker to execute arbitrary code by sending overly long requests to the isc_attach_database or isc_create_database functions over TCP ...

CVE-2007-5256

CVE-2007-5256 involves multiple stack-based buffer overflows in affected software: FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier. The vulnerabilities allow remote code execution via a long HELP command on TCP port 3010 targeting sysuser::exechelp in sysuser.cc, and via long command...

CVE-2007-5250

The CVE-2007-5250 entry concerns the Windows dedicated server for the Unreal engine used by America’s Army (and AA Special Forces 2.8.2 and earlier). The vulnerability allows remote attackers to cause a denial of service (server hang) by sending packets containing 0x07 characters or other unspeci...