137 matches found
CVE-2010-4344
Heap-based buffer overflow in the stringvformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging...
CVE-2010-4344
CVE-2010-4344 : Exim before 4.70 has a heap-based buffer overflow in string_vformat() in string.c. A remote attacker can exploit this via an SMTP session (two MAIL commands with a large crafted header) to execute arbitrary code, potentially as the Exim user/root. The issue is fixed by upgrading t...
Exim security issue in historical release
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 It has come to the attention of The Exim Maintainers that there is an exploit circulating in the wild which affects versions of Exim versions 4.69 and below -- Exim 4.70 was released in November 2009. The flaw permits remote code execution over SMTP...
[SECURITY] [DSA-2131-1] New exim4 packages fix remote code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2131-1 [email protected] http://www.debian.org/security/ Stefan Fritsch December 10, 2010 http://www.debian.org/security/faq -...
Debian DSA-2131-1 : exim4 - arbitrary code execution
Several vulnerabilities have been found in exim4 that allow a remote attacker to execute arbitrary code as root user. Exploits for these issues have been seen in the wild. This update fixes a memory corruption issue that allows a remote attacker to execute arbitrary code as the Debian-exim user...
CVE-2010-4344
creationtimestamp| type| source ---|---|--- 2010-12-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15725 2010-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16925 2018-05-29 15:50:33+00:00| seen|...
[SECURITY] [DSA-2131-1] New exim4 packages fix remote code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-2131-1 [email protected] http://www.debian.org/security/ Stefan Fritsch December 10, 2010 http://www.debian.org/security/faq -...
DSA-2131-1 exim4 - remote code execution
Bulletin has no description...
exim security update
4.63-3.el55.2 - fix buffer overflow in stringformat CVE-2010-4344, 662019...
CVE-2009-4344
Cross-site scripting XSS vulnerability in the ZID Linkliste zidlinklist extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4344
The CVE-2009-4344 entry describes a Cross-site scripting (XSS) vulnerability in the ZID Linkliste (zid_linklist) extension 1.0.0 for TYPO3. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified vectors. The affected product is TYPO3 with the zid_linklist 1.0...
CVE-2008-4344
creationtimestamp| type| source ---|---|--- 2008-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32410...
CVE-2007-4344
CVE-2007-4344 involves heap-based buffer overflows in ACDSee products: PSP images processed by ID_PSP.apl and LHA archives by AM_LHA.apl, leading to remote code execution with user-assisted input. Affects ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 bui...
CVE-2007-6009
CVE-2007-6009 is a buffer-overflow vulnerability in ACDSee plug-ins used to process XPM files. Connected sources confirm a boundary/section-string overflow in ID_X.apl, IDE_ACDStd.apl, ID_PSP.apl, and AM_LHA.apl that could allow remote code execution when a user opens a crafted XPM file, with suc...
Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows
====================================================================== Secunia Research 02/11/2007 - ACDSee Products Image and Archive Plug-ins Buffer Overflows - ====================================================================== Table of Contents Affected...
CVE-2005-4344
CVE-2005-4344 affects Adobe ColdFusion MX 7.0. The root cause is that the CFOBJECT /CreateObject(Java) configuration is not honored when disabled, allowing local users to create an object despite the setting. The NVD data indicates a low overall risk (CVSS v2 base score 2.1) with local attack vec...
