118 matches found
Apple QuickTime TeXML Style Element Text Specification Buffer Overflow (CVE-2012-3752)
A buffer overflow vulnerability has been reported in Apple QuickTime...
CVE-2012-3752
creationtimestamp| type| source ---|---|--- 2012-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22905 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/applequicktimetexmlfonttable.rb 2025-02-06...
QuickTime < 7.7.3 Multiple Vulnerabilities (Windows)
Binary data 6620.prm...
QuickTime < 7.7.3 Multiple Vulnerabilities (Windows)
The version of QuickTime installed on the remote Windows host is older than 7.7.3 and therefore is reportedly affected by the following vulnerabilities : - A buffer overflow exists in the handling of REGION records in PICT files. CVE-2011-1374 - A memory corruption issue exists in the handling of...
CVE-2012-3752
CVE-2012-3752: Apple QuickTime before 7.7.3 has multiple buffer overflows in TeXML style elements, allowing remote attackers to cause arbitrary code execution or a denial of service via a crafted TeXML file. Public materials reference a 7.7.2/7.7.3 window and show exploit notes (Metasploit module...
APPLE-SA-2012-11-07-1 QuickTime 7.7.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-11-07-1 QuickTime 7.7.3 QuickTime 7.7.3 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Viewing a maliciously crafted PICT file may lead to an unexpected application...
Scientific Linux Security Update : openswan on SL6.x i386/x86_64
Two buffer overflow flaws were found in the Openswan client-side XAUTH handling code used when connecting to certain Cisco gateways. A malicious or compromised VPN gateway could use these flaws to execute arbitrary code on the connecting Openswan client. CVE-2010-3302, CVE-2010-3308 Two input...
CVE-2011-3752
CVE-2011-3752 affects LimeSurvey 1.90+ build9642-20101214. The issue is an information disclosure where remote attackers can trigger a direct request to a PHP file (e.g., admin/statistics.php) that reveals the installation path in an error message. This is described across multiple documents (NVD...
CVE-2010-3752
programs/pluto/xauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in 1 ciscodnsinfo or 2 ciscodomaininfo data in a packet, a different vulnerability than CVE-2010-3302...
CVE-2009-3752
Opial 1.0 is affected by a SQL injection in home.php through the genres_parent parameter. This allows remote attackers to execute arbitrary SQL commands. The vulnerability has a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no authentication, and partial impa...
CVE-2009-3752
creationtimestamp| type| source ---|---|--- 2009-07-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9122...
CVE-2008-3752
CVE-2008-3752 describes a SQL injection in tr.php of the YourFreeWorld Ad-Exchange Script, allowing remote attackers to execute arbitrary SQL commands through the id parameter. The issue is confirmed in multiple sources (NVD entry with CVSS v2 base score 7.5, high impact: partial confidentiality,...
CVE-2008-3752
creationtimestamp| type| source ---|---|--- 2008-08-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32280...
SuSE 10 Security Update : mutt (ZYPP Patch Number 3752)
This update of mutt fixes a vulnerability in the APOP implementation that allows an active attacker to guess three bytes of the password. CVE-2007-1558 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
iTunes < 7.4 Malformed Music File Heap Overflow (Mac OS X)
The remote host is running iTunes, a popular jukebox program. The remote version of iTunes is vulnerable to a heap overflow when it parses a specially crafted MP4/AAC file. By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary code ...
CVE-2007-3752
Apple iTunes
CVE-2006-3752
The CVE-2006-3752 entry concerns SQL injection in the class.php of the Professional Home Page Tools Guestbook. The vulnerability allows remote attackers to inject SQL via any of the five parameters: hidemail, name, mail, ip, or text, potentially compromising data integrity and confidentiality and...