CVE-2011-4962

code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized...

CVE-2011-4962

SilverStripe CMS (2.4.x) before 2.4.6 is affected by CVE-2011-4962: an attacker can trigger remote code execution by crafting a cookie in a user comment submission, due to improper handling during deserialization of PageCommentInterface.php data. The root cause is deserializing untrusted cookie d...

CVE-2010-4962

CVE-2010-4962 concerns the Webkit PDFs (webkitpdf) extension for TYPO3, affected in versions before 1.1.4. The vulnerability is described as unspecified, allowing remote attackers to execute arbitrary commands via unknown vectors. A fix is available: upgrade the webkitpdf extension to version 1.1...

Fat Player 0.6b - '.WAV' File Processing Buffer Overflow (SEH)

Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4962...

CVE-2009-4962

Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information...

CVE-2009-4962

This CVE (CVE-2009-4962) affects Fat Player 0.6b and is caused by a stack-based buffer overflow triggered by a long string in a WAV file. The vulnerability permits remote code execution and has multiple public exemplars (e.g., SEH-based exploits) documented in exploit databases and security advis...

CVE-2009-4962

creationtimestamp| type| source ---|---|--- 2009-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9495 2010-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14591 2010-10-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15279 2018-05-29...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 4962)

This version update to 7.4.19 fixes among other things several security issues : - Index Functions Privilege Escalation: CVE-2007-6600 - Regular Expression Denial-of-Service: CVE-2007-4772 / CVE-2007-6067 / CVE-2007-4769 - DBLink Privilege Escalation: CVE-2007-6601 %NASLMINLEVEL 70300 C Tenable...

CVE-2007-4962

The CVE-2007-4962 entry affects WinImage up to version 8.10. A directory traversal flaw lets an attacker place or overwrite files by crafting a filename containing .. within a .IMG or .ISO image, potentially enabling code execution by writing to a Startup folder. The NVD entry and related records...