56 matches found
CVE-2011-3925
CVE-2011-3925 is a use-after-free vulnerability in the Safe Browsing feature of Chromium-based browsers, with exploitation possible via a navigation entry and an interstitial page, potentially causing denial of service through heap memory corruption (impact listed as partial confidentiality, inte...
CVE-2011-3925
Removed by vendor...
FreeBSD : chromium -- multiple vulnerabilities (1a1aef8e-3894-11e1-8b5c-00262d5ed8ee)
Google Chrome Releases reports : 106672 High CVE-2011-3921: Use-after-free in animation frames. Credit to Boris Zbarsky of Mozilla. 107128 High CVE-2011-3919: Heap-buffer-overflow in libxml. Credit to Juri Aedla. 108006 High CVE-2011-3922: Stack-buffer-overflow in glyph handling. Credit to Google...
CVE-2010-3925
Contents-Mall before 15 does not properly handle passwords, which allows remote attackers to discover the administrative password, and consequently obtain sensitive information or modify data, via unspecified vectors...
Ipswitch IMail Server - IMAP SEARCH Buffer Overflow (Metasploit)
$Id: ipswitchsearch.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
CVE-2007-3925
creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16487 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/ipswitchsearch.rb 2025-02-06 03:13:38+00:00| seen|...
Ipswitch IMail IMAP SEARCH Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Ipswitch IMa...
CVE-2008-3925
Cross-site request forgery CSRF vulnerability in admin.php in Content Management Made Easy CMME 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action...
CVE-2008-3925
CSRF in Content Management Made Easy (CMME) 1.12 affects admin.php, enabling a remote attacker to trigger logout of an administrative user via a logout action. The connected CVE/DOCs confirm the vulnerability and affected component but do not provide a patch version or mitigation steps within the...
Ipswitch IMail Server IMAP SEARCH Command Date String Stack Overflow (CVE-2007-3925)
...
Ipswitch IMail Server IMAP SEARCH buffer overflow
Added: 07/27/2007 CVE: CVE-2007-3925 BID: 24962 OSVDB: 36219 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service could allow an authenticated attacker to execute arbitrary commands by sending a specially crafted SEARCH command...
Ipswitch IMail Server IMAP SEARCH buffer overflow
Added: 07/27/2007 CVE: CVE-2007-3925 BID: 24962 OSVDB: 36219 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service could allow an authenticated attacker to execute arbitrary commands by sending a specially crafted SEARCH command...
CVE-2007-3925
Ipswitch IMail Server 2006.x (IMAP service, imapd32.exe) contains multiple buffer overflows in the IMAP SEARCH and SEARCH CHARSET commands. The issue affects 2006.1 up to before 2006.21, enabling a remote authenticated attacker to execute arbitrary code by sending specially crafted commands. The ...
TinyIdentD 2.2 Stack Buffer Overflow
This module exploits a stack based buffer overflow in TinyIdentD version 2.2. If we send a long string to the ident service we can overwrite the return address and execute arbitrary code. Credit to Maarten Boone. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2006-3925
CVE-2006-3925: A stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control (iarecord.dll) in InterActual Player prior to 2.6 allows remote code execution via a long argument to the Files method. Current sources provide the vulnerability description and CVSS data (base score 6.4, MEDI...
CVE-2005-3925
CVE-2005-3925 describes multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier. The flaws allow remote attackers to execute arbitrary SQL commands through the following inputs: (1) detail[] (2) orderdir (3) orderby to find.php, and (4) id to issue....