137 matches found
CVE-2011-2121
Adobe Shockwave Player is affected by CVE-2011-2121 due to an integer overflow in the AudioMixer.x32 module when parsing mixer structures from Director files. This can allow remote code execution under the user’s context, with exploitation requiring user interaction (per ZDI). Affected product/ve...
Debian Security Advisory DSA 2121-1 (typo3-src)
The remote host is missing an update to typo3-src announced via advisory DSA 2121-1. OpenVAS Vulnerability Test $Id: deb21211.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2121-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian: Security Advisory (DSA-2121-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2121-1 : typo3-src - several vulnerabilities
Several remote vulnerabilities have been discovered in TYPO3. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3714 Multiple remote file disclosure vulnerabilities in the jumpUrl mechanism and the Extension Manager allowed attackers to read files wit...
Opera 'IFRAME' DoS Vulnerability - Windows
Opera Browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-2121
Opera 9.52 is vulnerable to remote denial of service through JavaScript that loops infinitely to create IFRAMEs for invalid news:// or nntp:// URIs. The issue is a resource consumption DoS; no exploit details are provided in the connected materials. No remediation is specified in the supplied doc...
Google Chrome HTTP Response Handling Memory Corruption (CVE-2009-2121)
Google Chrome is a web browser developed by Google. It provides rich web browsing similar to other browsers such as FireFox, Opera, and Internet Explorer. Chrome is unique from other browsers because it follows a multi-process architecture: by default, a separate process is allocated to each site...
Google Chrome Web Script Execution Vulnerabilities (Jun 2009)
Google Chrome is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome HTTP响应处理缓冲区溢出漏洞
BUGTRAQ ID: 35462 CVECAN ID: CVE-2009-2121 Google Chrome是Google发布的开源WEB浏览器。 Google Chrome在处理HTTP服务器的响应时存在缓冲区溢出漏洞。如果用户受骗访问了恶意网站并从服务器接收到了包含有超长分块编码块大小的响应报文,就会在memmove中触发溢出,导致浏览器崩溃或执行任意代码。 Google Chrome 2.0.172.33 厂商补丁: Google ------ 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
CVE-2009-2121
Summary: CVE-2009-2121 is a buffer overflow in Google Chrome’s browser kernel triggered by handling certain HTTP responses, potentially allowing remote attackers to crash the browser or execute arbitrary code. The issue affects Chrome up to version 2.0.172.33; a vendor patch was released to addre...
CVE-2008-2121
CVE-2008-2121 affects the TCP implementation in Sun Solaris 8, 9, and 10, allowing remote attackers to cause a denial of service via a TCP SYN flood attack, resulting in CPU consumption and new-connection timeouts. Public entries confirm the vulnerability in Solaris TCP and its CVE listing. The c...
CVE-2007-2121
Technical details for CVE-2007-2121 are not publicly available in the provided documents. Monitor for updates from Oracle advisories and vulnerability databases.
CVE-2007-2121
Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS02...
CVE-2006-2121
CVE-2006-2121 is a PHP remote file inclusion vulnerability affecting I-RATER Platinum, where an attacker can execute arbitrary code through a URL supplied in the include_path parameter in admin/config_settings.tpl.php. The NVD entry lists a MEDIUM base score (5.0) with network access and no authe...
CVE-2002-2121
CVE-2002-2121 affects SurfControl SuperScout Email filter for SMTP 3.5.1. The vulnerability allows a remote attacker to cause a denial-of-service crash by sending excessively long SMTP commands (HELO or RCPT TO), likely due to a buffer overflow. Exploit details and a concrete remediation are not ...
CVE-2004-2121
CVE-2004-2121 affects Borland Web Server (BWS) 1.0b3 and earlier. It exposes directory-traversal vulnerabilities through untrusted URL sequences (e.g., multiple dots '......' or encoded '..') that allow remote attackers to read/download arbitrary files. No exploitation details or fixes are provid...