Microsoft Internet Explorer Memory Corruption (MS14-051: CVE-2014-4057)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

CVE-2013-4057

CVE-2013-4057 affects IBM InfoSphere Information Server XML Pack (versions 8.5.x up to FP3, 8.7.x up to FP2, and 9.1.x up to 9.1.2.0). The root cause is insufficient CSRF protections, allowing an attacker to trick a logged-in user into performing actions via a malicious URL, potentially hijacking...

CVE-2012-4057

The CVE-2012-4057 entry describes a buffer overflow in the Player component of Remote-Anything 5.60.15 that allows remote attackers to execute arbitrary code via a crafted FLM file . The connected sources confirm the vulnerability details but do not provide remediation steps or patched versions w...

IBM Solid Database 6.5 < 6.5.0.8 Multiple Denial of Service Vulnerabilities

Binary data 6340.prm...

Wibu-Systems CodeMeter Runtime TCP Packets Denial of Service Vulnerability

Wibu-Systems CodeMeter Runtime is prone to a denial of service DoS vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

CVE-2011-4057

CVE-2011-4057 affects Wibu-Systems CodeMeter Runtime prior to v4.40 (notably 4.30c and 4.10b). A remote attacker can send crafted TCP packets to port 22350, causing CodeMeter.exe to crash and trigger a denial of service. Remediation: update to CodeMeter Runtime v4.40 or later. If details are not ...

IBM solidDB Packets Processing Denial of Service Vulnerabilities

IBM solidDB is prone to multiple Denial of Service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:soliddb";...

SuSE 11.1 Security Update : acroread (SAT Patch Number 4057)

Specially crafted PDF documents can crash acroread or lead to execution of arbitrary code. Acroread has been updated to version 9.4.2 to address the issues CVE-2010-4091 / CVE-2011-0562 / CVE-2011-0563 / CVE-2011-0565 / CVE-2011-0566 / CVE-2011-0567 / CVE-2011-0570 / CVE-2011-0585 / CVE-2011-0586...

CVE-2010-4057

IBM solidDB 6.5.0.3 and earlier are affected by CVE-2010-4057, where receiving a TCP packet with many integer fields containing two different values triggers a recursive call leading to invalid memory access and a daemon crash (DoS) on port 1315. Affected versions include 6.5.0.3 and earlier; rem...

CVE-2009-4057

SQL injection vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php...

CVE-2009-4057

The CVE-2009-4057 issue affects the Joomla! component inertialFATE iF Portfolio Nexus (com_if_nexus) version 1.1. The root cause is an SQL injection via the id parameter in an item action to index.php, enabling remote execution of arbitrary SQL commands. This yields partial confidentiality, integ...

CVE-2008-4057

Technical details for CVE-2008-4057 are not publicly available in the provided documents. Monitor for updates.

CVE-2007-4057

The CVE-2007-4057 entry describes an unrestricted file upload vulnerability in Neocrome Seditio (pfs.php) affecting 121 and earlier. Remote authenticated users can upload arbitrary PHP code by supplying a filename ending in (1) .php.gif, (2) .php.jpg, or (3) .php.png, enabling code execution on t...

FTP Server Zipped .rtf File Uploaded

Binary data 4057.prm...

CVE-2006-4057

The CVE-2006-4057 issue concerns Mitch Murray Eremove 1.4, where a buffer overflow in the preview_create function of gui.cpp can be triggered by a large email attachment. This vulnerability permits remote attackers to cause an application crash (DoS) and, per the description, may allow arbitrary ...

CVE-2005-4057

Cross-site scripting XSS vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the 1 Location, 2 Last Name, and 3 First Name parameters...

CVE-2005-4057

CVE-2005-4057 describes a Cross-site scripting (XSS) vulnerability in the PluggedOut Nexus 0.1 project, specifically in search.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the (1) Location, (2) Last Name, and (3) First Name parameters. The entries ...