319 matches found
CVE-2007-3545
CVE-2007-3545 affects Warzone 2100 Resurrection, pre-2.0.7. The vulnerability is a buffer overflow in the handling of a long filename when setting background music, enabling remote attackers to cause a denial of service or execute arbitrary code. Affected software: Warzone 2100 Resurrection prior...
CVE-2007-2239
Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control aka CamImage ActiveX control before 2.40.0.0 in AxisCamControl.ocx in AXIS 2100, 2110, 2120, 2130 PTZ, 2420, 2420-IR, 2400, 2400+, 2401, 2401+, 2411, and Panorama PTZ allows remote attackers to cause a denial of service...
CVE-2007-2100
FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/Gdb.mdb...
CVE-2007-2100
CVE-2007-2100 affects FAC Guestbook 2.0. The vulnerability arises from insufficient access control, allowing remote attackers to directly access and download the database file db/Gdb.mdb from the web root. The published description indicates this could compromise confidentiality (complete impact)...
Intel® Centrino Wireless Driver Malformed Frame Privilege Escalation
Summary: A security vulnerability exists in the Microsoft Windows drivers for the Intel® 2100 PRO/Wireless Network Connection Hardware because of the way that driver handles certain requests by applications. The vulnerability could potentially be exploited by injecting specially crafted malicious...
BlueSocket BSC 2100 5.05.1 - Admin.pl Cross-Site Scripting
BlueSocket BSC 2100 5.05.1 - Admin.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/21419/info BlueSocket BSC 2100 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
BlueSocket BSC 2100 5.0/5.1 - Admin.pl Cross-Site Scripting
source: https://www.securityfocus.com/bid/21419/info BlueSocket BSC 2100 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in...
GLSA-200608-16 : Warzone 2100 Resurrection: Multiple buffer overflows
The remote host is affected by the vulnerability described in GLSA-200608-16 Warzone 2100 Resurrection: Multiple buffer overflows Luigi Auriemma discovered two buffer overflow vulnerabilities in Warzone 2100 Resurrection. The recvTextMessage function of the Warzone 2100 Resurrection server and th...
Intel® Centrino Wireless Driver Malformed Frame Privilege Escalation
Intel® Centrino Wireless Driver Malformed Frame Privilege Escalation Summary: A security vulnerability exists in the Microsoft Windows drivers for the Intel® 2100 PRO/Wireless Network Connection Hardware because of the way that driver handles certain requests by applications. The vulnerability...
Warzone 2100 Resurrection: Multiple buffer overflows
Background Warzone 2100 Resurrection is a real-time strategy game, developed by Pumpkin Studios and published by Eidos Interactive. Description Luigi Auriemma discovered two buffer overflow vulnerabilities in Warzone 2100 Resurrection. The recvTextMessage function of the Warzone 2100 Resurrection...
CVE-2006-4022
Intel 2100 PRO/Wireless Network Connection driver PROSet before 7.1.4.6 allows local users to corrupt memory and execute code via "requests for capabilities from higher-level protocol drivers or user-level applications" involving crafted frames, a different issue than CVE-2006-3992...
Intel PRO/Wireless 2100 Network Connection Driver Local Privilege Escalation Vulnerability
The remote host is running a version of Intel Wireless/PRO 2100 driver that is fails to properly handle certain malformed frames. A local attacker may exploit this flaw to elevate his privileges SYSTEM on the remote host. To exploit this flaw, an attacker would need to send a specially crafted...
CVE-2006-3849
Stack-based buffer overflow in Warzone 2100 and Warzone Resurrection 2.0.3 and earlier allows remote attackers to execute arbitrary code via a 1 long message handled by the recvTextMessage function in multiplay.c or a 2 long filename handled by NETrecvFile function in netplay/netplay.c...
CVE-2006-3849
CVE-2006-3849 is a stack-based buffer overflow in Warzone 2100 and Warzone Resurrection (
CVE-2006-2100
The CVE-2006-2100 entry describes a directory traversal vulnerability in Magic ISO 5.0 Build 0166. Affected component: Magic ISO’s ISO image handling. Root cause: remote attackers can exploit a .. (dot dot) in a filename within an ISO image to write arbitrary files on the system. Impact per provi...
Windows RPC DCOM interface buffer overflow
Added: 04/04/2006 CVE: CVE-2003-0352 BID: 8205 OSVDB: 2100 Background The Distributed Component Object Model is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call RPC is a protocol used to request a service from a program on...
CVE-2005-2100
CVE-2005-2100 is defined in the 4GB split patch of the Linux kernel for Red Hat Enterprise Linux 4; the rw_vm function in usercopy.c lacks proper bounds checking, enabling a local attacker to cause a denial of service (crash). Publicly linked advisories (RHSA-2005:514 and CentOS/CESA-2005:514) co...
CVE-2004-2100
CVE-2004-2100 concerns GeoHttpServer, where, when configured to authenticate users, an attacker can bypass authentication and access unauthorized files by supplying a URL containing %0a%0a (encoded newlines). Affected software: GeoHttpServer (authentication-enabled configuration). Root cause: cra...