Vulnerability in theme WordPress Classic 1.5

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в теме WordPress Classic 1.5. XSS: http://site/index.php/223E3Cscript3Ealertdocument.cookie3C/script3E Уязвимость связана с недостаточной фильтрацией переменной PHPSELF. Подобная уязвимость ранее уже была найдена в...

Multiple applications security vulnerabilities

Mozilla Firefox pop-ups DoS, Microsoft Register Server DoS, FreeWRL ActiveX memory corruption, Nonnoi ASP Barcode files overwrite, Eltima Software VSPAX DoS, Media Player Classic memory corruption, Eltima Software RunService AX DoS, Symantec Norton Ghost ActiveX DoS and code execution,...

CVE-2007-3662

Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file...

CVE-2007-3663

Divide-by-zero error in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file...

Code injection

Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file...

Input validation

Divide-by-zero error in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file...

CVE-2007-3662

The CVE-2007-3662 entry affects Media Player Classic (MPC) 6.4.9.0 . It allows a user-assisted remote attacker to trigger a denial of service and potentially execute arbitrary code by opening a crafted FLV file . No exploitation details or patch information are provided in the connected documents...

CVE-2007-3662

Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted FLV file...

CVE-2007-3663

The entry CVE-2007-3663 concerns Media Player Classic (MPC) 6.4.9.0. A divide-by-zero condition in handling MPA files can be triggered by a crafted file, exposing user-assisted remote denial of service and the possibility of arbitrary code execution. The primary affected component is MPC’s MPA fi...

CVE-2007-3663

Divide-by-zero error in Media Player Classic MPC 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted MPA file...

Media Player Classic .MPA除零拒绝服务漏洞

Media Player Classic是一款流行的媒体播放程序。 Media Player Classic不正确处理.mpa文件，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于不正确处理MPA扩展媒体文件，当空文件提供给MPC处理时可导致由于除零错误而崩溃。 guliverkli Media Player Classic 6.4.9 0 目前没有解决方案提供： http://guliverkli.sourceforge.net/...

CVE-2007-2723

Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service web browser crash via an "empty" .MPA file, which triggers a divide-by-zero error...

CVE-2007-2723

Media Player Classic 6.4.9.0 is affected. Processing an empty .MPA file triggers a divide-by-zero error, allowing user-assisted remote attackers to cause a denial of service (web browser crash). The available documents confirm the vulnerability and impact but do not provide a concrete patch/versi...

CVE-2007-2723

Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service web browser crash via an "empty" .MPA file, which triggers a divide-by-zero error...

PT-2007-4039 · Mpc Hc Team · Media Player Classic

Name of the Vulnerable Software and Affected Versions: Media Player Classic version 6.4.9.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a web browser crash, by utilizing an "empty" .MPA file. This triggers a divide-by-zero error. Recommendations: For...

Microsoft Internet Explorer fails to properly interpret certain responses from FTP servers

Overview A vulnerability in the way Microsoft Internet Explorer handles responses from FTP servers may lead to execution of arbitrary code. Description Microsoft Internet Explorer contains an unspecified vulnerability that could be exploited when it attempts to interpret responses from FTP server...

CVE-2006-4635

Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in WebExtensions - Notitia I/II. NOTE: due to lack of details, it is not...

CVE-2006-4635

The CVE-2006-4635 entry affects MySource Classic 2.14.6 (and possibly earlier). It describes remote authenticated users with superuser privileges who can inject arbitrary PHP code via the Equation attribute in Web_Extensions - Notitia (I/II). The exact vulnerability type (file inclusion, static c...

CVE-2006-4635

Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in WebExtensions - Notitia I/II. NOTE: due to lack of details, it is not...

CVE-2006-4619

The CVE-2006-4619 vulnerability affects Avira AntiVir PersonalEdition Classic 7.0 (build 151) in the start update window of update.exe. It allows local privilege escalation via a “Shatter” style attack targeting (1) IParam and the (2) PBM_GETRANGE and (3) PBM_SETRANGE messages in an unspecified p...