CVE-2007-3663

The entry CVE-2007-3663 concerns Media Player Classic (MPC) 6.4.9.0. A divide-by-zero condition in handling MPA files can be triggered by a crafted file, exposing user-assisted remote denial of service and the possibility of arbitrary code execution. The primary affected component is MPC’s MPA fi...

CVE-2007-3662

The CVE-2007-3662 entry affects Media Player Classic (MPC) 6.4.9.0 . It allows a user-assisted remote attacker to trigger a denial of service and potentially execute arbitrary code by opening a crafted FLV file . No exploitation details or patch information are provided in the connected documents...

CVE-2007-3663

Divide-by-zero error in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file...

Media Player Classic .MPA除零拒绝服务漏洞

Media Player Classic是一款流行的媒体播放程序。 Media Player Classic不正确处理.mpa文件，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于不正确处理MPA扩展媒体文件，当空文件提供给MPC处理时可导致由于除零错误而崩溃。 guliverkli Media Player Classic 6.4.9 0 目前没有解决方案提供： http://guliverkli.sourceforge.net/...

CVE-2007-2723

Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service web browser crash via an "empty" .MPA file, which triggers a divide-by-zero error...

CVE-2007-2723

Media Player Classic 6.4.9.0 is affected. Processing an empty .MPA file triggers a divide-by-zero error, allowing user-assisted remote attackers to cause a denial of service (web browser crash). The available documents confirm the vulnerability and impact but do not provide a concrete patch/versi...

CVE-2007-2723

Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service web browser crash via an "empty" .MPA file, which triggers a divide-by-zero error...

PT-2007-4039 · Mpc Hc Team · Media Player Classic

Name of the Vulnerable Software and Affected Versions: Media Player Classic version 6.4.9.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, by utilizing an "empty" .MPA file. This triggers a divide-by-zero error. Recommendations: For...

Microsoft Internet Explorer fails to properly interpret certain responses from FTP servers

Overview A vulnerability in the way Microsoft Internet Explorer handles responses from FTP servers may lead to execution of arbitrary code. Description Microsoft Internet Explorer contains an unspecified vulnerability that could be exploited when it attempts to interpret responses from FTP server...

CVE-2006-4635

Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in WebExtensions - Notitia I/II. NOTE: due to lack of details, it is not...

CVE-2006-4635

The CVE-2006-4635 entry affects MySource Classic 2.14.6 (and possibly earlier). It describes remote authenticated users with superuser privileges who can inject arbitrary PHP code via the Equation attribute in Web_Extensions - Notitia (I/II). The exact vulnerability type (file inclusion, static c...

CVE-2006-4635

Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in WebExtensions - Notitia I/II. NOTE: due to lack of details, it is not...

CVE-2006-4619

The CVE-2006-4619 vulnerability affects Avira AntiVir PersonalEdition Classic 7.0 (build 151) in the start update window of update.exe. It allows local privilege escalation via a “Shatter” style attack targeting (1) IParam and the (2) PBM_GETRANGE and (3) PBM_SETRANGE messages in an unspecified p...

[SA21757] MySource Classic Equation Attribute PHP Code Injection

TITLE: MySource Classic Equation Attribute PHP Code Injection SECUNIA ADVISORY ID: SA21757 VERIFY ADVISORY: http://secunia.com/advisories/21757/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: MySource Classic 2.x http://secunia.com/product/5773/ DESCRIPTION: A...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 lang parameter in index.php, and the 2 mytheme and 3 myskin parameters in multiple "p-themes" index.inc.php files including c...

CVE-2006-1274

Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users to gain privileges via notepad.exe, which is used to display scan reports...

CVE-2006-1274

CVE-2006-1274 affects AntiVir PersonalEdition Classic 7, where Classic Planer does not drop privileges before executing external programs. This allows local users to escalate privileges via notepad.exe, which is used to display scan reports. The description is confirmed by multiple connected sour...

ofsatr 2.6 search for vulnerabilities simple analysis-vulnerability warning-the black bar safety net

Information source: cool-off heaven Article author: lanker See online have a similar tool, but the analysis of the articles but did not find, listen to small black say hackers Handbook, unfortunately even without the magazine, so you capture and then look at the code, generally analysis a bit. Th...

Buffer overflow

Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures YGP Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-0316

Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures YGP Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors...