CVE-2007-4092

CVE-2007-4092 affects iFoto 1.0.1 and earlier. A directory traversal vulnerability exists in index.php where the dir parameter can be manipulated with .. to list arbitrary directories and, possibly, download arbitrary photos. This is the core impact described across multiple sources (NVD, CVE lis...

CVE-2007-4092

Directory traversal vulnerability in index.php in iFoto 1.0.1 and earlier allows remote attackers to list arbitrary directories, and possibly download arbitrary photos, via a .. dot dot in the dir parameter...

CVE-2006-4092

The CVE-2006-4092 entry describes a vulnerability in Simpliciti Locked Browser where actions are not properly constrained to the Internet Explorer environment. A local attacker could entice a user to visit a site that runs a JavaScript window.blur loop to remove focus from the browser window, fol...

[EEYEB-20051117A] Apple QuickTime STSD Atom Heap Overflow

EEYEB-20051117A Apple QuickTime STSD Atom Heap Overflow Release Date: January 10, 2006 Date Reported: November 17, 2005 Patch Development Time In Days: 54 Days Severity: High Code Execution Vendor: Apple Systems Affected: Quicktime on Windows 2000 Quicktime on Windows XP Quicktime on Mac OS X...

CVE-2005-4128

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4092. Reason: This candidate is a duplicate of CVE-2005-4092. This candidate was originally published to handle a pre-patch vague announcement, but multiple simultaneous pre-patch announcements resulted in duplicate CVEs that...

CVE-2005-4127

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-4092. Reason: This candidate is a duplicate of CVE-2005-4092. This candidate was originally published to handle a pre-patch vague announcement, but multiple simultaneous pre-patch announcements resulted in duplicate CVEs that...

CVE-2005-4128

CVE-2005-4128 is a duplicate of CVE-2005-4092. The connected advisories describe Apple QuickTime/QuickTime Player heap memory corruption vulnerabilities in handling various image/media formats (GIF, TGA, TIFF, STSD) that may allow remote code execution or denial of service. The issues were addres...

CVE-2005-4127

CVE-2005-4127 is a duplicate of CVE-2005-4092 and not an active entry. The connected advisories describe Apple QuickTime/ iTunes heap overflow vulnerabilities in various image/media formats (GIF, TGA, TIFF, QTIF) leading to arbitrary code execution or denial of service. QuickTime 7.0.4 (and relat...

CVE-2005-4092

Summary of CVE-2005-4092 and related advisories: This issue is a heap-based overflow in Apple QuickTime/ iTunes involving QuickTime.qts, exploitable via crafted QuickTime movie files. The vulnerabilities concern the handling of the Movie Resource atom with a large size and the STSD (Sample Descri...

CVE-2005-4092

Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 3 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via a .mov file with 1 a Movie Resource atom with a large size value, or 2 an stsd atom with a...