51 matches found
CVE-2013-4973
CVE-2013-4973 concerns RealNetworks RealPlayer before 16.0.3.51 (and RealPlayer SP 1.0–1.1.5). The issue is a stack-based buffer overflow in handling RealPlayer Metadata Package (RMP) filenames, exploitable via a crafted .rmp file, allowing remote code execution in the context of the user. OpenVA...
Real Networks RealPlayer栈缓冲区溢出漏洞(CVE-2013-4973)
BUGTRAQ ID: 61989 CVECAN ID: CVE-2013-4973 RealPlayer是网上收听收看实时音频、视频和Flash的工具。 RealPlayer for Windows 16.0.2.32在处理RMP内的文件名时存在栈缓冲区溢出漏洞，远程攻击者利用此漏洞可在受影响应用上下文中执行任意代码 0 Real Networks RealPlayer 16.x 厂商补丁： Real Networks ------------- Real Networks已经为此发布了一个安全公告（08232013player）以及相应补丁:...
Real Media Player filename handler stack buffer overflow vulnerability
Overview Real Media Player fails to parse filenames correctly, which may allow a remote, unauthenticated attacker to execute arbitrary code in the context of the logged in user. Description CWE-121: Stack-based Buffer Overflow - CVE-2013-4973Real Media Player versions prior to version 16.0.3.51 a...
CVE-2010-4973
The CVE-2010-4973 entry describes a Cross-site scripting (XSS) vulnerability in Campsite 3.4.0, specifically in the search feature where an attacker can inject arbitrary script or HTML through the f_search_keywords parameter. The affected component is Campsite 3.4.0, and the flaw is related to th...
CVE-2009-4973
TotalCalendar 2.4 is affected by a SQL injection in rss.php, exploitable via the selectedCal parameter in a SwitchCal action. The vulnerability allows remote attackers to execute arbitrary SQL commands. CVSS v2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). Referenced exploit appears at Exploit-DB ...
CVE-2008-4973
i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/i2my.1 and 2 /tmp/i2my.2 temporary files...
CVE-2008-4973
CVE-2008-4973 describes a local privilege issue in "i2myspell" within the myspell 3.1 package. The vulnerability enables local users to overwrite arbitrary files via a symlink attack against temporary files: /tmp/i2my#####.1 and /tmp/i2my#####.2. The issue is a local attack against temporary file...
CVE-2006-4973
Cross-site scripting XSS vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter...
CVE-2006-4973
DotNetNuke (Perpetual Motion Interactive Systems) has a reflected XSS vulnerability in Default.aspx: versions prior to 3.3.5 and 4.x prior to 4.3.5 allow remote attackers to inject arbitrary HTML via the error parameter. Affected software is DotNetNuke under Perpetual Motion Interactive Systems. ...
CVE-2006-4973
Cross-site scripting XSS vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter...
