Internet Explorer DHTML object vulnerability

Added: 04/25/2006 CVE: CVE-2005-0553 BID: 13120 OSVDB: 15465 Background Dynamic HTML DHTML allows the creation of interactive web pages. Problem Race conditions in various DHTML methods could allow command execution when a specially crafted web page is loaded in Internet Explorer. Resolution Appl...

Internet Explorer DHTML object vulnerability

Added: 04/25/2006 CVE: CVE-2005-0553 BID: 13120 OSVDB: 15465 Background Dynamic HTML DHTML allows the creation of interactive web pages. Problem Race conditions in various DHTML methods could allow command execution when a specially crafted web page is loaded in Internet Explorer. Resolution Appl...

Privilege escalation in IBM AIX rm_mlcache_file with file overwrite

Race conditions on temporary file creation...

Gnome gdm race conditions

Race conditions on handling .ICEauthority file...

Linux kernel perfmon DoS

Race conditions on mmstruct structure access...

Sendmail mail server race conditions

Race conditions on signals processing with setjmp/longjmp allow remote code execution...

GLSA-200603-21 : Sendmail: Race condition in the handling of asynchronous signals

The remote host is affected by the vulnerability described in GLSA-200603-21 Sendmail: Race condition in the handling of asynchronous signals ISS discovered that Sendmail is vulnerable to a race condition in the handling of asynchronous signals. Impact : An attacker could exploit this via certain...

Sendmail: Race condition in the handling of asynchronous signals

Background Sendmail is a popular mail transfer agent MTA. Description ISS discovered that Sendmail is vulnerable to a race condition in the handling of asynchronous signals. Impact An attacker could exploit this via certain crafted timing conditions. Workaround There is no known workaround at thi...

Multiple Cube / Sauerbraten game engines vulnerabilities

Multiple buffer overflows and DoS conditions...

CVE-2003-0956

Multiple race conditions in the handling of ODIRECT in Linux kernel prior to version 2.4.22 could cause stale data to be returned from the disk when handling sparse files, or cause incorrect data to be returned when a file is truncated as it is being read, which might allow local users to obtain...

CVE-2003-0956

CVE-2003-0956 describes race conditions in the Linux kernel’s O_DIRECT handling prior to 2.4.22. Affected component: kernel I/O path for direct I/O (O_DIRECT) on 2.4.x. Impact: local users could read data from previously deleted files or see data during reads of truncated files, potentially expos...

Multiple QNX Neutrino real-time OS vulnerabilities

libph buffer overflow. phfont race conditions. phgrafx buffer overflow. su buffer overflow. Local DoS. rc.local is world writable. passwd buffer overflow. crttrap relative libraries path. fontsleuth format string bug. libAp buffer overflow...

Multiple E-Post Mail Servers vulnerabilities

SMTP authentication buffer overflow, POP3 APOP authentication buffer overflow, LDAP buffer overflow, IMAP directory traversal and multiple DoS conditions...

Checkpoint SecureClient VPN/Firewall client race conditions

In short period between download and aplliance it's possible to overwrite client security policy file...

CVE-2003-1288

CVE-2003-1288 concerns multiple race conditions in Linux-VServer 1.22 running on Linux kernel 2.4.23 with SMP. The vulnerability enables local users to trigger a denial of service (kernel oops) via attack vectors affecting the s_info and ip_info data structures and through the forget_original_par...

Multiple linux kernels vulnerabilities

NAt feature DoS, sysgetthreadarea kernel memory content leak, ipvsconnflush race conditions, Posix timers DoS, rosertioctl DoS...

Microsoft Windows Plug and Play Service UMPNPMGR buffer overflow

Buffer overflow on PNPGetDeviceList and PNPGetDeviceListSize calls for anonymous user on Windows 2000 and authenticated user on Windows 2003 / XP. There is another one similar vulnerability, leading to memory leak with DoS conditions...

Scorched 3D multiple vulnerabilities

Buffer overflow, format string bugs, multiple DoS conditions...

Vulnerability in Authenticode Verification Could Allow Remote Code Execution (823182)

There is a vulnerability in Authenticode that, under certain low memory conditions, could allow an ActiveX control to download and install without presenting the user with an approval dialog. To exploit this vulnerability, an attacker could host a malicious Web Site designed to exploit this...

HTTP login page

This script logs onto a web server through a login page and stores the authentication / session cookie. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...