76 matches found
RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities
According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...
Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities
Binary data 5709.prm...
CVE-2009-4388
CVE-2009-4388 concerns the ListMan (nl_listman) TYPO3 extension, version 1.2.1. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected product is the ListMan extension for TYPO3; the exact vu...
Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute.
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Symantec AppStrea...
Symantec AppStream Client LaunchObj ActiveX Control installAppMgr vulnerability
Added: 03/31/2009 CVE: CVE-2008-4388 BID: 33247 OSVDB: 51410 Background Symantec AppStream is an application deployment framework. Problem The LaunchObj ActiveX control exposes the installAppMgr method, which can be used to download and execute arbitrary code. This could allow command execution...
Symantec AppStream Client LaunchObj ActiveX Control installAppMgr vulnerability
Added: 03/31/2009 CVE: CVE-2008-4388 BID: 33247 OSVDB: 51410 Background Symantec AppStream is an application deployment framework. Problem The LaunchObj ActiveX control exposes the installAppMgr method, which can be used to download and execute arbitrary code. This could allow command execution...
DSquare Exploit Pack: D2SEC_APPSTREAM
Name| d2secappstream ---|--- CVE| CVE-2008-4388 Exploit Pack| D2ExploitPack Description| Symantec AppStream Client LaunchObj ActiveX Arbitrary Code Execution Vulnerability Notes|...
CVE-2008-4388
CVE-2008-4388 affects Symantec AppStream Client 5.x with the LaunchObj ActiveX control (launcher.dll) prior to 5.2.2 SP3 MP1. The issue arises in the installAppMgr() method (and unspecified other methods), where downloaded files are not properly validated, enabling remote code execution via a cra...
CVE-2008-4388
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods...
Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute
This module exploits a vulnerability in Symantec AppStream Client 5.x. The vulnerability is in the LaunchObj ActiveX control launcher.dll 5.1.0.82 containing the "installAppMgr" method. The insecure method can be exploited to download and execute arbitrary files in the context of the currently...
Gentoo Security Advisory GLSA 200803-08 (win32codecs)
The remote host is missing updates announced in advisory GLSA 200803-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2007-4388
2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default...
CVE-2007-4388
The provided connected documents confirm a vulnerability in 2wire 1701HG and 2071 Gateway routers running software 5.29.51 (and possibly 3.17.5), where a blank password is set by default. This implies potential unauthorized access to router management/settings if default credentials are not chang...
CVE-2006-4388
Apple QuickTime (Mac and Windows) contains an integer overflow in FlashPix (FPX) format handling, listed as CVE-2006-4388, enabling user-assisted remote code execution via a crafted FPX file. Public advisories (GLSA 200803-08, etc.) group these with other QuickTime format issues and note that App...
CVE-2005-4388
CVE-2005-4388 describes a cross-site scripting (XSS) vulnerability in the search.cfm component of CONTENS 3.0 and earlier . The issue arises from insufficient input validation, allowing remote attackers to inject arbitrary web script or HTML via the near parameter. Affected software is CONTENS 3....
