5076 matches found
Sendmail buffer overflow
Buffer overflow on headers parsing oversized address comment...
CVE-2001-0596
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript...
CVE-2001-0596: Undefined Security Weakness
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript...
CVE-2002-0008
Bugzilla before 2.14.1 allows remote attackers to 1 spoof a user comment via an HTTP request to processbug.cgi using the "who" parameter, instead of the Bugzillalogin cookie, or 2 post a bug as another user by modifying the reporter parameter to enterbug.cgi, which is passed to postbug.cgi...
CVE-2002-0008
CVE-2002-0008 affects Bugzilla prior to 2.14.1. The vulnerability allows remote attackers to impersonate users: (1) spoof a user comment by sending a request to process_bug.cgi using the who parameter instead of the Bugzilla_login cookie, and (2) post a bug as another user by altering the reporte...
CVE-2002-0001: Undefined Security Weakness
Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list...
Windows AIM Client Exploits
i have generated a list of exploits that can be used to cause an illegal operation on windows aim clients 1. Comment Crash - anyone remember that neat little exploit that involved a large amount of html comment headers "!-- "? to fix it they configured the server to ignore instant messages over...
Netscape 4.76 gif comment flaw
Product: Netscape Navigator/Communicator Tested on: 4.76 on Linux and Win98/NT Vendor Contact: Reported 2001-03-22 Problem -------------------------------------------------------- - Overview: The Netscape browser does not escape the gif file comment in the image information page. This allows...
[SECURITY] New version of Netscape Communicator/Navigator released
Package: netscape communicator, navigator Vulnerability: remote exploit Debian-specific: no Existing Netscape Communicator/Navigator packages contain the following vulnerabilities: 1. Netscape Communicator JPEG-Comment Heap Overwrite Vulnerability - executes arbitrary code in the comment field of...
[SECURITY] New version of Netscape Communicator/Navigator released
---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone September 1, 2000 - ---------------------------------------------------------------------------- Package: netscape communicator,...
Переполнение кучи в Netscape и Mozilla на JPEG-файлах.
Можно переполнить память отведенную для жранения поля комментария JPEG-файла указав некорректную длину заголовка...
Netscape Communicator 4.x - JPEG-Comment Heap Overwrite
Netscape Communicator 4.x - JPEG-Comment Heap Overwrite source: https://www.securityfocus.com/bid/1503/info Netscape Browsers use the Independent JPEG Group's decoder library to process JPEG encoded images. The library functions skip JPEG comments; however, the browser uses a custom function to...
Netscape Communicator 4.x - JPEG-Comment Heap Overwrite
source: https://www.securityfocus.com/bid/1503/info Netscape Browsers use the Independent JPEG Group's decoder library to process JPEG encoded images. The library functions skip JPEG comments; however, the browser uses a custom function to process these comments and store them in memory. The...
CVE-2023-28403
This CVE ID has been rejected by its CNA as unused and does not represent an active vulnerability entry.
DUO-PSA-2017-003: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2017-003 Publication Date: 2018-02-27 Revision Date: 2018-02-27 Status: Confirmed, Fixed Document Revision: 1 Overview Duo Security has identified a security flaw in a third-party library used in the Duo Network Gateway DNG which, under certain...