Buffer overflow

Multiple buffer overflows in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via a crafted 1 CIF, 2 C2D, or 3 GI file...

Secunia Research: UltraISO Image Parsing Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 01/04/2009 - UltraISO Image Parsing Buffer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

CVE-2008-4825: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via a crafted 1 CIF, 2 C2D, or 3 GI file...

PCAnywhere CIF文件本地权限提升漏洞

Symantec PCAnywhere是全球最畅销的用于管理服务器和提供管理人员支持的远程控制解决方案。 PCAnywhere的CIF文件可能包含有超级用户标签，而这个文件默认下不安全的存储在了“Documents and Settings\All Users\Application Data\Symantec\pcAnywhere\Hosts\”，导致任何用户都可以读取文件内容并创建新文件。 攻击者可以创建新的CIF文件，设置超级用户标签，并将其放置在Hosts目录中，这样用户登录到PCAnywhere时就会获得管理员权限。 Symantec pcAnywhere 12.5...

CVE-2006-3786

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif aka caller or CallerID files, which allows local users to generate a custom .cif file and modify the superuser flag...

CVE-2006-3786

Symantec pcAnywhere 12.5 is affected by CVE-2006-3786 due to weak integrity protection for .cif (CallerID) files, enabling local users to craft a custom .cif file and modify the superuser flag. The concrete impact is local privilege manipulation. Exploitation status is not provided in the connect...

CVE-2006-3786

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif aka caller or CallerID files, which allows local users to generate a custom .cif file and modify the superuser flag...

CVE-2006-3785

Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif aka caller or CallerID file, which allows local users to obtain the passwords from the window using tools such as Nirsoft Asterwin...

CVE-2006-3786: Undefined Security Weakness

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif aka caller or CallerID files, which allows local users to generate a custom .cif file and modify the superuser flag...

CVE-2006-3785: Undefined Security Weakness

Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif aka caller or CallerID file, which allows local users to obtain the passwords from the window using tools such as Nirsoft Asterwin...