CVE-2005-3095

CVE-2005-3095 concerns the Avi Alkalay notify program (dated 19 Aug 2001). The available documents indicate that remote attackers could execute arbitrary commands by injecting shell metacharacters into the from parameter. CVSS metrics (NVD) specify a Network attack vector with Low complexity, no ...

CVE-2005-3097: Undefined Security Weakness

Directory traversal vulnerability in Avi Alkalay contribute.cgi aka contribute.pl, dated 16 Jun 2002, allows remote attackers to overwrite arbitrary files via ".." sequences in the contribdir variable...

CVE-2005-3095: Undefined Security Weakness

Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter...

RealNetworks RealPlayer AVI Parsing Buffer Overflow (CAN-2005-2052)

...

ashleyDoS.txt

Update: 10:38 PM 3/27/2005 Subject: " Ashley's Server DoS Exploit " Vulnerable version: Ashley's 1.0 Description: Ashley's Web Server its currently supports perl cgi. Also supported are directory listings,custom front pages, custom error pages.It also supports flash, pdf,realmedia, mp3s, avi's,...

CVE-2005-2052

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...

CVE-2005-2052

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...

CVE-2005-2052

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...

CVE-2005-2052: Undefined Security Weakness

Heap-based buffer overflow in vidplin.dll in RealPlayer 10 and 10.5 6.0.12.1040 through 1069, RealOne Player v1 and v2, RealPlayer 8 and RealPlayer Enterprise allows remote attackers to execute arbitrary code via an .avi file with a modified strf structure value...

RealPlayer < 6.0.12.1212 vidplin.dll Crafted AVI Overflow

Binary data 3030.prm...

RealPlayer / RealOne Player for Windows Multiple Vulnerabilities (2005-06-23)

According to its build number, the installed version of RealPlayer / RealOne Player for Windows has several vulnerabilities : - A malicious MP3 file can be used to overwrite an arbitrary file or execute an ActiveX control. - Using a specially crafted RealMedia file, an attacker may be able to cau...

[VulnWatch] eEye Advisory - EEYEB-200505 - RealPlayer AVI Processing Overflow

RealPlayer vidplin.dll AVI Processing Heap Overflow Release Date: June 23, 2005 Date Reported: May 4, 2005 Patch Development Time In Days: 36 Severity: High Code Execution Vendor: RealNetworks Systems Affected: For Microsoft Windows RealPlayer 10.5 6.0.12.1040-1069 RealPlayer 10 RealOne Player v2...

Rhapsody vidplin.dll AVI Processing Heap Overflow Vulnerability

The remote installation of Rhapsody has a heap overflow in the 'vidplin.dll' file used to process AVI files. With a specially- crafted AVI file, an attacker can exploit this flaw to cause arbitrary code to be run within the context of the affected application when a user opens the file. C Tenable...

CVE-2004-0827: Undefined Security Weakness

Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via malformed 1 AVI, 2 BMP, or 3 DIB files...

Linux news 28.06.00

Linux Kernel 2.2.17pre9 Вышел очередной пререлиз нового стабильного ядра Linux - Linux Kernel 2.2.17. Подробнее: http://www.cs.helsinki.fi/linux/linux-kernel/2000-26/0205.html Linux kernel 2.4.0-test2-ac2 Вышло новое тестовое ядро из серии Linux kernel 2.4.0-test2-acXX - Linux kernel...