177 matches found
CVE-2012-2880
CVE-2012-2880 corresponds to a Chrome/Chromium race condition in the plug-in paint buffer that could lead to DoS or other impact. Connected sources confirm Chromium/Chrome were updated to a fixed version; Gentoo GLSA-201210-07 specifies upgrading to Chromium 22.0.1229.94 or newer, and openSUSE/Op...
CVE-2011-2880
Google Chrome CVE-2011-2880 is a use-after-free vulnerability in the V8 bindings prior to 14.0.835.202. Affected software: Google Chrome (Chrome versions before 14.0.835.202). Impact described: remote denial of service or potentially other unspecified impact. Root cause: use-after-free in V8 bind...
CVE-2010-2880
Adobe Shockwave Player is affected by CVE-2010-2880 where DIRAPI.dll fails to parse .dir files, enabling memory corruption that can cause a denial of service or allow arbitrary code execution via a malformed file with an invalid value. Affected version: Shockwave Player before 11.5.8.612. The ava...
Security update available for Shockwave Player
Security update available for Shockwave Player Release date: August 24, 2010 Vulnerability identifier: APSB10-20 CVE number:CVE-2010-2863, CVE-2010-2864, CVE-2010-2865, CVE-2010-2866, CVE-2010-2867, CVE-2010-2868, CVE-2010-2869, CVE-2010-2870, CVE-2010-2871, CVE-2010-2872, CVE-2010-2873,...
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2880
Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file...
Microsoft IIS 5.0 - IDQ Path Overflow (MS01-033) (Metasploit)
$Id: ms01033idq.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
CVE-2009-2880
Cisco WebEx WRF Player contains a buffer overflow in atrpui.dll that can cause a crash or allow remote code execution when processing crafted WRF files. Affected platforms include Windows (WRF Player 26.x before 26.49.32; 27.x before 27.10.x) and Mac/Linux (26.x before 26.49.35 for macOS/Linux; 2...
Microsoft IIS 5.0 IDQ Path Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft II...
CVE-2008-2880
CVE-2008-2880 : A heap-based buffer overflow in the IBM AFP Viewer Plug-in (versions 2.0.7.1 and 3.2.1.1) can be triggered by processing a long SRC property value, allowing remote attackers to execute arbitrary code. The issue is exploitable via the plugin in a web/browser context, with a remote ...
KLA10197 ACE vulnerability in IBM AFP Viewer plug-in
A buffer overflow was found in IBM AFP Viewer plug-in. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed property value. Original advisories - Related products IBM-AFP-Viewer-Plug-In CVE list...
CVE-2007-2880
Digirez 3.4 has multiple cross-site scripting (XSS) vulnerabilities that enable remote attackers to inject arbitrary web script or HTML via (1) the Room_name parameter in room/info_book.asp and (2) the curYear parameter in room/week.asp. Root cause: insufficient input sanitization leading to scri...
MS01-033 Microsoft IIS 5.0 IDQ Path Overflow
This module exploits a stack buffer overflow in the IDQ ISAPI handler for Microsoft Index Server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS01-033 Microsoft IIS 5.0 IDQ Path Overflow',...
CVE-2006-2880
Cross-site scripting XSS vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the 1 url and 2 author fields...
CVE-2006-2880
CVE-2006-2880 describes a Cross-site scripting (XSS) vulnerability in the PyBlosxom Contributed Packages, affecting version 1.2.2 and earlier. The flaw resides in the Comments plugin, where user-supplied input in the url and author fields can be interpreted as HTML/script by the web application, ...
CVE-2005-2880
Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the 1 login field in login.php or 2 LocationID parameter to week.php...
CVE-2005-2880
CVE-2005-2880 concerns multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 (and possibly earlier). The flaws allow remote attackers to execute arbitrary SQL commands via (1) the login field in login.php or (2) the LocationID parameter to week.php. The affected component is phpCom...
