CVE-2008-3148

The CVE-2008-3148 entry details a stack-based buffer overflow in OllyDBG 1.10 and ImpREC 1.7f that can allow a user-assisted attacker to execute arbitrary code through a crafted DLL file containing a long string. Affected components are OllyDBG 1.10 and ImpREC 1.7f; root cause is a stack-based ov...

CVE-2007-3148

CVE-2007-3148 : A buffer overflow in the Yahoo! Messenger Webcam Viewer ActiveX control (ywcvwr.dll 2.0.1.4) used by Yahoo! Messenger 8.1.0.249 can be triggered by a long server property value sent to the receive method, allowing remote code execution. Public advisories and scans describe this as...

Yahoo Messenger Webcam Viewer ActiveX control buffer overflow

Added: 06/08/2007 CVE: CVE-2007-3148 BID: 24355 OSVDB: 37081 Background Yahoo! Messenger is an instant messaging application. It includes the Webcam Viewer ActiveX control which is provided by ywcvwr.dll. Problem A buffer overflow vulnerability in the Yahoo! Messenger Webcam Viewer ActiveX contro...

Yahoo Messenger Webcam Viewer ActiveX control buffer overflow

Added: 06/08/2007 CVE: CVE-2007-3148 BID: 24355 OSVDB: 37081 Background Yahoo! Messenger is an instant messaging application. It includes the Webcam Viewer ActiveX control which is provided by ywcvwr.dll. Problem A buffer overflow vulnerability in the Yahoo! Messenger Webcam Viewer ActiveX contro...

Debian DSA-1022-1 : storebackup - several vulnerabilities

Several vulnerabilities have been discovered in the backup utility storebackup. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3146 Storebackup creates a temporary file predictably, which can be exploited to overwrite arbitrary files on the system...

CVE-2006-3148

SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php...

CVE-2006-3148

The CVE-2006-3148 entry concerns an SQL injection in Open-Realty 2.3.1. The vulnerability affects the application via the sorttype parameter to index.php, with potential arbitrary SQL execution if exploitable. The root cause is a likely improper handling of user input in search.inc.php, as cited ...

CVE-2005-3148

StoreBackup before 1.19 does not properly set the uid and guid for symbolic links 1 that are backed up by storeBackup.pl, or 2 recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership...