152 matches found
Apple iTunes '.pls' Files Buffer Overflow Vulnerability
Apple iTunes is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes";...
CVE-2009-2817
Apple iTunes before 9.0.1 is affected by a .pls file handling buffer overflow vulnerability. The root cause is improper bounds checking when copying user-supplied data during .pls parsing, which can lead to remote code execution or a denial of service via a crafted .pls file. Public materials (in...
iTunes < 9.0.1 PLS File Buffer Overflow (Mac OS X)
The remote version of iTunes is older than 9.0.1. Such versions are affected by a buffer overflow involving the handling of PLS files. If an attacker can trick a user on the affected host into opening a malicious PLS file, he can leverage this issue to crash the affected application or to execute...
Apple iTunes < 9.0.1 PLS File Buffer Overflow (credentialed check)
The remote version of Apple iTunes is older than 9.0.1. Such versions are affected by a buffer overflow involving the handling of PLS files. If an attacker can trick a user on the affected host into opening a malicious PLS file, he can leverage this issue to crash the affected application or to...
CVE-2009-2817
creationtimestamp| type| source ---|---|--- 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33235 2010-02-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11491...
Unfixed XSS vulnerability at help.forumotion.com
Security researcher PaPPy, has submitted on 07/10/2009 a cross-site-scripting XSS vulnerability affecting help.forumotion.com, which at the time of submission ranked 2817 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is current...
CVE-2008-2817
NiTrO Web Gallery 1.4.3 and earlier contains a SQL injection in albums.php (CatId parameter in a show action) that allows remote attackers to execute arbitrary SQL commands. The issue arises from inadequate sanitization of CatId, enabling potentially unauthorized data access or manipulation. No r...
CVE-2007-2817
The CVE-2007-2817 entry concerns ol'bookmarks 0.7.4, where the read/index.php page is vulnerable to SQL injection via the id parameter. Remote attackers can potentially execute arbitrary SQL commands due to this input handling flaw. The available connected sources confirm the affected software an...
CVE-2006-2817
CVE-2006-2817: SQL injection in bolum.php of tekno.Portal allows remote attackers to execute arbitrary SQL via the id parameter. Affected component: bolum.php in tekno.Portal. Root cause: unsafely constructed SQL queries using user-supplied id. Impact: remote, unauthenticated access enabling arbi...
CVE-2005-2817
CVE-2005-2817 affects Simple Machines Forum (SMF) 1-0-5 and earlier. The issue arises from using URLs for avatar images, enabling a remote attacker to induce disclosure of sensitive visitor data (e.g., IP address, user agent) via a malicious avatar URL. The vulnerability is demonstrated via PHP o...
