112 matches found
CVE-2011-4252
CVE-2011-4252 affects RealNetworks RealPlayer (Windows and Mac) where the RV10 codec parses a height value from a RealVideo object. The flaw allows memory corruption and remote code execution if a user opens a crafted sample or visits a malicious page. Public details indicate exploitation require...
Design/Logic Flaw
OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a...
CVE-2010-4252
OpenSSL CVE-2010-4252: When J-PAKE is enabled, OpenSSL
CVE-2009-4252
Cross-site scripting XSS vulnerability in images.php in Image Hosting Script DPI 1.1 Final 1.1F allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4252
CVE-2009-4252 is an XSS vulnerability in the Clixint DPI Image Hosting Script DPI 1.1 Final (1.1F). The issue affects images.php and allows remote attackers to inject arbitrary web script or HTML via the date parameter. Several connected sources corroborate this: OpenVAS NASL entries describe a p...
MS08-070: Vulnerabilities in Visual Basic 6.0 ActiveX Controls Could Allow Remote Code Execution (932349)
The remote host contains a version of the ActiveX control for Visual Basic 6.0 Runtime Extended Files that may allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit it. Note that this control may have been included with...
openSUSE 10 Security Update : pdns (pdns-2275)
Two security problems that have been found in PowerDNS are fixed by this update : CVE-2006-4251: The PowerDNS Recursor can be made to crash by sending malformed questions to it over TCP potentially executing code. CVE-2006-4252: Zero second CNAME TTLs can make PowerDNS exhaust allocated stack...
CVE-2007-4252
CVE-2007-4252 is tied to the Chilkat Zip ActiveX control (ChilkatZip2.dll 12.4.2.0). The vulnerability is an absolute path traversal through the SaveLastError and likely WriteExe methods, enabling remote attackers to create or overwrite arbitrary files when a full pathname is supplied. This align...
CVE-2006-4252
PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service resource exhaustion and application crash via a CNAME record with a zero TTL, which triggers an infinite loop...
CVE-2006-4252
PowerDNS Recursor (3.1.3 and earlier) is affected by CVE-2006-4252: processing a CNAME record with a zero TTL can trigger an infinite loop, causing resource exhaustion and an application crash (denial of service). Affected software is the PowerDNS Recursor; remediation is to upgrade to 3.1.4 or l...
CVE-2005-4252
CVE-2005-4252 describes a cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters of the search module. The NVD entry records a CVSS v2 base score of 4.3 (Medium) with attack ve...
