Microsoft XML Core Services Memory Corruption (MS07-042; CVE-2007-2223)

Microsoft Windows is shipped with an XML processing framework, named MSXML or Microsoft XML Core services. The framework is used by applications shipped with the operating system as well as third party applications. The most popular application using this framework is Internet Explorer, which can...

CVE-2009-2223

Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cwd parameter. NOTE: remote file inclusion attacks may be possible...

CVE-2009-2223

LightOpenCMS 0.1 pre-alpha is affected by a local file inclusion (LFI) in smarty.php, exploitable via a directory traversal in the cwd parameter. An attacker can potentially include and execute arbitrary local files in the webserver context. Public references in connected documents confirm LightO...

CVE-2009-2223

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9015...

Gentoo Security Advisory GLSA 200605-15 (quagga)

The remote host is missing updates announced in advisory GLSA 200605-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-2223

CVE-2008-2223 describes an SQL injection in group_posts.php of the vShare YouTube Clone 2.6, exploitable via the tid parameter to execute arbitrary SQL. The vulnerability is confirmed in multiple sources (NVD/NVD-entry) with a CVSS v2 base score of 7.5 (HIGH) and network attack vector with low co...

openSUSE 10 Security Update : quagga (quagga-1422)

It was possible to bypass RIPv2 authentication requirements by using RIPv1. Since RIPv1 doesn't support authentication at all this update introduces an option to switch off RIPv1 CVE-2006-2223, CVE-2006-2224. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Microsoft XML Core Services SubstringData堆溢出漏洞（MS07-042）

BUGTRAQ ID: 25301 CVECAN ID: CVE-2007-2223 Microsoft Windows是微软发布的非常流行的操作系统。 Windows XML Core程序库在处理畸形畸形的调用时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 XML Core Services（也被称为MSXML）是Windows操作系统中所安装的用于处理XML文件的函数库。在使用该函数库时没有对XMLDOM对象substringData方式的长度参数执行正确的检查，如果提供了超长的长度值的话，就可能将数据拷贝到不充分的缓冲区，触发堆溢出，导致执行任意指令。 Microso...

[Full-disclosure] iDefense Security Advisory 08.14.07: Microsoft XML Core Services XMLDOM Memory Corruption Vulnerability

Microsoft XML Core Services XMLDOM Memory Corruption Vulnerability iDefense Security Advisory 08.14.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 14, 2007 I. BACKGROUND XML Core Services also known as MSXML is a library for processing XML files. It works with, and was original par...

CVE-2007-2223

Microsoft XML Core Services (MSXML) 3.0–6.0 contains a vulnerability in the substringData() method on TextNode/XMLDOM objects that leads to an integer overflow and a subsequent buffer overflow, enabling remote code execution when a user is enticed to view a malicious page. The issue affects MSXML...

CVE-2002-2223

The CVE-2002-2223 entry concerns a buffer overflow in NetScreen-Remote 8.0. An attacker could trigger a denial of service and, possibly, remote code execution by sending crafted Internet Key Exchange (IKE) response packets. The exploit vectors involve (1) a large Security Parameter Index (SPI) fi...

Debian DSA-1059-1 : quagga - several vulnerabilities

Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-2223 Remote attackers may obtain sensitive information via RIPv1 REQUEST packets even if the quagga...

RHEL 2.1 : zebra (RHSA-2006:0533)

Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based routing protocol. An information disclosure flaw was foun...

zebra security update

CentOS Errata and Security Advisory CESA-2006:0533-01 Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based...

quagga security update

CentOS Errata and Security Advisory CESA-2006:0525 Updated quagga packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Quagga manages the TCP/IP based routing protocol. It takes a...

[SECURITY] [DSA 1059-1] New quagga packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1059-1 [email protected] http://www.debian.org/security/ Martin Schulze May 19th, 2006 http://www.debian.org/security/faq -...

CVE-2006-2223

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that 1 disable RIPv1 or 2 require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information routing state via REQUEST packets such as SEND UPDATE...

CVE-2006-2223

CVE-2006-2223 affects Quagga RIPd in versions 0.98 and 0.99 prior to 20060503. The issue is a flaw in how configurations treat RIPv1 or plaintext/MD5 authentication, enabling remote attackers to obtain sensitive information (routing state) via REQUEST packets (e.g., SEND UPDATE). Connected adviso...

CVE-2004-2223

FsPHPGallery before 1.2 is vulnerable to remote DoS: processing an image with a large size attribute crashes the server during resize. Affected product: FsPHPGallery. Root cause: server-side image resize handling overflow/large size attribute. No exploit details provided in the documents. No reme...

CVE-2005-2223

CVE-2005-2223 affects the MailEnable SMTP service. Public docs indicate an unknown vulnerability in MailEnable Standard before 1.9 and Professional before 1.6 that allows remote attackers to cause a denial of service (crash) during authentication. Red Hat records echo the unknown vulnerability, a...