CVE-2013-3672

CVE-2013-3672 concerns FFmpeg’s libavcodec/mmvideo.c:mm_decode_inter, where the code fails to validate the relationship between a horizontal coordinate and a width, enabling a remote attacker to trigger an out-of-bounds access and cause a crash (Denial of Service). It affects FFmpeg/libavcodec pr...

CVE-2013-3672

The mmdecodeinter function in mmvideo.c in libavcodec in FFmpeg before 1.2.1 does not validate the relationship between a horizontal coordinate and a width value, which allows remote attackers to cause a denial of service out-of-bounds array access and application crash via crafted American Laser...

CVE-2012-3672

CVE-2012-3672 concerns WebKit as used in Apple iTunes prior to 10.7. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, likely through memory corruption, as described in the original entry. Connected advisories confirm WebKit-...

Microsoft Internet Explorer SetExpandedClipRect Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2009-3672

creationtimestamp| type| source ---|---|--- 2010-07-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16547 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms09072styleobject.rb 2025-02-06 03:13:39+00:00|...

iDefense Security Advisory 12.08.09: Microsoft Internet Explorer HTML Layout Engine Uninitialized Memory Vulnerability

iDefense Security Advisory 12.08.09 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2009 I. BACKGROUND Internet Explorer is a graphical web browser developed by Microsoft Corp. that has been included with Microsoft Windows since 1995. For more information about Internet Explorer,...

Memory corruption

Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that 1 were not properly initialized or 2 are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name, selection of the...

CVE-2009-3672

CVE-2009-3672 is a memory-corruption vulnerability in Microsoft Internet Explorer 6/7 related to getElementsByTagName for the STYLE element, with corruption of objects in mshtml.dll when outerHTML is changed. It allows remote code execution and is associated with the MS09-072 bulletin; patches/up...

Internet Explorer STYLE Object Remote Code Execution (CVE-2009-3672)

Microsoft Internet Explorer is the most widely used Internet browser. A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has been deleted. To trigger this issue, an attacker may create a...

CVE-2009-4054

CVE-2009-3672 affects Microsoft Internet Explorer 6 and 7. The vulnerability stems from improper handling of memory objects by getElementsByTagName for the STYLE tag, leading to a memory corruption that enables remote code execution via mshtml.dll. The issue was originally tracked as CVE-2009-405...

CVE-2008-3672

SQL injection vulnerability in showcategory.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3673. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

Sql injection

SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3672...

CVE-2008-3672

CVE-2008-3672 is a SQL injection vulnerability in PozScripts Classified Ads, affecting the showcategory.php handler (cid parameter). The vulnerability arises from user-controlled input not being properly sanitized, enabling remote attackers to craft arbitrary SQL commands. The vulnerability is do...

CVE-2007-3672

The CVE-2007-3672 entry concerns DotClear 1.2.6, specifically the ecrire/tools.php component. The vulnerability is a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML through unspecified form fields on the blogroll page. This is a client-side scri...

CVE-2006-3672

The CVE-2006-3672 issue affects KDE Konqueror 3.5.1 and earlier, where a remote attacker can cause a denial of service (application crash) by invoking replaceChild on a DOM object, triggering a null dereference (demonstrated by document.replaceChild with a 0 argument). Affected products are KDE K...

CVE-2005-3672

CVE-2005-3672 concerns the Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1. A remote attacker can cause a denial of service by sending certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. The Stonesoft advisory...