Mozilla Thunderbird 3.1 < 3.1.5 Multiple Vulnerabilities

The installed version of Thunderbird 3.1 is earlier than 3.1.5. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could lead to memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-64 - By passing an excessively long...

Apple Releases QuickTime 7.6.8

Apple has released QuickTime 7.6.8 to address two vulnerabilities affecting earlier versions of QuickTime for Windows. The first vulnerability is due to improper input validation in the QuickTime ActiveX control. Exploitation of this vulnerability may allow an attacker to execute arbitrary code...

Microsoft Windows based applications may insecurely load dynamic libraries

Overview Some applications for Microsoft Windows may use unsafe methods for determining how to load DLLs. As a result, these applications can be forced to load a DLL from an attacker-controlled source rather than a trusted location. Description Dynamically Linked Libraries DLLs are executable...

Multi-Vendor Autonomy KeyView Filter Multiple Security Issues

SUMMARY Symantec products that ship with the Verity KeyView Filter have updated the module to address multiple security issues being reported in the content filter processing of specifically crafted document formats. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec...

Adobe Flash Media Server < 3.0.5 / 3.5.3 Multiple Vulnerabilities (APSB09-18)

The remote host is running Adobe Flash Media Server, an application server for Flash-based applications. The version running on the remote host is earlier than version 3.0.5 or 3.5.3. Such versions are potentially affected by the following vulnerabilities : - A resource exhaustion vulnerability c...

Adobe Patches Critical Flash Media Server Flaws

Adobe has released a critical patch to cover a pair of serious vulnerabilities affecting the Adobe Flash Media Server FMS 3.5.2 and earlier versions. The update is available for all platforms and addresses issues that allow an attacker to run malicious code on the affected system. Here’s the skin...

Preemptive Protection against Adobe Flash Media Server Directory Traversal Vulnerability (APSB09-18)

A directory traversal vulnerability has been discovered in Adobe Flash Media Server FMS. Flash Media Server FMS is an application server for Flash-based applications. This vulnerability allows a hacker to access normally-inaccessible files and directories through a specially-created HTTP request...

NCTVideoStudio ActiveX DLLs Version 1.6 Remote Heap Overflow PoC

No description provided by source. html ----------------------------------------------------------- br/ Author : Mountassif Mouad Stack br/ ----------------------------------------------------------- br/ NCTVideoStudio ActiveX DLLs Version 1.6 Reamote Heap Overflow Poc br/...

NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

No description provided by source. HTML b NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation /b b br/br/ Author : Mountassif Moad a.k.a Stack br/ br/ br/ b/ RegKey Safe for Script: Falsebr/ RegKey Safe for Init: Falsebr/ Implements IObjectSafety: Truebr/ IDisp Safe: Safe for...

NCTVideoStudio 1.6 File Creation

NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation Author : Mountassif Moad a.k.a Stack RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for untrusted: caller,data !-- Read Me :d: NCTVideoStudio is the package of ActiveX...

NCTVideoStudio ActiveX DLLs 1.6 - Insecure Method File Creation

NCTVideoStudio ActiveX DLLs 1.6 - Insecure Method File Creation NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation Author : Mountassif Moad a.k.a Stack RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for untrusted:...

NCTVideoStudio ActiveX DLLs 1.6 - Insecure Method File Creation

NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation Author : Mountassif Moad a.k.a Stack RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for untrusted: caller,data !-- Read Me :d: NCTVideoStudio is the package of ActiveX...

NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

Exploit for unknown platform in category remote exploits ===================================================================== NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit ===================================================================== NCTVideoStudio ActiveX DLLs...

NCTVideoStudio ActiveX DLLs Version 1.6 Remote Heap Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================ NCTVideoStudio ActiveX DLLs Version 1.6 Remote Heap Overflow PoC ================================================================...

NCTVideoStudio ActiveX DLLs 1.6 - Remote Heap Overflow (PoC)

NCTVideoStudio ActiveX DLLs 1.6 - Remote Heap Overflow PoC ----------------------------------------------------------- Author : Mountassif Mouad Stack ----------------------------------------------------------- NCTVideoStudio ActiveX DLLs Version 1.6 Reamote Heap Overflow Poc...

NCTVideoStudio ActiveX DLLs 1.6 - Remote Heap Overflow (PoC)

----------------------------------------------------------- Author : Mountassif Mouad Stack ----------------------------------------------------------- NCTVideoStudio ActiveX DLLs Version 1.6 Reamote Heap Overflow Poc ----------------------------------------------------------- 000000C8 EBP+12...

CVE-2002-2282

McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs...

CVE-2002-2282

McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for specific DLLs in the user’s home directory even while browsing the local hard drive, enabling local users to run arbitrary code through malicious DLLs. This is described as a local-privilege impact with potential comple...

CVE-2007-4528

The Foreign Function Interface ffi extension in PHP 5.0.5 does not follow safemode restrictions, which allows context-dependent attackers to execute arbitrary code by loading an arbitrary DLL and calling a function, as demonstrated by kernel32.dll and the WinExec function. NOTE: this issue does n...

CA eTrust Intrusion Detection CallCode ActiveX vulnerability

Added: 08/09/2007 CVE: CVE-2007-3302 BID: 25050 OSVDB: 37698 Background CA eTrust Intrusion Detection includes the CallCode Caller.dll ActiveX control. Problem The CallCode ActiveX control is incorrectly marked safe for scripting. This ActiveX control contains scriptable functions which, if a use...