119 matches found
Microsoft .NET Framework远程权限提升漏洞（MS12-074)
BUGTRAQ ID: 56464 CVE ID: CVE-2012-4777 .NET就是微软的用来实现XML，Web Services，SOA（面向服务的体系结构service-oriented architecture）和敏捷性的技术。.NET Framework是微软开发的软件框架，主要运行在Microsoft Windows上。 Microsoft .NET Framework 4、4.5的代码优化功能在反射实现中没有正确执行对象权限，通过特制的XAML浏览器应用或特制的.NET Framework应用，可允许远程攻击者执行任意代码。 0 Microsoft .NET...
CVE-2012-4777
CVE-2012-4777 affects Microsoft .NET Framework 4 and 4.5. The vulnerability arises from improper enforcement of object permissions in the reflection code-optimization feature, allowing remote code execution through a crafted XAML browser application (XBAP) or a crafted .NET Framework application....
MS12-074: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2745030)
The remote Windows host is running a version of Microsoft .NET Framework that is affected by multiple vulnerabilities : - The way .NET Framework validates the permissions of certain objects during reflection is flawed and could be exploited by an attacker to gain complete control of an affected...
CVE-2011-4777
CVE-2011-4777 affects Parallels Plesk Panel (Site Editor/SiteBuilder) 10.4.4_build20111103.18. The vulnerability is a Cross-site Scripting (XSS) flaw in the Site Editor that allows injection of arbitrary script/HTML via the login parameter to preferences.html. Affected component: Site Editor in P...
openSUSE Security Update : perl (openSUSE-SU-2011:0479-1)
This update fixes a bug in perl that makes spamassassin crash and does not allow bypassing taint mode by using lc or uc anymore. - CVE-2010-4777: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P - CVE-2011-1487: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N: Permissions, Privileges, and...
CVE-2010-4777
creationtimestamp| type| source ---|---|--- 2011-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35489...
CVE-2006-4777
creationtimestamp| type| source ---|---|--- 2010-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16506 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms06067keyframe.rb 2025-02-06 03:13:38+00:00|...
CVE-2009-4777
Hitachi JP1 products (Automatic Job Management System 2 - View, JP1/Integrated Management - View, and JP1/Cm2/SNMP System Observer) are affected by a GIF file processing vulnerability. A remote attacker can trigger a denial of service via processing an invalid GIF file, causing an abnormal termin...
Internet Explorer Daxctle.OCX KeyFrame Method Heap Buffer Overflow Vulnerability
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...
Internet Explorer daxctle.ocx KeyFrame Method Memory Corruption (MS06-067; CVE-2006-4777)
Microsoft Internet Explorer IE is a web browser application that is capable rendering both static and dynamic contents. The application supports the ActiveX technology, which is a feature extension framework. IE is installed with a set of ActiveX controls including the DirectAnimation package...
CVE-2008-4777
CVE-2008-4777 describes an SQL injection in the Showroom Joomlearn LMS (com_lms ) for Joomla! and Mambo . The vulnerability allows remote attackers to execute arbitrary SQL commands through the cat parameter in the showTests task, indicating a directly exploitable backend data access flaw. The ro...
CVE-2008-4777
creationtimestamp| type| source ---|---|--- 2008-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31595...
CVE-2007-4777
CVE-2007-4777 concerns Joomla! 1.5 prior to RC2 (Endeleo) with a SQL injection vulnerability allowing remote execution of arbitrary SQL via an unspecified vector, probably related to the archive section. The linked records also note CVE-2007-4778 as a related entry describing multiple SQL injecti...
MS06-067: Cumulative Security Update for Internet Explorer (922760)
The remote host is missing the IE cumulative security update 922760. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Note that Microsoft has re-released this hotfix as its initial version contained a buffer overflo...
CVE-2006-4777
CVE-2006-4777 corresponds to a heap-based buffer/memory corruption in the DirectAnimation PathControl (daxctle.ocx) KeyFrame method used by Internet Explorer 6.0 SP1 on certain Windows distributions. Public sources describe an integer overflow/ improper argument handling that can allow a remote a...
CVE-2005-4777
CVE-2005-4777 affects Tashcom ASPEdit 2.9, where the administration/FTP password is stored in cleartext in the Windows registry, enabling local users to view it. The vulnerability arises from cleartext storage in the registry; no fix/mitigation details are provided in the supplied documents. Expl...
