64 matches found
Microsoft Office Image Filter BMP Header Buffer Overflow (MS08-044; CVE-2008-1765; CVE-2008-3020)
BMP is an image file format used to store bitmap digital images. A remote code execution vulnerability was reported in the way Microsoft Office handles BMP files.The vulnerability is due to a memory corruption error when a malformed BMP file is opened by any ofthe affected Microsoft Office...
CVE-2006-3020
CVE-2006-3020 concerns WS-Album 1.1 and earlier, where the vulnerability is in FullPhoto.asp. The two parameters, image and PublisedDate , can be exploited to inject arbitrary web script or HTML via reflected/stored XSS as described in the CVE entry. The affected software is WS-Album (FullPhoto.a...
CVE-2005-3020
CVE-2005-3020 : Concrete XSS vulnerabilities in vBulletin prior to 3.0.9. The vulnerability arises from insufficient input sanitization, allowing remote attackers to inject arbitrary script/HTML via multiple parameters across several scripts: (1) group in css.php, (2) redirect in index.php, (3) e...