452 matches found
CVE-2014-6711
The CVE concerns the Android app ABC Lounge Webradio (com.nobexinc.wls_66087017.rc) version 3.3.10, which does not verify X.509 certificates from SSL servers. The root cause is missing TLS certificate validation, enabling MITM attackers to spoof servers and access sensitive information via a craf...
PT-2014-7389
Name of the Vulnerable Software and Affected Versions The ABC Lounge Webradio aka com.nobexinc.wls 66087017.rc version 3.3.10 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...
CVE-2014-6711: Undefined Security Weakness
The ABC Lounge Webradio aka com.nobexinc.wls66087017.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
ABC Test - "id" Cross-Site Scripting
The abc-test WordPress plugin was affected by a "id" Cross-Site Scripting security vulnerability...
ABC Excel Parser Pro 4.0 Parser_Path Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24103/info ABC Excel Parser Pro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and t...
ABCPP 1.3 Directive Handler Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12021/info abcpp is prone to a buffer overflow vulnerability. This issue is exposed when the program is used to handle directives in ABC music notation files. Since the ABC files may originate from an external or untruste...
ABC2PS/JCABC2PS 1.2 Voice Field Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12024/info abc2ps and jcabc2ps are prone to a buffer overflow vulnerability. This issue is exposed when the program is used to process the voice field in ABC music notation files. Since the ABC files may originate from an...
Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 (.zip) SEH
No description provided by source. !/usr/bin/ruby Software : Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 Author : Lincoln Date : April 27, 2010 Reference : http://www.corelan.be:8800/advisories.php?id=CORELAN-10-034 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH...
openSUSE Security Update : libmodplug (openSUSE-SU-2011:0943-1)
This update of libmodplug0 fixes the following issues : 1 An integer overflow error exists within the 'CSoundFile::ReadWav' function src/loadwav.cpp when processing certain WAV files. This can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted W...
openSUSE Security Update : libmodplug (openSUSE-SU-2011:0943-1)
This update of libmodplug0 fixes the following issues : 1 An integer overflow error exists within the 'CSoundFile::ReadWav' function src/loadwav.cpp when processing certain WAV files. This can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted W...
DEBIAN-CVE-2013-4234
Multiple heap-based buffer overflows in the 1 abcMIDIdrum and 2 abcMIDIgchord functions in loadabc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted ABC...
CVE-2013-4234
Multiple heap-based buffer overflows in the 1 abcMIDIdrum and 2 abcMIDIgchord functions in loadabc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted ABC...
CVE-2013-4233
Integer overflow in the abcsetparts function in loadabc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which triggers a heap-based buffer overflow...
DEBIAN-CVE-2013-4233
Integer overflow in the abcsetparts function in loadabc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which triggers a heap-based buffer overflow...
CVE-2013-4233
Integer overflow in the abcsetparts function in loadabc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which triggers a heap-based buffer overflow...
UBUNTU-CVE-2013-4233
Integer overflow in the abcsetparts function in loadabc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which triggers a heap-based buffer overflow...
UBUNTU-CVE-2013-4234
Multiple heap-based buffer overflows in the 1 abcMIDIdrum and 2 abcMIDIgchord functions in loadabc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted ABC...
CVE-2013-4234
Multiple heap-based buffer overflows in the 1 abcMIDIdrum and 2 abcMIDIgchord functions in loadabc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted ABC...
Heap overflow
Multiple heap-based buffer overflows in the 1 abcMIDIdrum and 2 abcMIDIgchord functions in loadabc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via a crafted ABC...
CVE-2013-4234
CVE-2013-4234 involves multiple heap-based buffer overflows in the abc_MIDI_drum and abc_MIDI_gchord functions within load_abc.cpp of libmodplug, affecting version 0.8.8.4 and earlier. The vulnerabilities can lead to memory corruption, a crash, and potentially remote code execution, i.e., a denia...