56 matches found
CVE-2011-3027
Google Chrome before 17.0.963.56 does not properly perform a cast of an unspecified variable during handling of columns, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document...
CVE-2011-3027
CVE-2011-3027 affects Google Chrome prior to version 17.0.963.56. The issue is tied to a cast of an unspecified variable during handling of document columns, enabling a remote attacker to trigger denial of service and potentially other impacts via a crafted document. The description does not spec...
FreeBSD : chromium -- multiple vulnerabilities (2f5ff968-5829-11e1-8288-00262d5ed8ee)
Google Chrome Releases reports : 105803 High CVE-2011-3015: Integer overflows in PDF codecs. Credit to Google Chrome Security Team scarybeasts. 106336 Medium CVE-2011-3016: Read-after-free with counter nodes. Credit to miaubiz. 108695 High CVE-2011-3017: Possible use-after-free in database...
CVE-2010-3027
An SQL injection in Tycoon Baseball Script 1.0.9 (index.php) allows remote execution via the game_id parameter in a game_player action. This is reported across multiple sources (NVD, Red Hat, CVE List, PRION) with base CVSS2 score 7.5 (HIGH). The connected documents do not provide a patch or work...
CVE-2010-3027
creationtimestamp| type| source ---|---|--- 2010-08-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14572...
Cumulative Security Update for Internet Explorer (933566)
Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an uninitialized or deleted object, related to prototype variables and table cells, aka Uninitialized Memory Corruption Vulnerability. SPDX-FileCopyrightText: 2010 L...
Symantec Multiple Products VRTSweb Code Execution (CVE-2009-3027)
Symantec VERITAS Web Server VRTSweb is a shared component shipped with multiple Symantec products. VRTSweb is a Web Restore Server Component which can be used for managing Server SSL certificates, configuring SMTP notifications, managing communication ports, and other tasks. VRTSweb is developed...
[security bulletin] HPSBUX02480 SSRT090253 rev.1 - HP-UX Running VRTSweb, Remote Execution of Arbitrary Code, Increase of Privilege
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01943614 Version: 1 HPSBUX02480 SSRT090253 rev.1 - HP-UX Running VRTSweb, Remote Execution of Arbitrary Code, Increase of Privilege NOTICE: The information in this Security Bulletin should be act...
HP-UX PHCO_40520 : HP-UX Running VRTSweb, Remote Execution of Arbitrary Code, Increase of Privilege (HPSBUX02480 SSRT090253 rev.1)
s700800 11.31 VRTS 5.0.1 GARP1 VRTSweb Patch : A potential security vulnerability has been identified with HP-UX running VRTSweb version 5.0. The vulnerability could be exploited remotely to execute arbitrary code or increase privilege. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
HP-UX PHCO_40519 : HP-UX Running VRTSweb, Remote Execution of Arbitrary Code, Increase of Privilege (HPSBUX02480 SSRT090253 rev.1)
s700800 11.31 VRTS 5.0 GARP1 VRTSweb Patch : A potential security vulnerability has been identified with HP-UX running VRTSweb version 5.0. The vulnerability could be exploited remotely to execute arbitrary code or increase privilege. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2009-3027
VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server CPS 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager NOM 6.0 GA through 6.5.5; Veritas Backup Reporter VBR 6.0 GA through 6.6; Veritas Storage Foundation SF 3.5; Veritas Storage Foundation for Windows High...
CVE-2009-3027
CVE-2009-3027 affects numerous Symantec/Veritas products' VRTSweb component. The flaw is in VRTSweb.exe, where the Web Server on TCP/14300 fails to properly validate an authentication request, allowing a remote attacker to trigger unpacking of a WAR archive and execute arbitrary code. The impact ...
CVE-2008-3027
The CVE-2008-3027 entry concerns a SQL injection in VanGogh Web CMS 0.9. The vulnerability is in get_article.php and is exploitable via the article_ID parameter on index.php, enabling an attacker to execute arbitrary SQL commands. The available data indicates remote access without authentication ...
ZDI-07-037: Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability
ZDI-07-037: Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-037.html June 12, 2007 -- CVE ID: CVE-2007-3027 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6.x Internet Explorer 7.x...
CVE-2007-3027
CVE-2007-3027 is a remote code execution issue in Microsoft Internet Explorer (5.01, 6, 7) caused by a race condition during language pack installation, which can trigger memory corruption when a page forces installation of multiple language packs. The vulnerability could allow an attacker to run...
CVE-2005-3027
Sybari Antigen 8.0 SR2 is affected by a vulnerability in SMTP message filtering where the product does not properly filter messages, allowing remote attackers to bypass custom filter rules and send file attachments of arbitrary types via a message with the subject “Antigen forwarded attachment.” ...