CVE-2000-1226

Removed by vendor...

CVE-2005-1269

Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...

CVE-2005-1269

Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...

CVE-2005-1269

Gaim before 1.3.1 allows remote attackers to cause a denial of service application crash via a Yahoo! message with non-ASCII characters in a file name...

CVE-2005-1269

CVE-2005-1269 affects Gaim prior to 1.3.1. A remote attacker can cause an application crash by sending a Yahoo! message with a non-ASCII filename, resulting in a denial of service. The issue is confirmed in multiple advisories referencing Gaim in affected packages; remediation is to upgrade to ve...

Finjan SurfinGate 7.0 - .ASCII File Extension File Filter Circumvention

Finjan SurfinGate 7.0 - .ASCII File Extension File Filter Circumvention source: https://www.securityfocus.com/bid/13959/info SurfinGate may allow an attacker to circumvent file filters. It has been reported that an attacker may bypass SurfinGate file filtering rules by using ASCII encoding in the...

GLSA-200506-11 : Gaim: Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200506-11 Gaim: Denial of Service vulnerabilities Jacopo Ottaviani discovered a vulnerability in the Yahoo! file transfer code when being offered files with names containing non-ASCII characters CAN-2005-1269. Hugo de Bokkenrijder...

Gaim: Denial of Service vulnerabilities

Background Gaim is a full featured instant messaging client which handles a variety of instant messaging protocols. Description Jacopo Ottaviani discovered a vulnerability in the Yahoo! file transfer code when being offered files with names containing non-ASCII characters CAN-2005-1269. Hugo de...

gaim -- Yahoo! remote crash vulnerability

Jacopo Ottaviani reports that Gaim can be crashed by being offered files with names containing non-ASCII characters via the Yahoo! protocol...

CVE-2005-1575

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160...

security flaw

Integer overflow in 1 tifdirread.c and 2 tiffax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFFASCII or TIFFUNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow...

CVE-2002-1624

CVE-2002-1624 refers to a buffer overflow in the Lotus Domino web server prior to R5.0.10 when logging to DOMLOG.NSF. The vulnerability can be triggered by a long HTTP Authenticate header containing certain non-ASCII characters, allowing a remote attacker to cause a denial of service and potentia...

CVE-2002-1624

Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters...

GLSA-200503-26 : Sylpheed, Sylpheed-claws: Message reply overflow

The remote host is affected by the vulnerability described in GLSA-200503-26 Sylpheed, Sylpheed-claws: Message reply overflow Sylpheed and Sylpheed-claws fail to properly handle non-ASCII characters in email headers when composing reply messages. Impact : An attacker can send an email containing ...

Sylpheed, Sylpheed-claws: Message reply overflow

Background Sylpheed is a lightweight email client and newsreader. Sylpheed-claws is a 'bleeding edge' version of Sylpheed. Description Sylpheed and Sylpheed-claws fail to properly handle non-ASCII characters in email headers when composing reply messages. Impact An attacker can send an email...

Important: Red Hat Security Advisory: sylpheed security update

An updated sylpheed package that fixes a buffer overflow issue is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Sylpheed is a GTK+ based fast email client. A buffer overflow bug has been found in the way Sylpheed handles...

RHEL 2.1 : sylpheed (RHSA-2005:303)

An updated sylpheed package that fixes a buffer overflow issue is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Sylpheed is a GTK+ based fast email client. A buffer overflow bug has been found in the way Sylpheed handles...

CVE-2005-0509

Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...

CVE-2005-0509

Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...

CVE-2005-0667

Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message...