121 matches found
CVE-2011-3239
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-3239
WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...
CVE-2011-3239
CVE-2011-3239 affects WebKit as used by Apple iTunes prior to version 10.5. The vulnerability allows a man-in-the-middle to either execute arbitrary code or cause a denial of service (memory corruption and application crash) via iTunes Store browsing-related vectors. The description does not spec...
Microsoft Excel PtgExtraArray结构解析内存破坏漏洞（MS10-080）
BUGTRAQ ID: 43654 CVE ID: CVE-2010-3239 Excel是微软Office套件中的电子表格工具。 Excel在解析文档的PtgExtraArray结构时存在内存破坏漏洞，用户受骗打开了畸形的.XSL文件就会导致执行任意代码。 Microsoft Excel 2002 SP3 临时解决方法： 不要打开从不可信任来源接收到或从可信任来源意外接收到的Microsoft Office文件。 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-080）以及相应补丁:...
CVE-2010-3239
CVE-2010-3239 is a memory corruption/remote code execution vulnerability in Microsoft Office Excel 2002 SP3 related to parsing of PtgExtraArray records. Exploitation involves opening a specially crafted Excel document to execute arbitrary code with the caller’s privileges. Microsoft’s MS10-080 se...
SLES9: Security update for clamav
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: clamav For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5016172 within the SuSE...
CVE-2009-3239
CVE-2009-3239 is rejected/not used; refer to CVE-2009-2139 and CVE-2009-2140.
PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit
No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...
PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit
Exploit for unknown platform in category web applications =========================================================== PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit =========================================================== !/usr/bin/php ?php / Found this after getting my inet back...
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution
!/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually believed this populated those...
Gentoo Security Advisory GLSA 200511-04 (clamav)
The remote host is missing updates announced in advisory GLSA 200511-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-3239
PHPizabi 0.848b C1 HFP1-3 contains an unrestricted file upload vulnerability in system/v_cron_proc.php::writeLogEntry when register_globals is enabled. An attacker can supply a filename via CONF[CRON_LOGFILE] and file contents via CONF[LOCALE_LONG_DATE_TIME], enabling remote code execution. Explo...
CVE-2008-3239
creationtimestamp| type| source ---|---|--- 2008-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6085...
CVE-2007-3239
The CVE-2007-3239 entry describes an XSS vulnerability in the AndyBlue WordPress theme (pre-20070607) via the PHP_SELF value in searchform.php used by index.php. The underlying issue is reflected/script injection in the search form, which could be leveraged to execute arbitrary script or HTML in ...
Debian DSA-887-1 : clamav - several vulnerabilities
Several vulnerabilities have been discovered in Clam AntiVirus, the antivirus scanner for Unix, designed for integration with mail servers to perform attachment scanning. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3239 The OLE2 unpacker allows...
Mandrake Linux Security Advisory : clamav (MDKSA-2005:205)
A number of vulnerabilities were discovered in ClamAV versions prior to 0.87.1 : The OLE2 unpacker in clamd allows remote attackers to cause a DoS segfault via a DOC file with an invalid property tree CVE-2005-3239 The FSG unpacker allows remote attackers to cause 'memory corruption' and execute...
DSA-887-1 clamav - several
Bulletin has no description...
CVE-2005-3239
The OLE2 unpacker in clamd in Clam AntiVirus ClamAV 0.87-1 allows remote attackers to cause a denial of service segmentation fault via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2walkpropertytree function...