CVE-2010-3147

CVE-2010-3147 describes an untrusted search path vulnerability in Windows Address Book (wab.exe) where a Trojan horse wab32res.dll loaded from the current working directory can execute code. Affected: WAB/Windows Contacts components on Windows XP SP2/XP SP3, Server 2003 SP2, Vista SP1/SP2, Server...

PT-2010-4592 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Windows Address Book version 6.00.2900.5512 in Microsoft Windows XP SP2 and SP3 Windows Address Book in Windows Server 2003 SP2 Windows Address Book in Windows Vista SP1 and SP2 Windows Address Book in Windows Server 2008 Gold, SP2, and R2...

Microsoft Address Book 6.00.2900.5512(.vcf) DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================================================= Microsoft Address Book 6.00.2900.5512.vcf DLL Hijacking Exploit =================================================================...

Microsoft Address Book 6.00.2900.5512 - wab32res.dll DLL Hijacking

Microsoft Address Book 6.00.2900.5512 - wab32res.dll DLL Hijacking / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban , Dinesh Arora Site : www.beenuarora.com Exploit Title: Microsoft Address Book DLL Hijacking Date: 25/08/2010 Author: Beenu Arora...

Microsoft Address Book 6.00.2900.5512 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =========================================================== Microsoft Address Book 6.00.2900.5512 DLL Hijacking Exploit =========================================================== / Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r,...

Microsoft Address Book 6.00.2900.5512 - 'wab32res.dll' DLL Hijacking

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora , Anirban , Dinesh Arora Site : www.beenuarora.com Exploit Title: Microsoft Address Book DLL Hijacking Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 , Microsoft Address Book 6.00.2900.5512...

Microsoft Outlook Express Windows Address Book File Overflow (MS06-016; CVE-2006-0014)

Microsoft Outlook Express OE is an email, newsgroup and address book management client application. The application includes a stand-alone component called Address Book that manages the address book entries. An Address Book can contain entries for individual contacts as well as group lists that...

CVE-2010-1796

The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to obtain sensitive Address Book Card information via JavaScript code that forces keystroke events for input fields...

CVE-2010-1796

The CVE-2010-1796 issue affects Safari before 5.0.1 on Mac OS X 10.5–10.6 and Windows, and before 4.1.1 on Mac OS X 10.4. An implementation flaw in AutoFill lets a malicious website trigger AutoFill without user action, exposing Address Book Card data via JavaScript keystroke events. The security...

Safari AutoFill Feature Exposes User Data

A prominent security researcher is urging users of Apple’s Safari browser to immediately turn off the AutoFill feature to block hackers from stealing sensitive information. According to Jeremiah Grossman, founder and Chief Technology Officer of WhiteHat Security, the AutoFill Web Forms feature ca...

CVE-2010-0914

Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality via unknown vectors related to Mail, Calendar, Address Book, and Instant Messaging...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Convergence 1.0 allows remote attackers to affect confidentiality via unknown vectors related to Mail, Calendar, Address Book, and Instant Messaging...

CVE-2010-0914

CVE-2010-0914 affects Oracle Sun Convergence 1.0. The Sun Convergence entry shows the vulnerability is exposed over HTTP and targets Mail, Calendar, Address Book, and Instant Messaging. The NVD entry lists an overall CVSS v2 base score of 5.0 (Network vector, Confidentiality impact Partial, other...

Joomla! Component Address Book - Blind SQL Injection

Joomla! Component Address Book - Blind SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comaddressbook Blind Sqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL...

Joomla! Component Address Book - Blind SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comaddressbook Blind Sqli Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://b-elektro.no/ Author : Sid3^effects aKa HaRi special...

Easy Address Book 1.2 Cross Site Request Forgery

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Easy Address book WebServer 1.2 - Cross-Site Request Forgery

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Easy Address book WebServer 1.2 - Cross-Site Request Forgery

Easy Address book WebServer 1.2 - Cross-Site Request Forgery |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | |...

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...