CVE-2009-0375

Buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a...

Buffer overflow

Buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a...

CVE-2009-0375

Buffer overflow in a DLL file in RealNetworks RealPlayer 10, RealPlayer 10.5 6.0.12.1040 through 6.0.12.1741, RealPlayer 11 11.0.0 through 11.0.4, RealPlayer Enterprise, Mac RealPlayer 10 and 10.1, Linux RealPlayer 10, and Helix Player 10.x allows remote attackers to execute arbitrary code via a...

Pi3Web ISAPI DoS

The Pi3Web HTTP server crashes when a request is made for an invalid DLL file in /isapi for versions 2.0.13 and earlier. By default, the non-DLLs in this directory after installation are users.txt, install.daf and readme.daf. This module requires Metasploit: https://metasploit.com/download Curren...

Insomnia : ISVA-081020.1 - Altiris Deployment Server Agent - Privilege Escalation

Insomnia Security Vulnerability Advisory: ISVA-081020.1 Name: Altiris Deployment Server Agent - Privilege Escalation Released: 20 October 2008 Vendor Link: http://www.altiris.com/ Affected Products: Altiris Deployment Server 6.X Original Advisory:...

Instant Expert Analysis ActiveX控件任意代码下载和执行漏洞

BUGTRAQ ID: 31752 CVECAN ID: CVE-2008-4385 Instant Expert Analysis允许站点通过单击方式快速分析用户的软硬件。 Instant Expert Analysis对Firefox或Netscape浏览器使用签名的Java Applet（SRLApplet.class，由sysreqlab2.jar或sysreqlab.jar提供），对Internet Explorer使用签名的ActiveX控件（sysreqlab.dll、sysreqlabsli.dll或sysreqlab2.dll）。...

Stack overflow

Stack-based buffer overflow in 1 OllyDBG 1.10 and 2 ImpREC 1.7f allows user-assisted attackers to execute arbitrary code via a crafted DLL file that contains a long string...

CVE-2008-3148

Stack-based buffer overflow in 1 OllyDBG 1.10 and 2 ImpREC 1.7f allows user-assisted attackers to execute arbitrary code via a crafted DLL file that contains a long string...

CVE-2008-3148

Stack-based buffer overflow in 1 OllyDBG 1.10 and 2 ImpREC 1.7f allows user-assisted attackers to execute arbitrary code via a crafted DLL file that contains a long string...

MS07-0 6 5 Message Queuing Service RPC remote overflow analysis-vulnerability warning-the black bar safety net

Author: axis Date: 2007-12-17 Team: http://www.ph4nt0m.org Microsoft's patch link http://www.microsoft.com/technet/security/bulletin/ms07-065.mspx According to ZDI vulnerability description: The specific flaw exists in the RPC interface defined on port 2 to 1 0 3 with UUID...

Design/Logic Flaw

The tblinf32.dll aka vstlbinf.dll ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFil...

CVE-2007-2216

Summary: CVE-2007-2216 affects the tblinf32.dll ActiveX control in Internet Explorer (versions 5.01, 6 SP1, 7). The vulnerability stems from an incorrect IObjectsafety implementation, enabling remote code execution when a user loads a crafted web page. The attack path involves a crafted DLL argum...

Compression Plus CP5DLL32.DLL ZOO Archive Header Processing Overflow RCE

The version of the Compression Plus toolkit installed on the remote Windows host contains a DLL file that is affected by a stack-based overflow condition when processing specially crafted ZOO files. A remote attacker can exploit this issue, via an inconsistent size parameter in a ZOO file header,...

CVE-2006-3423

WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file...

Buffer overflow

Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method...

Default configuration

The default configuration of the America Online AOL client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program...

CVE-2006-0526

The default configuration of the America Online AOL client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program...

Microsoft IIS 4.0 - Remote Buffer Overflow (4)

// source: https://www.securityfocus.com/bid/307/info Microsoft IIS reported prone to a buffer overflow vulnerability in the way IIS handles requests for several file types that require server side processing. This vulnerability may allow a remote attacker to execute arbitrary code on the target...