8772 matches found
Multiple local files detection issues with OWC in IE (GM#008-IE)
GreyMagic Security Advisory GM008-IE ===================================== By GreyMagic Software, Israel. 08 Apr 2002. Available in HTML format at http://security.greymagic.com/adv/gm008-ie/. Topic: Multiple local files detection issues with OWC in IE. Discovery date: 25 Feb 2002, 05 Mar 2002...
Controlling the clipboard with OWC in IE (GM#007-IE)
GreyMagic Security Advisory GM007-IE ===================================== By GreyMagic Software, Israel. 08 Apr 2002. Available in HTML format at http://security.greymagic.com/adv/gm007-ie/. Topic: Controlling the clipboard with OWC in IE. Discovery date: 24 Feb 2002. Affected applications:...
Multiple bugs in Office Web Components
Script execution, access to local files and clipboard...
CVE-2001-1127
Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via 1 proapsv, 2 mprosrv, 3 mprshut, 4 orarx, 5 sqlcpp, 6 probrkr, 7 sqlschema and 8 sqldump...
buffer overflow in mshtml.dll
Topic: buffer overflow in mshtml.dll Authors: ERRor and DarkZorro of domain Hell 3APA3A of SECURITY.NNOV Date: February, 13 2002 Vendor Informed: December, 20 2001 Software affected: Microsoft Internet Explorer 6.0 and prior Microsoft Outlook Express 6.0 and prior Microsoft Outlook 2000 and prior...
CVE-1999-1355
BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges...
ОБращение к реестру через IE5.5 (javascript execution)
Несколько ActiveX компонентов могут записывать разделы реестра...
Уязвимость ActiveX в Microsoft Outlook (code execution)
ActiveX компонент управляющий всей работой Outlook помечен как безопасный, что позволяет использовать его в Internet-страницах и письмах...
Очередная серьезная дырка в Internet Explorer (Microsoft VM ActiveX Component)
Один из встроенных JAVA-объектов позволяет выполнение любых ActiveX-компонент, в т.ч. не помеченные как безопасные...
Переполнения буфера в BEA Weblogic
Переполнения буфера во встраиваемых PROXY-компанентах...
SapporoWorks WinProxy 2.0/2.0.1 - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/1400/info Multiple unchecked buffers exist in the POP3 and HTTP Proxy components of SapporoWorks WinProxy which could open up the possibilities of denial of service attacks or remote execution of arbitrary code. Performing a "GET /" on port 8080 will...
CVE-1999-1011
The Remote Data Service RDS DataFactory component of Microsoft Data Access Components MDAC in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands...
CVE-1999-1011
CVE-1999-1011 affects the RDS DataFactory component of Microsoft MDAC used by IIS 3.x/4.x, enabling remote command execution via unsafe DataFactory methods in msadcs.dll. Public docs reference MS99-025 security bulletin and multiple advisories; exploit code and modules exist (e.g., Metasploit MSS...
CVE-2000-0256
Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the "Server-Side Image Map Components" vulnerability...
microsoft-install.txt
Juan asked me to forward this message from him to the list. He has discovered that an ActiveX control shipped with IE can be used to install software components signed by Microsoft without prompting the user. This of curse raises trust issues. Someone, not necessarily Microsoft, could use this...
Martin Stover Mars NWE 0.99 - Local Buffer Overflow
Martin Stover Mars NWE 0.99 - Local Buffer Overflow // source: https://www.securityfocus.com/bid/617/info There are several buffer overflows in the setuid root components of the Mars Netware Emulator package. They allow for a local root compromise through the overflowing of buffers without bounds...
CVE-1999-1011
The Remote Data Service RDS DataFactory component of Microsoft Data Access Components MDAC in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands...
Microsoft Data Access Components (MDAC) 2.1 Microsoft IIS 3.04.0 Microsoft Index Server 2.0 Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS (1)
Microsoft Data Access Components MDAC 2.1 Microsoft IIS 3.04.0 Microsoft Index Server 2.0 Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS 1 source: https://www.securityfocus.com/bid/529/info MDAC Microsoft Data Access Components is a package used to integrate web and database services...
Microsoft Data Access Components (MDAC) 2.1 / Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 / Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS (1)
source: https://www.securityfocus.com/bid/529/info MDAC Microsoft Data Access Components is a package used to integrate web and database services. It includes a component named RDS Remote Data Services. RDS allows remote access via the internet to database objects through IIS. Both are included i...