123 matches found
CVE-2015-2304
Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...
Ubuntu 14.04 LTS : KDE-Libs vulnerability (USN-2304-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2304-1 advisory. It was discovered that kauth was using polkit in an unsafe manner. A local attacker could possibly use this issue to bypass intended polkit authorizations. Tenabl...
CVE-2013-2304
The CVE describes an issue in Sleipnir Mobile for Android (including Black Edition) up to version 2.8.0 where the Extension mechanism can be abused by a crafted web page to load an arbitrary Extension API, enabling an attacker to trigger downloads or obtain HTTP response-body information when a u...
CVE-2012-2304
The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2012-2304
CVE-2012-2304 concerns the Linkit module for Drupal (7.x-2.x series). The issue occurs when using an entity access module: during entity searches, Linkit did not enforce access restrictions, allowing remote attackers to view information about content they normally should not access. Affected vers...
SA-CONTRIB-2012-067 - Linkit - Access bypass
CVE: CVE-2012-2304 Linkitprovides an easy interface for internal and external linking. Linkit links to nodes, users, managed files, terms and have basic support for all entities by default, using an autocomplete field. When searching for entities, no access restrictions were added and users may s...
CVE-2011-2304
Technical details about CVE-2011-2304 are not provided in the connected documents; no affected product/version or remediation is specified here. Monitor sources for updates.
Debian Security Advisory DSA 2304-1 (squid3)
The remote host is missing an update to squid3 announced via advisory DSA 2304-1. OpenVAS Vulnerability Test $Id: deb23041.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2304-1 squid3 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian DSA-2304-1 : squid3 - buffer overflow
Ben Hawkes discovered that Squid 3, a full featured Web Proxy cache HTTP proxy, is vulnerable to a buffer overflow when processing Gopher server replies. An attacker can exploit this flaw by connecting to a Gopher server that returns lines longer than 4096 bytes. This may result in denial of...
CVE-2009-2304
The CVE-2009-2304 entry describes an information disclosure in Aardvark Topsites PHP 5.2.0 and earlier. Specifically, index.php handling the rate action accepts a nonexistent account name via the u parameter, causing an error message that reveals the installation path. The vulnerability is labele...
CVE-2008-2304
CVE-2008-2304 describes a buffer overflow in Apple Core Image Fun House (2.0 and earlier) within CoreImage Examples in Xcode tools before 3.1. The flaw arises when processing a .funhouse file with XML data: code path draws a point label and at one point copies a C string without length bound (str...
Apple Xcode工具.funhouse文件XML数据处理缓冲区溢出漏洞
BUGTRAQ ID: 30189 CVECAN ID: CVE-2008-2304 Xcode是苹果机器上所使用的开发工具。 Xcode工具中包含有名为Core Image Fun House的示例应用程序，用于处理带有.funhouse扩展名的内容。Funhouse应用没有正确地解析XML数据，如果用户受骗打开了特制的.funhouse文件的话，就可能触发缓冲区溢出。以下是负责解析上述文件的代码： // render origin handles using AppKit directly - - CIImage drawPoints:CIImage im ... NSString...
CVE-2008-2304
creationtimestamp| type| source ---|---|--- 2008-07-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6043...
CVE-2007-2304
Multiple directory traversal vulnerabilities in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter to categories.php and other unspecified files...
CVE-2007-2304
Multiple directory traversal vulnerabilities in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter to categories.php and other unspecified files...
CVE-2006-2304
CVE-2006-2304 affects Novell Client for Windows DPRPCW32.DLL in versions 4.83 SP3, 4.90 SP2 and 4.91 SP2. The vulnerability is described as multiple integer overflows in the DPRPC library that occur when processing an XDR-encoded array with a very large element count, triggering overflows in ndps...
CVE-2004-2304
CVE-2004-2304 affects Trillian (0.74 and earlier) and Trillian Pro (2.01 and earlier). The issue is an integer/heap-based buffer overflow triggered by a DirectIM packet, enabling remote denial of service and potentially arbitrary code execution. Connected sources reference a DirectIM overflow in ...
CVE-2004-2304
Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow...
CVE-2005-2304
The CVE-2005-2304 entry concerns Microsoft MSN Messenger 9.0 and Internet Explorer 6.0, where processing an image with an ICC Profile that has a large Tag Count can cause a denial of service (crash). The vulnerability is rooted in image handling in these products, enabling a remote attacker to tr...