9808 matches found
CVE-2005-3832
Stack-based buffer overflow in 1 CxUux60.dll and 2 CxUux60u.dll, as used in SpeedProject products including a Squeez 5.0 Build 4285, and b SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename...
CVE-2005-3832
CVE-2005-3832 describes a stack-based buffer overflow in CxUux60.dll and CxUux60u.dll used by SpeedProject products (Squeez 5.0 Build 4285; SpeedCommander 11.0 Build 4430 and 10.51 Build 4430). The vulnerability allows user-assisted attackers to execute arbitrary code via a ZIP archive containing...
CVE-2005-3831
Stack-based buffer overflow in 1 CxZIP60.dll and 2 CxZIP60u.dll, as used in SpeedProject products including a ZipStar 5.0 Build 4285, b Squeez 5.0 Build 4285, and c SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive...
Fantastic News "category" SQL inj.
Fantastic News "category" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/fantastic-news-category-sql-inj.html Vendor:www.fscripts.com Product link:http://fscripts.com/free.php?id=1 affected version: 2.1.1 and prior Product description:...
phpWordPress 3.0 SQL inj.
phpWordPress Article Manager 3.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/phpwordpress-30-sql-inj.html Vendor:http://www.word-press.net/ affected version: 3.0 and prior. Vuln. Description: Input passed to the "poll" "category" and...
DSA-903-1 unzip - race condition
Bulletin has no description...
GLSA-200511-10 : RAR: Format string and buffer overflow vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200511-10 RAR: Format string and buffer overflow vulnerabilities Tan Chew Keong reported about two vulnerabilities found in RAR: A format string error exists when displaying a diagnostic error message that informs the user of an...
BasiliX Message Content Script Injection Vulnerability
The remote web server contains PHP scripts that are prone to cross-site scripting attacks. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions are vulnerable to cross-scripting attacks since they do not filter HTML tags when showing a message. As a...
Generic Format String Vulnerability - Active Check
The remote service might be vulnerable to a format string vulnerability. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SMB Registry : SQL7 Patches
The remote SQL server seems to be vulnerable to the SQL abuse vulnerability described in technet article Q256052. This problem allows an attacker who has to ability to execute SQL queries on this host to gain elevated privileges. OpenVAS Vulnerability Test $Id: smbmssql7.nasl 6056 2017-05-02...
Generic format string
The remote service is vulnerable to a format string attack An attacker may use this flaw to execute arbitrary code on this host. OpenVAS Vulnerability Test $Id: miscformatstring.nasl 4750 2016-12-12 15:39:21Z cfi $ Generic format string Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arb...
CVE-2005-3317
Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via 1 a ZIP archive that contains a file with a long filename, which is not properly handled by a zipgenius.exe, b zg.exe, c...
CVE-2005-3317
Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via 1 a ZIP archive that contains a file with a long filename, which is not properly handled by a zipgenius.exe, b zg.exe, c...
CVE-2005-3317
CVE-2005-3317 affects ZipGenius: multiple stack-based buffer overflows in ZipGenius 5.5.1.468, 6.0.2.1041 and earlier than 6.0.2.1050. Vulnerable components include zipgenius.exe, zg.exe, zgtips.dll, contmenu.dll (ZIP long filenames); zipgenius.exe can mishandle long original names in UUE/XXE/MIM...
CVE-2005-3263
Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name...
CVE-2005-3263
CVE-2005-3263 describes a stack-based buffer overflow in UNACEV2.DLL used by RARLAB WinRAR 2.90–3.50. An attacker can trigger the overflow by supplying an ACE archive containing a file with a long name, allowing remote code execution. The vulnerability affects WinRAR’s ACE archive handling via UN...
CVE-2005-3263
Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name...
CVE-2005-3194
CVE-2005-3194 affects ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English). The vulnerability is described as multiple buffer overflows that allow remote attackers to execute arbitrary code via a long filename inside compressed archives (ALZ, ARJ, ZIP, UUE, XXE). Connected sources reitera...
[SA16852] HAURI Anti-Virus ALZ Archive Handling Buffer Overflow
TITLE: HAURI Anti-Virus ALZ Archive Handling Buffer Overflow SECUNIA ADVISORY ID: SA16852 VERIFY ADVISORY: http://secunia.com/advisories/16852/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: HAURI LiveCall http://secunia.com/product/5448/ ViRobot Advanced Server...