51 matches found
Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities
Binary data 5709.prm...
CVE-2009-4391
CVE-2009-4391 is a cross-site scripting (XSS) vulnerability in TYPO3’s File list (dr_blob) extension 2.1.1. It allows remote attackers to inject arbitrary script or HTML via unspecified vectors. The connected documents consistently identify the affected component as TYPO3 with the dr_blob extensi...
Linksys WVC54GC NetCamPlayerWeb11gv2.ocx ActiveX控件栈溢出漏洞
BUGTRAQ ID: 32665 CVECAN ID: CVE-2008-4391 Linksys WVC54GC是一款支持802.11g协议的无线网络摄像头。 Linksys WVC54GC摄像头的NetCamPlayerWeb11gv2.ocx文件提供一个名为NetCamPlayerWeb11gv2的ActiveX控件，该控件没有正确地过滤对SetSource方式所传送的输入参数。如果用户受骗浏览了特制的HTML文档并向该方式提供了超长输入参数的话，就可以触发栈溢出，导致浏览器崩溃或执行任意指令。 0 Linksys WVC54GC 1.19 临时解决方法：...
CVE-2008-4391
CVE-2008-4391 affects Linksys WVC54GC, specifically the NetCamPlayerWeb11gv2.ocx ActiveX control. The issue is a stack-based/buffer overflow in SetSource that can be triggered by long invalid arguments in a specially crafted HTML page, potentially allowing remote code execution with the user’s pr...
CVE-2007-4391
CVE-2007-4391 describes a heap-based buffer overflow in Kakadu kdu_v32m.dll used by Yahoo! Messenger 8.1.0.413 that can be triggered by a crafted JPEG2000 length field in a webcam invitation, potentially causing an application crash or remote code execution. Public disclosures link the issue to Y...
Yahoo! Messenger webcam stream heap overflow
Overview Yahoo! Messenger fails to properly handle webcam streams, which may allow a remote attacker to execute arbitrary code. Description Yahoo! Messenger is an instant messaging application that is available for Windows, Mac, Unix, web, and mobile systems. Some version of Yahoo! Messenger, suc...
CVE-2006-4391
CVE-2006-4391 describes a buffer overflow in Apple ImageIO on Mac OS X 10.4–10.4.7 that can be triggered by a malformed JPEG2000 image, allowing remote attackers to execute arbitrary code. The issue affects Apple ImageIO within OS X, with the root cause being unsafe handling of JPEG2000 data. Imp...
Apple Mac OS X JPEG2000 image handling buffer overflow
Overview Apple Mac OS X fails to properly handle JPEG2000 files. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code or cause a denial-of-service condition. Description Apple ImageIO is an image processing framework that was introduced in OS X 10.4 Tiger...
Mac OS X Multiple Vulnerabilities (Security Update 2006-006)
The remote host is running a version of Mac OS X 10.3 which does not have the security update 2006-006 applied. Security Update 2006-006 contains several security fixes for the following programs : - CFNetwork - Flash Player - QuickDraw Manager - SASL - WebCore C Tenable Network Security, Inc. if...
CVE-2005-4391
CVE-2005-4391 is a Cross-site scripting (XSS) vulnerability in damoon that could let remote attackers inject arbitrary web script or HTML via unspecified search parameters, possibly the q parameter. The NVD entry assigns a CVSSv2 base score of 4.3 (Medium) with vector AV:N/AC:M/Au:N/C:N/I:P/A:N. ...
