CVE-2007-6393

CVE-2007-6393 describes an SQL injection in the Ace Image Hosting Script, in albums.php, via the id parameter in editalbum mode. The vulnerability allows remote authenticated users to execute arbitrary SQL commands. Impact indicators in the source data show partial impact to confidentiality, inte...

CVE-2007-6393: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in albums.php in Ace Image Hosting Script allows remote authenticated users to execute arbitrary SQL commands via the id parameter in editalbum mode...

KLA10107 ACE vulnerability in Cisco Security Agent

A buffer overflow was found in Cisco Security Agent. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed SMB packet. Original advisories Cisco bulletin Exploitation Public exploits exist for this...

Ace Image Hosting Script (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Ace Image Hosting Script id Remote SQL Injection Vulnerability ================================================================...

KLA10335 ACE vulnerability in SonicWall Global VPN client

Format string vulnerabilities were found in the SonicWall Global VPN client. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via specially designed format strings. Original advisories - Exploitation Public exploits...

KLA10257 Vulnerability in Macrovision SafeDisc

A buffer overflow was found in Macrovision SafeDisc. By exploiting this vulnerability malicious users can overwrite arbitrary memory locations and gain privileges. This vulnerability can be exploited locally via a specially designed argument. Original advisories - Exploitation Public exploits exi...

CVE-2007-5438

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7...

CVE-2007-5438

CVE-2007-5438 involves an unspecified vulnerability in a VMware ActiveX control (Reconfig.DLL) that could allow local users to cause a denial of service to the Virtual Disk Mount Service (vmount2.exe). Affected products and build ranges include VMware Workstation 5.5.x <5.5.8 build 108000, Wor...

CVE-2007-5438: Improper Input Validation

Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, VMware Player 1.x before 1.0.8 build 108000, VMware Player 2.x before 2.0.5 build 109488, VMware ACE 1.x before 1.0.7...

KLA10298 ACE vulnerability in PowerArchiver

A buffer overflow was found in PowerArchiver. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed filename. Original advisories Version gistory Exploitation Related products PowerArchiver-2010 CVE list...

KLA10060 ACE vulnerability in Kazaa & Grokster

A buffer overflow vulnerability was found in Kazaa & Grokster. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to Altnet Download Manager via a specially designed installation method call. Origina...

KLA10100 ACE vulnerability in CenterTools DriveLock

A buffer overflow was found in CenterTools DriveLock. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed HTTP request. Original advisories - Exploitation Related products CenterTools-DriveLock CVE list...

Stack overflow

IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow...

CVE-2007-5155

IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow...

CVE-2007-5155

IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow...

CVE-2007-5155: Improper Input Validation

IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow...

Design/Logic Flaw

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers ...

CVE-2007-5025

Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user."...

CVE-2007-0061

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers ...

Code injection

Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user."...