9092 matches found
Information disclosure
Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls...
CVE-2008-0041
Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls...
CVE-2008-0041
CVE-2008-0041 concerns Apple Mac OS X 10.5.x where Parental Controls, when a website is unblocked, contacts www.apple.com, allowing remote observers to determine whether Parental Controls is active. The issue is an information-disclosure vulnerability; no exploit details are provided in the sourc...
CVE-2008-0041: Exposure of Sensitive Information to an Unauthorized Actor
Parental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is unblocked," which allows remote attackers to determine when a system is running Parental Controls...
Mozilla Foundation Security Advisory 2008-02
Mozilla Foundation Security Advisory 2008-02 Title: Multiple file input focus stealing vulnerabilities Impact: Moderate Announced: February 7, 2008 Reporter: hong, Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.12 SeaMonkey 1.1.8 Description Security researchers hong and...
Yahoo! Music Jukebox ActiveX Controls Buffer Overflows
The remote host contains the 'DataGrid' and/or 'MediaGrid' ActiveX controls included with Yahoo! Music Jukebox. These controls are reportedly affected by multiple buffer overflows involving, for example, the 'AddButton' and 'AddImage' methods of the 'DataGrid' control and 'AddBitmap' method of th...
Multiple file input focus stealing vulnerabilities — Mozilla
Security researchers hong and Gregory Fleischer each reported a variant on earlier reported bugs regarding focus shifting in file input controls. Their variants used file input controls nested inside tags to take advantage of automatic focus shifting into the file input field noted on the Hacker...
Security feature bypass
Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to 1 overwrite arbitrary files via the SaveToDisk method, or 2 modify files via the AddStringToFile method...
CVE-2008-0631
Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to 1 overwrite arbitrary files via the SaveToDisk method, or 2 modify files via the AddStringToFile method...
CVE-2008-0631
Affected product/component: MailBee Objects 5.5, specifically the MailBee.dll ActiveX controls. Vulnerability: Remote attackers can cause file manipulation via two methods—SaveToDisk (overwrite arbitrary files) and AddStringToFile (modify files). Root cause/conditions: Multiple ActiveX controls a...
CVE-2008-0631
Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to 1 overwrite arbitrary files via the SaveToDisk method, or 2 modify files via the AddStringToFile method...
facebook-overflow.txt
FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...
SwiftView ActiveX control and plug-in stack buffer overflow
Overview The SwiftView ActiveX control and plug-in contain a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SwiftView is software used to view or print PCL, HPGL, and TIFF files. SwiftSend is a product used f...
[Full-disclosure] Macrovision FlexNet Connect DownloadManager Insecure Methods
Who: Macrovision What: Macrovision FlexNext Connect is a software package that allows ISV's to update their software products. It is generally used in conjunction with the InstallShield software deploymnet framework. FlexNet uses a number of ActiveX controls, some of which are marked safe for...
flexnet-overwrite.txt
Who: Macrovision What: Macrovision FlexNext Connect is a software package that allows ISV's to update their software products. It is generally used in conjunction with the InstallShield software deploymnet framework. FlexNet uses a number of ActiveX controls, some of which are marked safe for...
Apple QuickTime RTSP Response message Reason-Phrase buffer overflow vulnerability
Overview Apple QuickTime contains a buffer overflow vulnerability that may allow a remote, unauthenticated attacker to cause a denial-of-service condition and possibly execute arbitrary code. Description Real Time Streaming Protocol RTSP is a protocol that is used by streaming media systems. Appl...
AOL Radio AOLMediaPlaybackControl.exe stack buffer overflow
Overview The AOL AOLMediaPlaybackControl application contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description AOL Radio includes several ActiveX controls to stream audio in web pages. The AOL AmpX and...
USN-559-1: MySQL vulnerabilities
Joe Gallo and Artem Russakovskii discovered that the InnoDB engine in MySQL did not properly perform input validation. An authenticated user could use a crafted CONTAINS statement to cause a denial of service. CVE-2007-5925 It was discovered that under certain conditions MySQL could be made to...
hp-activex.txt
Advisory: ///////// There is another remotely exploitable flaw within software preinstalled in HP notebook machines. This time, the culprit is automatic software update tool provided by the vendor.The Potential exploitation may lead to user files loss or altering vital system files e.g. kernel,...
HP Software Update Client 3.0.8.4 - Multiple Vulnerabilities
Advisory: ///////// There is another remotely exploitable flaw within software preinstalled in HP notebook machines. This time, the culprit is automatic software update tool provided by the vendor.The Potential exploitation may lead to user files loss or altering vital system files e.g. kernel,...