163 matches found
Security Best Practice: Familiarize Yourself with the ASCII Only Response Headers Protection
HTTP Protocol Inspection provides strict enforcement of the HTTP protocol, ensuring these sessions comply with RFC standards and common security practices. Various attacks use binary and other non-ASCII characters to deliver worms and other malicious content to web servers...
Sylpheed Email Header Buffer Overflow Vulnerability with non-ASCII Characters
Overview Sylpheed does not validate input data properly, which could lead to buffer overflow when it receives a message with the header containing non-ASCII characters. Impact An Attacker could execute arbitrary code with the privileges of the user running Sylpheed. Solution Please refer to the...
CVE-2006-7027
Microsoft Internet Security and Acceleration ISA Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks...
CVE-2006-7027
Microsoft Internet Security and Acceleration ISA Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate portions of the log file and possibly leverage this for other attacks...
Mandrake Linux Security Advisory : libneon0.26 (MDKSA-2007:013)
An array index error in the URI parser in neon 0.26.0 to 0.26.2 could possibly allow remote malicious servers to cause a crash via a URI with non-ASCII characters. This vulnerability may only exist on 64bit systems. Updated packages are patched to address this issue. %NASLMINLEVEL 70300 C Tenable...
Neon LibNeon非ASCII字符URI数据远程拒绝服务漏洞
Neon LibNeon存在远程拒绝服务问题。 Neon LibNeon当处理包含非ASCII字符的URI数据时存在漏洞，攻击者可以利用漏洞使使用此库的应用程序崩溃，造成拒绝服务攻击。 Neon Client Library 0.26.2 Neon Client Library 0.26.1 Neon Client Library 0.26 MandrakeSoft Linux Mandrake 2007.0 x8664 MandrakeSoft Linux Mandrake 2007.0 Mandriva Linux可参考如下公告：...
libneon array index overflow
Index overflow on URI parsing with non-ASCII characters in 64-bit systems...
Type confusion
Array index error in the urilookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service crash via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error tha...
CVE-2007-0157
Array index error in the urilookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service crash via a URI with non-ASCII characters, which triggers a buffer under-read due to a type conversion error tha...
CVE-2006-3298
Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...
CVE-2006-3298
Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...
CVE-2006-3298: Undefined Security Weakness
Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service crash via messages that contain non-ASCII characters, which triggers the crash in jscript.dll...
CVE-2006-3227
Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, whi...
CVE-2006-3227
CVE-2006-3227 describes an interpretation conflict between Internet Explorer and other browsers (e.g., Mozilla/Firefox/Opera) that may let remote attackers alter the visual presentation of web pages and potentially bypass protection mechanisms by using ASCII characters with the 8th bit set. IE ma...
CVE-2006-3227
Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, whi...
CVE-2006-3227: Undefined Security Weakness
Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, whi...
Yahoo! Messenger <= 7.5.0.184 Multiple Vulnerabilities
Binary data 3665.prm...
Vulnerability in Scan Engine Software
//-------------------------------------- // Vulnerability in Scan Engine Software // Release Date : 2005-09-15 // Version: Currents may be all priors versions // Tested on: Windows 2000 SP2 & SP4 // Tested on: Windows 2000 Server SP4 // // Discovered by: fRoGGz, maew, shadok & mogwai // Credit to...