74 matches found
RHEL 5 : xen (RHSA-2011:1401)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1401 advisory. - qemu: local DoS with SCSI CD-ROM CVE-2011-3346 Note that Nessus has not tested for this issue but has instead relied only on the application's...
CVE-2010-3346
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."...
CVE-2010-3346
CVE-2010-3346 affects Microsoft Internet Explorer 6, 7, and 8, due to a memory corruption vulnerability in the HTML+TIME/HTML element handling where an uninitialized or deleted object can be accessed, enabling remote code execution. Exploitation details in connected advisories reference a Microso...
Internet Explorer HTML+TIME element OuterText memory corruption
Added: 12/16/2010 CVE: CVE-2010-3346 BID: 45261 OSVDB: 69829 Background The HTML+TIME component of Internet Explorer adds timing and media synchronization support to HTML pages. Problem A memory corruption vulnerability in the HTML+TIME component allows command execution when a user loads a...
Microsoft Internet Explorer Uninitialized HTML Element CVE-2010-3346 Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Au...
Microsoft Internet Explorer HTML Time Element Memory Corruption (MS10-090; CVE-2010-3346)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...
CVE-2009-3346
The CVE-2009-3346 entry concerns SAP Crystal Reports Server 2008 with an unspecified vulnerability that could allow remote code execution via unknown vectors, as demonstrated by VulnDisco Pack Professional versions 8.3–8.11. The description notes that, as of 2009-09-17, there is no actionable inf...
CVE-2009-3346
Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However,...
CVE-2008-3346
CVE-2008-3346: SQL injection in ShopCart DX, vulnerability in product_detail.php via the pid parameter that allows remote execution of arbitrary SQL commands. Affected component is ShopCart DX; root cause is improper input handling in pid parameter leading to SQL injection. Impact described as ar...
Debian: Security Advisory (DSA-918-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-3346
Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local files via unspecified manipulations of the page parameter...
CVE-2007-3346
CVE-2007-3346 affects PHPAccounts 0.5, where a directory traversal in index.php enables remote attackers to include arbitrary local files by manipulating the page parameter. The vulnerability stems from improper handling of file path input, leading to potential Local File Inclusion. The impact is...
CVE-2006-3346
The CVE-2006-3346 entry concerns a SQL injection in tree.php on MyNewsGroups 0.6, exploitable via the grp_id parameter to remotely execute arbitrary SQL. The provided documents identify the affected product and the vulnerable parameter but do not specify the root cause details beyond generic SQL ...
