CVE-2013-4384

The Drupal Google Site Search module is affected by CVE-2013-4384: XSS due to improper sanitization of data returned from the Google API. Affected versions are Google Site Search 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10. A remote attacker can exploit this via a crafted API response to e...

CVE-2011-4384

CVE-2011-4384 entry is rejected/not used and does not represent an active vulnerability.

RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Linux

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4384

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header...

CVE-2010-4384

CVE-2010-4384 is an array index error in RealPlayer (versions 11.0–11.1, RealPlayer Enterprise 2.1.2, Mac and Linux RealPlayer 11.0.2.1744; possibly HelixPlayer 1.0.6) that enables remote code execution via a malformed RealMedia MDPR header. Connected sources indicate RealPlayer/HelixPlayer flaws...

RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...

Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities

Binary data 5709.prm...

CVE-2008-4384

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16571 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/lpviewerurl.rb 2025-02-06 03:13:39+00:00| seen|...

iseemedia / Roxio / MGI Software LPViewer - ActiveX Control Buffer Overflow (Metasploit)

$Id: lpviewerurl.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2009-4384

CVE-2009-4384 affects Scriptsez.net Ez Poll Hoster (EPH). The vulnerabilities are cross-site scripting (XSS) via two parameters: the pid parameter in a code action to index.php and the uid parameter in a view action to profile.php. Root cause: insufficient input validation allowing injection of a...

LPViewer ActiveX Control url property buffer overflow

Added: 11/21/2008 CVE: CVE-2008-4384 BID: 31604 OSVDB: 48946 Background The LPViewer ActiveX Control installs with the iseemedia ZOOM control viewer and allows viewing of images created with iseemedia software. Problem A buffer overflow vulnerability allows command execution when a user opens a w...

LPViewer ActiveX Control url property buffer overflow

Added: 11/21/2008 CVE: CVE-2008-4384 BID: 31604 OSVDB: 48946 Background The LPViewer ActiveX Control installs with the iseemedia ZOOM control viewer and allows viewing of images created with iseemedia software. Problem A buffer overflow vulnerability allows command execution when a user opens a w...

iseemedia / Roxio / MGI Software LPViewer ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in LPViewer ActiveX control LPControll.dll 3.2.0.2. When sending an overly long string to the URL property an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2008-4384

CVE-2008-4384 affects the MGI Software LPViewer ActiveX control (LPControl.dll) across Roxio and iseemedia, with stack-based buffer overflows in the url(), toolbar(), and enableZoomPastMax() methods that may allow remote code execution when a crafted HTML page is viewed. The vulnerability is demo...

Gentoo Security Advisory GLSA 200803-08 (win32codecs)

The remote host is missing updates announced in advisory GLSA 200803-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2007-4384

CVE-2007-4384 refers to multiple PHP remote file inclusion vulnerabilities in depouilg.php3 of Stephane Pineau VOTE 1c. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the NomVote or FilePalHex parameters. This is documented across multiple sources (NVD/NVD-...

Apple QuickTime fails to properly handle FLC movies

Overview Apple QuickTime fails to properly handle FLC movies. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Apple QuickTime is multimedia software that allows users to view local and remote audio, vide...

CVE-2006-4384

CVE-2006-4384 : A heap-based buffer overflow in Apple QuickTime prior to 7.1.3 allows a user-assisted remote attacker to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie. Impact is remote code execution within the user’s privileges; exploitation requires user interaction. Affec...