1088 matches found
ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability
ZDI-06-007: Microsoft Windows Address Book WAB File Format Parsing Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-007.html April 11, 2006 -- CVE ID: CVE-2006-0014 -- Affected Vendor: Microsoft -- Affected Products: Windows XP SP2 Windows 2000 SP4 -- TippingPointTM IPS Customer...
CVE-2006-0014
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...
MS06-016: Vulnerability in Outlook Express Could Allow Remote Code Execution (911567)
The remote host is running a version of Microsoft Outlook Express that may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed Windows Address Book .wab file to a victim on the remote host and have him open the file. C...
Microsoft Outlook Express Windows Address Book File Parsing Buffer Overflow Vulnerability
Description Microsoft Outlook Express is prone to a remote buffer-overflow vulnerability. This vulnerability presets itself when the application processes a specially crafted Windows Address Book .wab file. An attacker may exploit this issue to execute arbitrary code in the context of a user...
Update Protection against Microsoft Outlook Express Windows Address Book File Vulnerability (MS06-016)
Microsoft Outlook Express is a commonly used email application. A vulnerability has been discovered in the file which contains the address book of Outlook Express, potentially allowing a malicious attacker to take control of the affected machine...
Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the Microsoft Windows operating system. User interaction is required to exploit this vulnerability. The specific flaw exists during the parsing of malformed Windows Address Book .WAB files. Modification o...
Design/Logic Flaw
Mozilla Thunderbird 1.5 allows user-assisted attackers to cause an unspecified denial of service by tricking the user into importing an LDIF file with a long field into the address book, as demonstrated by a long homePhone field...
[Full-disclosure] Mozila Thunderbird 1.5 Address Book DoS
Affected: Mozila Thunderbird 1.5 /possibly other versions/ Mozila Thunderbird 1.5 address book allows fields of unlimited size in the address book which leads to a DoS if you import such ldif file POC: create a file.ldif and insert following then import it in address book: n: cn=Test POC by...
Mozilla Thunderbird 1.5 - Address Book Import Remote Denial of Service
Mozilla Thunderbird 1.5 - Address Book Import Remote Denial of Service source: https://www.securityfocus.com/bid/16716/info Mozilla Thunderbird is prone to a remote denial-of-service vulnerability. The issue presents itself when the application handles a specially crafted address book file. Mozil...
Mozilla Thunderbird 1.5 - Address Book Import Remote Denial of Service
source: https://www.securityfocus.com/bid/16716/info Mozilla Thunderbird is prone to a remote denial-of-service vulnerability. The issue presents itself when the application handles a specially crafted address book file. Mozilla Thunderbird 1.5 is reportedly affected by this issue. Other versions...
CVE-2005-4242
Multiple cross-site scripting XSS vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the address book and 2 contact data...
CVE-2005-4242
Multiple cross-site scripting XSS vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the address book and 2 contact data...
CVE-2005-4190
Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by 1 the identity field, 2 Category and 3 Label search fields, 4 the Mobile Phone field, and ...
Sylpheed < 2.0.4 Address Book LDIF Import Overflow
Binary data 3285.prm...
CVE-2005-3037
CVE-2005-3037 is an XSS vulnerability in Handy Address Book Server 1.1. The issue allows remote attackers to inject arbitrary script or HTML via the SEARCHTEXT parameter in a demos URL, indicating improper input handling in the web interface. The connected documents provide the vulnerability desc...
CVE-2005-3037
Cross-site scripting XSS vulnerability in Handy Address Book Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the SEARCHTEXT parameter in a demos URL...
[SA16798] Handy Address Book Server SEARCHTEXT Cross-Site Scripting
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-2858
The Fetch.FetchContact.1 ActiveX control Fetch.dll for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method...
CVE-2005-2858
The CVE-2005-2858 issue affects Rediff Bol 7.0 via the Fetch.FetchContact.1 ActiveX control (Fetch.dll). The FullAddressBook method allows remote attackers to read the Windows Address Book, exposing contact information. Root cause is an unsafe FullAddressBook interface in the Fetch.FetchContact.1...