49 matches found
CVE-2015-5662
Avast Antivirus is affected by a directory traversal vulnerability (CVE-2015-5662) in how it processes ZIP archives. In affected builds prior to Virus Definition 150918-0, an unauthenticated remote attacker can craft a ZIP that, when processed, causes deletion or writing of arbitrary files on the...
CVE-2014-5662
CVE-2014-5662 affects the Android app Rail Rush (com.miniclip.railrush) version 1.9.0. The vulnerability is due to the app not performing X.509 certificate validation for SSL servers, which enables man-in-the-middle attackers to spoof trusted servers and exfiltrate sensitive information via a cra...
CVE-2012-5662
CVE-2012-5662 affects x3270 before 3.3.12ga12. The vulnerability arises from not verifying that the server hostname matches the CN or subjectAltName in the X.509 certificate, enabling MITM spoofing with arbitrary certificates. No explicit exploit details or in-the-wild status are provided in the ...
CVE-2012-5662
x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
Squid 3.x < 3.1.8 / 3.2.x < 3.2.0.2 NULL Pointer Dereference DoS
Binary data 5662.prm...
CVE-2008-5662
CVE-2008-5662 relates to multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier. Root cause: multiple buffer overflow conditions that allow downloaded programs to execute arbitrary code. Affected product/version: Sun Java Wireless Toolkit with CLDC 2.5.2 and earli...
SuSE 10 Security Update : IBM Java 5 (ZYPP Patch Number 5662)
IBM Java 5 was updated to SR8a to fix a security issue : - A vulnerability in the Java Management Extensions JMX agent when local monitoring is enabled, allowed remote attackers to 'perform unauthorized operations'. CVE-2008-3103 This update also includes new timezone data and fixes missing...
CVE-2006-5662
SQL injection vulnerability in easy notesManager eNM 0.0.1 allows remote attackers to execute arbitrary SQL commands via 1 the username parameter in login.php and 2 a search on the "search page."...
CVE-2006-5662
CVE-2006-5662 describes an SQL injection in easy notesManager (eNM) 0.0.1. The vulnerability allows remote attackers to execute arbitrary SQL via the username parameter in login.php and via a search on the search page. The available records do not specify affected versions beyond 0.0.1, nor provi...