ZDI-12-004 : Apple Quicktime JPEG2000 COD Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-004 : Apple Quicktime JPEG2000 COD Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-004 January 5, 2012 - -- CVE ID: CVE-2011-3250 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors: Apple - -...

CVE-2011-3250

CVE-2011-3250 describes an integer overflow in Apple QuickTime prior to version 7.7.1 that can be triggered by a crafted JPEG2000-encoded movie file , allowing remote code execution or a denial of service (application crash). The description indicates the vulnerability lies in QuickTime’s handlin...

QuickTime < 7.7.1 Multiple Vulnerabilities (Windows)

The version of QuickTime installed on the remote Windows host is older than 7.7.1 and may be affected by the following vulnerabilities : - A cross-site scripting issue exists in HTML files generated by the 'Save for Web' export feature. CVE-2011-3218 - A buffer overflow error exists in the handli...

Google Chrome multiple vulnerabilities (Windows) Sep10

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities Windows Sep10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks...

Google Chrome multiple vulnerabilities (Linux)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep10lin.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities Linux Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Google Chrome < 6.0.472.53 Multiple Vulnerabilities (Sep 2010) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3250

CVE-2010-3250 concerns Google Chrome prior to version 6.0.472.53 and is described as an unspecified vulnerability that allows remote attackers to enumerate the set of installed extensions via unknown vectors. The NVD entry confirms this vulnerable condition, and OpenVAS entries list Google Chrome

IntelliCom NetBiter Config Utility Hostname Stack Buffer Overflow

Intellicom NetBiter webSCADA is an embedded SCADA Supervisory Control And Data Acquisition solution for various hardware devices, providing remote management through web browsers. NetBiter webSCADA ships with a configuration utility NetBiter Config used to enumerate and configure compatible devic...

CVE-2009-3250

The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in 1 .php in installations based on certain Apache HTTP Server configurations, 2...

CVE-2009-3250

The CVE-2009-3250 issue affects vtiger CRM 5.0.4, where the saveForwardAttachments function in Compose Mail lets remote authenticated users execute arbitrary code by attaching a filename ending in .php (varying by Apache config/OS) and then requesting a path under storage/. The connected document...

CVE-2009-3250

The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in 1 .php in installations based on certain Apache HTTP Server configurations, 2...

CVE-2009-3250

creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9450...

CVE-2008-3250

SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL commands via the filter parameter...

CVE-2008-3250

The CVE-2008-3250 entry describes a SQL injection in Arctic Issue Tracker 2.0.0, exploitable through the filter parameter in index.php to remotely execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH). No specific patch/version details or exploits are provided in ...

CVE-2007-3250

The CVE-2007-3250 issue affects Elxis CMS (mod_banners.php) where an SQL injection is possible via the mb_tracker cookie. It targets installations running before 2006.4 (20070613); the product was patched without updating the version number, and later downloads of 2006.4 are not affected. Remedia...

CVE-2007-3250

SQL injection vulnerability in modbanners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute arbitrary SQL commands via the mbtracker cookie. NOTE: the product was patched without updating the version number; later downloads of 2006.4 are not affected...

CVE-2006-3250

Windows Live Messenger 8.0 is affected by a heap-based buffer overflow in the handling of imported Contact List (.ctt) files. The flaw can allow user-assisted attackers to execute arbitrary code when a crafted .ctt file is imported by the user. The vulnerable component is the messenger client’s i...

Design/Logic Flaw

Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service null dereference via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to...

CVE-2005-3250

Technical details for CVE-2005-3250 are not publicly provided in the supplied documents; monitor for updates.

Solaris 10 (sparc) : 118822-30

SunOS 5.10: kernel Patch. Date this patch was last updated by Sun : Feb/23/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...